Recent changes to Installation Notes

Installation Notes modified by adamy

adamy — Sat, 28 Jan 2017 17:05:52 -0000

--- v13
+++ v14
@@ -18,7 +18,7 @@

 * Unpack; I advice unpacking into **c:\cvsnt** avoiding possible contamination of/by alternative CVSNT installations, for example bundled with* WinCVS* and *Tortisecvs*; Note most alternative installations (including cygwin) can run side-by-side.

-* You need one account which will be a CVS administrative account and generally one (or more) which will be a normal user accounts. 
+* You need one account which will be a CVS administrative account and generally one (or more) which shall act as normal user accounts. 

 The two accounts may either be created using the Computer Management console or directly, as below.

Installation Notes modified by adamy

adamy — Fri, 27 Jan 2017 14:26:48 -0000

--- v12
+++ v13
@@ -108,7 +108,7 @@
 Upon initial installation no accounts are available,as such the windows **sspi** authentication mode must be used to enable `pserver` and/or `sserver` account access. Under the previously created `cvsuser` account,  open a command window and execute.

 ~~~
-  set cvsroot=:sspi:<computername>:/[rpository]
+  set cvsroot=:sspi:<computername>:/[repository]
   cvs passwd -a <account name="">
 ~~~

Installation Notes modified by adamy

adamy — Fri, 27 Jan 2017 14:11:09 -0000

--- v11
+++ v12
@@ -94,8 +94,9 @@
 net start CVSNT
 ~~~

-* Access the cvsservice control panel; see the below shortcut.  Add the CVS repository (under Repository configuration) plus review remaining tabs;
+* Access the cvsservice control panel; see the below shortcut.  

+Add the CVS repository details into the *Repository configuration Tab* plus review remaining tabs.
 ~~~
   rundll32 shell32.dll, Control_RunDLL "c:\cvsnt\cvsntcpl.dll"
 ~~~
@@ -116,7 +117,6 @@
 * Aliasing CVS users to real accounts

 In order to have many CVS user logins you don't need to create masses of system accounts! Instead you can "alias" a CVS login to a "real" account using this command:
-
 ~~~
     cvs passwd -r <real accountname=""> -a <cvs login="" name="">
 ~~~
@@ -124,25 +124,25 @@
 What will happen now is that to CVS the user will be known and registered as the CVS login given in the command, but for file operations that will encounter permission issues the commands will be executed in the context of the real system account that was aliased. This makes it possible to use NTFS file system permissions to limit access to certain parts of the repository to some users. You simply create a system account for which you set limited permissions and then you alias the CVS login to this user.

 Note that this command will fail if there is a space embedded in the real account name! DON'T ever use spaces in these contexts!!!!! (But using quotes may solve the problem like this:
-cvs passwd -r "system admin" -a "new user"
+~~~
+  cvs passwd -r "system admin" -a "new user
+~~~
+
 Since I don't have a valid user with embedded space I could not check the quotes trick with the valid user name parameter, but adding a CVS login with space embedded *can* be done with quotes.)

 Examples:
 ~~~
-
   cvs passwd -r cvsuser -a charlie
 ~~~

 or if you want the new user to be a CVS administrator:
 ~~~
-
   cvs passwd -r cvsadmin -a rogerh
 ~~~

 Note about Domain users:

 You can add domain users with the following command:
-
 ~~~
   cvs passwd -r <real accountname=""> -D <domain name=""> -a <cvs login="" name="">
 ~~~

Installation Notes modified by adamy

adamy — Fri, 27 Jan 2017 02:22:23 -0000

--- v10
+++ v11
@@ -1,8 +1,12 @@
 # Installation Notes:
+-----
+
 Running as a system administrator.

-* Download latest distribution
+* Download latest CVSNT distribution.

+* If not already installed, download and install [Microsoft Visual C++ 2008 Redistributable Package (x86)](https://www.microsoft.com/en-us/download/details.aspx?id=29)  
+  
 * When upgrading, stop and uninstall any previous versions

 ~~~

Installation Notes modified by adamy

adamy — Fri, 27 Jan 2017 00:05:31 -0000

--- v9
+++ v10
@@ -18,12 +18,14 @@

 The two accounts may either be created using the Computer Management console or directly, as below.

