[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Problem with admin privileges

From: Julian Opificius
Subject: Re: Problem with admin privileges
Date: Mon, 27 Jun 2005 11:57:56 -0500
User-agent: Mozilla Thunderbird 1.0.2 (Windows/20050317)

Larry Jones wrote:
Julian Opificius writes:

That's the confusing thing; "id" tells me I'm a member of cvsadmin. Is there any restriction about userid range? I'm 1000, cvsadmin group is 502.

In that case, my guess is that you're not using your account, you're
using the generic "cvs" account (you say all of your CVS users are
mapped to the same "cvs" system user and it's the system user that has
to be in the cvsadmin group).  Mapping all of your CVS users to the same
system user destroys any system-level security or accountability since
everyone appears to be the same user.  If you have SSH access to the
system, you're much better off using it directly in :ext: mode as
individual system users rather than tunnelling pserver and mapping
everyone to the same user.

-Larry Jones

I'm not quite sure what you mean by "mapping" users. I want each user to have his own login to the system, and I want to control access to CVS repositories on a per-user basis, which is why I use pserver. I need Internet access, which is why I tunnel across ssh.

The instructions I followed to configure cvs suggested I use a
"userlogin:<password>:cvsaccount" structure to the $CVSROOT/CVSROOT/passwd file, so each user would have his/her specific cvs-related privileges, but that the server would run as user cvs.

If I'm not understanding this correctly, please let me know :-)


reply via email to

[Prev in Thread] Current Thread [Next in Thread]