Re: CVS and GSSAPI: Unknown command: `gserver'

[Jonah Tsai]

On Thursday, February 14, 2002, at 06:39  PM, address@hidden 
wrote:

> After some difficulty I finally got CVS to compile on a Solaris 7 box.
> Now I am getting errors testing CVS with GSSAPI.  Any ideas as to what
> is going on?
>
> [SERVER]
>
> /etc/inetd.conf
> cpserver stream tcp nowait cvsadmin /projects/sys/sysint/cvs-1.11.1p1/
> src/cvs cvs -f --allow-root=/misc/fl/cvs gserver

That should have been   .... --allow-root=/misc/fl/cvs pserver.

There is no "gserver" command, although there is a gserver mode. This is 
because "gserver" piggybacks on pserver.

On the server side, you need to give "pserver" command line option so 
that pserver_authenticate_connection() will be called. This function 
calls gserver_authenticate_connection() if the client issues a "BEGIN 
GSSAPI REQUEST\n" protocol request. The client sends this request by 
using "cvs -d :gserver:..." command.

Don't ask why there is no separate gserver command, I have no idea why 
it is so.


> /etc/services
> writesrv 2401/tcp cpserver # AIX write server, or CVS Password server

No idea why you are twisting this port name. In client.c, there is a 
place the port name "cvspserver" is hardcoded in. If you put this entry 
in your client /etc/services, your cvs client will still be looking up 
port name "cvspserver" and, of course, it won't find the port name 
unless you modified the source code (why modify that??? It's just a 
symbolic name!).

> [CLIENT]
>
> % echo $CVSROOT
> :gserver:my.cvs.server:/misc/fl/cvs
>
> % cvs -a -x checkout rcsb_cvs
> cvs [checkout aborted]: error from server my.cvs.server: Unknown
> command: `gserver'


In addition, I assume that you know that you have to create a 
cvs@<REALM> Kerberos instance and export it to the CVS server's 
/etc/krb5/krb5.keytab.


Jonah Tsai