- **1]**    The CVS administrator needs to  be an administrator plus have service rights enabled.  
-
+ **1]**    The CVS administrator needs to  be an administrator plus have service rights enabled. 
+ 
+ The account shall only be used by the service, therefore should have limited login functionality, as follows:
+  
 ~~~
   net user cvsservice [passwd] /add /expires:never /passwordchg:no \
         /comment:"cvsservice account" /usercomment:"cvsservice account" \
-          /workstation:"[host-name]"
+        /workstation:"[host-name]"
   net localgroup administrators cvservice /add
   wmic UserAccount where Name=\"cvservice" set PasswordExpires=FALSE

@@ -32,11 +34,11 @@
   editrights -u cvsservice -a SeTcbPrivilege
   editrights -u cvsservice -a SeServiceLogonRight

-   Note: 'editrights' is available under cygwin, 
-       otherwise use 'ntrights' or the window control panel.
+   Note: 'editrights' is available under cygwin, itherwise use 'ntrights'
+     or the window control panel.
 ~~~

- ** 2]**  I advise the same account has login abilities disabled.
+I advise the same account has non-service related login abilities disabled.

 ~~~
   editrights -u cvsservice -a SeDenyInteractiveLogonRight
@@ -44,7 +46,7 @@
   editrights -u cvsservice -a SeDenyBatchLogonRight
 ~~~

-  **3]** Create an optional "cvsuser" account; I advise that this account owns the CVS repository.
+ **2]** Create an optional "cvsuser" account; I advise that this account owns the CVS repository.

 ~~~
   net user cvsuser [passwd] /add /expires:never /passwordchg:no \

Installation Notes modified by adamy

adamy — Fri, 27 Jan 2017 00:01:44 -0000

--- v8
+++ v9
@@ -3,7 +3,7 @@

 * Download latest distribution

-* When upgrading, stop and uninstall any previous versiions
+* When upgrading, stop and uninstall any previous versions

 ~~~
   net stop CVSLock

Discussion for Installation Notes page

adamy — Thu, 26 Jan 2017 17:12:25 -0000

CVSNT 2.5.05 legacy published

Installation Notes modified by adamy

adamy — Thu, 26 Jan 2017 16:19:04 -0000

--- v7
+++ v8
@@ -96,9 +96,9 @@

 -----

-* To enable pserver/sserver logins, the account logins must be created.  
+*  Enable pserver/sserver logins, the account logins must be created.  

