| View previous topic :: View next topic |
| Author |
Message |
hanj
Veteran
Joined: 19 Aug 2003
Posts: 1500
|
 Posted: Tue Aug 31, 2004 5:24 am Post subject: troubles with cvs/pam_ldap and checking out files |
 |
|
Hello
I'm trying to get a cvs server installed, using LDAP(pam_ldap) for authentication, but am running into problems.. I'm able to authenticate and log in, but attemtping to checkout files, errors occur. First off, the goal is to not have any cvs users on the local system, and to use LDAP to grab users/passwords only.
Currently cvs is spawned from xinetd rather then cvsd. I had troubles implementing LDAP support in cvsd, but was able to get it going using pam_ldap/xinetd.d/cvsperserver. I wouldn't mind getting cvsd rolling w/jail, etc.. but wanted to get something working first, then move to cvsd.
If the user exists on the system.. with 'locked' password (passwd -l user).. I'm able to login and checkout files. If I remove the user, I can login (via LDAP), but unable to checkout files.. here is the error:
| Code: | # cvs -d :pserver:tmpuser@192.168.0.3:/var/lib/cvsd/repo1 co .
Fatal error, aborting.
tmpuser: no such system user |
As you can see it is complaining about 'no such system user', but I was able to originally log in?!? Appears to not be looking at /etc/pam.d/cvs for checkout.
Here is my /etc/xinetd.d/cvspserver file:
| Code: | service cvspserver
{
disable = no
socket_type = stream
wait = no
user = root
log_type = FILE /var/log/cvspserver
protocol = tcp
env = HOME=/var/lib/cvsd/
log_on_failure += USERID
port = 2401
server = /usr/bin/cvs
server_args = -f --allow-root=/var/lib/cvsd/repo1 --allow-root=/var/lib/cvsd/repo2 pserver
}
|
Here is my /etc/pam.d/cvs file
| Code: | auth required /lib/security/pam_ldap.so
account required /lib/security/pam_ldap.so
password required /lib/security/pam_ldap.so
session required /lib/security/pam_ldap.so |
Here is /etc/ldap.conf
| Code: | base o=mybase
uri ldaps://192.168.0.4/ |
Any help is greatly appreciated.
Thanks!
hanji |
|
| Back to top |
|
 |
drescherjm
Advocate
Joined: 05 Jun 2004
Posts: 2790
Location: Pittsburgh, PA, USA
|
| Posted: Tue Jan 11, 2005 9:56 pm Post subject: |
|
|
I know this is way late but I just figured out a solution to this as I ran into the same problem. The solution was to add all the users that need cvs access to the CVSROOT\passwd file like this username::cvsd
_________________
John
My gentoo overlay
Instructons for overlay |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
