[Cvs-nserver-users] getting pserver/nserver working...

[Alexey M. <al...@hs...>]

>>>>> "JR" == Jens Rosenthal <mai...@ed...> writes:

 JR> --cut-- root@cvsserver:~ # echo -e
 JR> "econe\\jrosenthal\0steeler#\00"|checkpassword-pam -s cvspserver
 JR> --stdin --stdout --debug Reading username and password Username
 JR> 'econe\jrosenthal' Password read successfully Initializing PAM
 JR> library using service name 'cvspserver' Pam library
 JR> initialization succeeded conversation(): msg[0], style
 JR> PAM_PROMPT_ECHO_OFF, msg = "Password: " Authentication passed
 JR> Account management succeeded Setting PAM credentials succeeded
 JR> Terminating PAM library Exiting with status 0 --/cut---

Ok, good.  A bit strange that your username actually contains the "\j"
sequence: 'econe\jrosenthal'.  Hope that's ok, if the
checkpassword-pam works. 

 JR> So it should be posible to get the server up, but I can't figure
 JR> out how to set up the script to handle the network connection.

 JR> I took the script from the INSTALL-file/FAQ:

I believe you're talking about the "NEWS.nserver" file. 


You should take a look at the "Administrator's Guide", available at
http://cvs-nserver.sf.net/


You will have to combine the invocation of cvs-pserver and the
invocation of checkpassword-pam, both described there.

To save you the trouble, I'll cut-n-paste my own setup:


/home/alexm/cvs/src/cvs-pserver /repos -- \
/home/alexm/checkpassword-pam/checkpassword-pam -s cvspserver -- \
/home/alexm/cvs/src/cvs pserver

I've left the pathnames so you could see which of the arguments is a
binary file, and which is the argument (e.g., "pserver").

 JR> --cut-- #!/bin/sh

 JR> exec /usr/bin/cvs-pserver /CVS/PHP /CVS/JAVA -- \
 JR> /usr/bin/checkpassword-pam /usr/bin/cvs pserver --/cut--

Strange.  This should work also.  Maybe you're missing the "-s"
option?  Add the "--debug" option to checkpassword-pam and look to
logs.

 JR> using this the result is the following:

 JR> --cut-- root@cvsserver:~ # ngrep -e [a-zA-Z0-9] tcp port 2401
 JR> interface: eth0 (10.21.48.0/255.255.254.0) filter: ip and ( tcp
 JR> port 2401 ) match: [a-zA-Z0-9] ###### T 10.0.11.149:3349 ->
 JR> 10.21.48.217:2401 [AP] BEGIN VERIFICATION REQUEST.  ### T
 JR> 10.0.11.149:3349 -> 10.21.48.217:2401 [AP]
 JR> /CVS/PHP:.econe\jrosenthal.AZ,dd'd O.END VERIFICATION REQUEST.
 JR> ### T 10.21.48.217:2401 -> 10.0.11.149:3349 [AP] I HATE YOU.  # T
 JR> 10.21.48.217:2401 -> 10.0.11.149:3349 [AP] I HATE YOU.  #####
 JR> --/cut--

 JR> experimenting delivered me a slightly better result:

 JR> --cut-- #!/bin/sh

 JR> /usr/local/bin/checkpassword-pam -- \ /usr/bin/cvs-pserver
 JR> /CVS/PHP /CVS/JAVA -- \ /usr/bin/cvs pserver --/cut--

 JR> leads to this...

This will not work.


Yes, I understand that setting up this could be a bit confusing at
first time...    That's the price of flexibility, I believe. 


Hope this helps,

--alexm