From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <borodin@zarya-k.ru>
Date: Thu, 13 Nov 2003 12:51:33 +0300
From: Andrew Borodin <borodin@zarya-k.ru>
To: community@altlinux.ru
Subject: Re: [Comm] cvs server --- passwd file
Message-ID: <20031113095133.GF1509@borodin.zarya>
References: <19715364187.20031112130940@taxpol.krasnoyarsk.su>
	<20031112072057.GC1509@borodin.zarya>
	<m3smkuue43.fsf@pc313.belcaf.minsk.by>
	<13835361171.20031112184257@taxpol.krasnoyarsk.su>
	<m3k76594gh.fsf@pc313.belcaf.minsk.by>
	<623736375.20031113100353@taxpol.krasnoyarsk.su>
	<20031113081320.GE1509@borodin.zarya>
	<16324404156.20031113154821@taxpol.krasnoyarsk.su>
Mime-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <16324404156.20031113154821@taxpol.krasnoyarsk.su>
User-Agent: Mutt/1.4i
X-BeenThere: community@altlinux.ru
X-Mailman-Version: 2.1.3
Precedence: list
Reply-To: community@altlinux.ru
List-Id: <community.altlinux.ru>
List-Unsubscribe: <listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=unsubscribe>
List-Archive: </pipermail/community>
List-Post: <mailto:community@altlinux.ru>
List-Help: <mailto:community-request@altlinux.ru?subject=help>
List-Subscribe: <listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Thu, 13 Nov 2003 09:54:29 -0000
Archived-At: <http://lore.altlinux.org/community/20031113095133.GF1509@borodin.zarya/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

On Thu, Nov 13, 2003 at 03:48:21PM +0700, aek wrote:
> Hello Andrew,
> 
> Thursday, November 13, 2003, 3:13:20 PM, you wrote:
> 
> AB>   Попробуйте теста ради вписать сюда свой пароль из
> AB> /etc/tcb/<user>/shadow
> 
> проблема решается всетаки добавлением юзера в систему
> (без определения его пароля,и выставления его шела в /dev/null)
> 
> правда какого фига он туда лезет, непонятно, ведь
> в /usr/local/cvs/CVSROOT/config я по человечески
> раскоментарил SystemAuth=no
> 
> 
> Ну, вообщем, вот таквот, через попу...
> 

  Почему? Вот что написано в info cvs:
  
Here is an example `passwd' file with five entries:

 anonymous:
 bach:ULtgRLXo7NRxs
 spwang:1sOp854gDF3DY
 melissa:tGX1fS8sun6rY:pubcvs
 qproj:XR4EZcEs0szik:pubcvs

<skip>

The fourth line will grant access to `melissa', if she supplies the
correct password, but her CVS operations will actually run on the
server side under the system user `pubcvs'.  Thus, there need not be
any system user named `melissa', but there _must_ be one named `pubcvs'.

The fifth line shows that system user identities can be shared: any
client who successfully authenticates as `qproj' will actually run as
`pubcvs', just as `melissa' does.  That way you could create a single,
shared system user for each project in your repository, and give each
developer their own line in the `$CVSROOT/CVSROOT/passwd' file.  The CVS
username on each line would be different, but the system username would
be the same.  The reason to have different CVS usernames is that CVS
will log their actions under those names: when `melissa' commits a
change to a project, the checkin is recorded in the project's history
under the name `melissa', not `pubcvs'.  And the reason to have them
share a system username is so that you can arrange permissions in the
relevant area of the repository such that only that account has
write-permission there.
                                             
  Т. е. хотя бы один реальный пользователь для работы cvs в системе
должен быть.  Все остальные, кто действительно будет работать с
репозитарием, --- нет.

  С уважением,
  А. Бородин.