Re: pserver unrecognized auth error.

[Larry Jones]

address@hidden writes:
> 
> where cvspserver contains :
> args="--allow-root=/var/cvs_repositories/ort /var/cvs_repositories/den"

You need to repeat the "--allow-root=":

        args="--allow-root=/var/cvs_repositories/ort 
--allow-root=/var/cvs_repositories/den"

> if [ -n "$args" ]; then
>     exec /usr/local/cvs-1.12.1/bin/cvs -t -f $args pserver

You don't really want -t.

>     echo "runing cvs with -f $args pserver"

Nor do you want that stray message injected into the client/server
protocol.

> else
>     echo "no repository configured in $CONF" 1>&2
>     exit 2
> fi

[...]

> # telnet localhost 2401
> Trying 127.0.0.1...
> Connected to localhost.localdomain (127.0.0.1).
> Escape character is '^]'.
> /var/cvs_repositories/ort
> /var/cvs_repositories/den
> 
> cvs [pserver aborted]: bad auth protocol start:

My guess is that /usr/local/cvs-1.12.1/bin/cvs is also a (defective)
shell script.  Or at least not a normal CVS executable.

-Larry Jones

Talk about someone easy to exploit! -- Calvin