-Upon installation no accounts are available, hence the windows **sspi** authentication mode must be used. Under the previously created `cvsuser` account,  open a command window and execute.
+Upon initial installation no accounts are available,as such the windows **sspi** authentication mode must be used to enable `pserver` and/or `sserver` account access. Under the previously created `cvsuser` account,  open a command window and execute.

 ~~~
   set cvsroot=:sspi:<computername>:/[rpository]
@@ -107,6 +107,44 @@

 You will now be asked to enter a password for this user. This password is only for CVS use so it should not be the real system password! Enter the password twice.  Now the CVSROOT/passwd file will be created and the user you entered will be added to the list in this file.

+* Aliasing CVS users to real accounts
+
+In order to have many CVS user logins you don't need to create masses of system accounts! Instead you can "alias" a CVS login to a "real" account using this command:
+
+~~~
+    cvs passwd -r <real accountname=""> -a <cvs login="" name="">
+~~~
+
+What will happen now is that to CVS the user will be known and registered as the CVS login given in the command, but for file operations that will encounter permission issues the commands will be executed in the context of the real system account that was aliased. This makes it possible to use NTFS file system permissions to limit access to certain parts of the repository to some users. You simply create a system account for which you set limited permissions and then you alias the CVS login to this user.
+
+Note that this command will fail if there is a space embedded in the real account name! DON'T ever use spaces in these contexts!!!!! (But using quotes may solve the problem like this:
+cvs passwd -r "system admin" -a "new user"
+Since I don't have a valid user with embedded space I could not check the quotes trick with the valid user name parameter, but adding a CVS login with space embedded *can* be done with quotes.)
+
+Examples:
+~~~
+
+  cvs passwd -r cvsuser -a charlie
+~~~
+
+or if you want the new user to be a CVS administrator:
+~~~
+
+  cvs passwd -r cvsadmin -a rogerh
+~~~
+
+Note about Domain users:
+
+You can add domain users with the following command:
+
+~~~
+  cvs passwd -r <real accountname=""> -D <domain name=""> -a <cvs login="" name="">
+~~~
+
+This command is reported by a user to have worked for him. I cannot check it because I don't have a domain. But based on information from the mail list I think that it will only work if there is a trust between the CVSNT server PC and the domain controller. If the CVSNT server PC is a member of the domain then this is the case.
+
+The server is now ready to be used and you can check the pserver functionality by doing this:
+

Installation Notes modified by adamy

adamy — Thu, 26 Jan 2017 16:15:14 -0000

--- v6
+++ v7
@@ -14,7 +14,11 @@

 * Unpack; I advice unpacking into **c:\cvsnt** avoiding possible contamination of/by alternative CVSNT installations, for example bundled with* WinCVS* and *Tortisecvs*; Note most alternative installations (including cygwin) can run side-by-side.

-* Create the service account *'cvsservice*'.  The account must be an administrator plus have service rights enabled.  
+* You need one account which will be a CVS administrative account and generally one (or more) which will be a normal user accounts. 
+
+The two accounts may either be created using the Computer Management console or directly, as below.
+
+ **1]**    The CVS administrator needs to  be an administrator plus have service rights enabled.  

 ~~~
   net user cvsservice [passwd] /add /expires:never /passwordchg:no \
@@ -32,7 +36,7 @@
        otherwise use 'ntrights' or the window control panel.
 ~~~

-* I advise the same account has login abilities disabled.
+ ** 2]**  I advise the same account has login abilities disabled.

 ~~~
   editrights -u cvsservice -a SeDenyInteractiveLogonRight
@@ -40,7 +44,7 @@
   editrights -u cvsservice -a SeDenyBatchLogonRight
 ~~~

-* Create an optional "cvsuser" account; I advise that this account owns the CVS repository.
+  **3]** Create an optional "cvsuser" account; I advise that this account owns the CVS repository.

 ~~~
   net user cvsuser [passwd] /add /expires:never /passwordchg:no \

Installation Notes modified by adamy

adamy — Thu, 26 Jan 2017 16:09:43 -0000

--- v5
+++ v6
@@ -87,18 +87,18 @@
 * Access the cvsservice control panel; see the below shortcut.  Add the CVS repository (under Repository configuration) plus review remaining tabs;

 ~~~
-rundll32 shell32.dll, Control_RunDLL "c:\cvsnt\cvsntcpl.dll"
+  rundll32 shell32.dll, Control_RunDLL "c:\cvsnt\cvsntcpl.dll"
 ~~~

 -----

 * To enable pserver/sserver logins, the account logins must be created.  

-Upon installation no accounts are available, hence the windows **sspi** authentication mode must be user.  Under the previoys created `cvsuser` account,  open a command window and do the following (replace items  with the real values from your system). 
+Upon installation no accounts are available, hence the windows **sspi** authentication mode must be used. Under the previously created `cvsuser` account,  open a command window and execute.

 ~~~
-set cvsroot=:sspi:<computername>:/[rpository]
-cvs passwd -a <account name="">
+  set cvsroot=:sspi:<computername>:/[rpository]
+  cvs passwd -a <account name="">
 ~~~

 You will now be asked to enter a password for this user. This password is only for CVS use so it should not be the real system password! Enter the password twice.  Now the CVSROOT/passwd file will be created and the user you entered will be added to the list in this file.