FC6 cvs can not use pserver

[GDan]

Hi,

I've a problem running CVS over pserver (fast forward to the bottom of
this text to read problem).

Todate, I've installed FC6 with no telnet service (selected via
install menus). Many moon's later then setup CVS and create a
repository, added a group for CVS called "cvs" (no cvs user, just
group), changed the group settings on the repositoy to the
new created "cvs" group and set the sticky bit on the repository so
that all users of that group, even if not a primary group
can read, write and execute.  Added a user to the group "cvs", told
CVS to use system password authentication (i.e. no password
file within repository + changed parameter in /repository/CVSROOT/
config).

All users of the newly created "cvs" group can login locally, checkout
CVSROOT folder which was created when the repository was
initalised.  They can also perform CVS update's a-ok (except super
user "root").

I used SSH sessions and putty on a Windoze box to admin and so I
didn't install telnet service, as a side effect, xinetd service was
not
installed, I mean, not just not switched on in my run level but not
installed according to "chkconfig --list | grep xinetd".

So I installed, telnet using "#yum install telnet-server.i386".
xinetd service now listed in "chkconfig --list" output, to
test the "xinetd" service, I started "telnet" and can successful login
remotely from my Windoze box over Telnet.

Before I added the "cvs" I created a writers file, limiting access to
a subset of users, I'll get rid of this shortly.

My repository config file (/cvs/CVSROOT/config):

#SystemAuth=no
LockDir=/cvs.lock
TopLevelAdmin=yes
#LogHistory=TOEFWUPCGMAR
#RereadLogAfterVerify=always
# 25-05-07 allows Windows clients commit access.
PreservePermissions=no

My xinetd CVS start up config. file (/etc/xinetd.d/cvs):

# default: off
# description: The CVS service can record the history of your source \
#              files. CVS stores all the versions of a file in a
single \
#              file in a clever way that only stores the differences \
#              between versions.
service cvspserver
{
        disable = no
        id                      = cvspserver
        port                    = 2401
        socket_type             = stream
        protocol                = tcp
        wait                    = no
        user                    = root
        passenv                 =
        server                  = /usr/bin/cvs
        server_args             = -f --allow-root=/cvs pserver
}

List of permissions on repository (/cvs)

drwxrwsrwt  3 root cvs  4096 May 25 23:05 .
drwxr-xr-x 25 root root 4096 May 26 21:58 ..
drwxrwsrwt  3 root cvs  4096 May 26 23:46 CVSROOT

-rwxrwsrwt 1 root cvs 1226 May 25 15:55 verifymsg,v
-rwxrwsrwt 1 root cvs    0 May 25 15:55 val-tags
-rwxrwsrwt 1 root cvs 1079 May 25 15:55 taginfo,v
-rwxrwsrwt 1 root cvs  849 May 25 15:55 rcsinfo,v
-rwxrwsrwt 1 root cvs  764 May 25 15:55 notify,v
-rwxrwsrwt 1 root cvs 1351 May 25 15:55 modules,v
-rwxrwsrwt 1 root cvs 1368 May 25 15:55 loginfo,v
drwxrwsrwt 2 root cvs 4096 May 25 15:55 Emptydir
-rwxrwsrwt 1 root cvs 1225 May 25 15:55 editinfo,v
-rwxrwsrwt 1 root cvs  802 May 25 15:55 cvswrappers,v
-rwxrwsrwt 1 root cvs  960 May 25 15:55 commitinfo,v
-r-xrwsr-- 1 root cvs 1026 May 25 16:13 .#verifymsg
-r-xrwsr-- 1 root cvs  879 May 25 16:13 .#taginfo
-r-xrwsr-- 1 root cvs  649 May 25 16:13 .#rcsinfo
-r-xrwsr-- 1 root cvs  564 May 25 16:13 .#notify
-r-xrwsr-- 1 root cvs 1151 May 25 16:13 .#modules
-r-xrwsr-- 1 root cvs 1168 May 25 16:13 .#loginfo
-r-xrwsr-- 1 root cvs 1025 May 25 16:13 .#editinfo
-r-xrwsr-- 1 root cvs  602 May 25 16:13 .#cvswrappers
-rwxrwsrwt 1 root cvs 1534 May 25 16:13 config,v
-r-xrwsr-- 1 root cvs  760 May 25 16:13 .#commitinfo
-r-xrwsr-- 1 root cvs  495 May 25 16:13 .#checkoutlist
-r-xrwsr-- 1 root cvs 1070 May 25 16:43 .#config
-rwxrwsrwt 1 root cvs  209 May 25 17:05 writers,v
-r--rwSr-- 1 root cvs    6 May 25 17:05 .#writers
-rwxrwsrwt 1 root cvs    6 May 25 17:05 writers
-rwxrwsrwt 1 root cvs 1026 May 25 17:05 verifymsg
-rwxrwsrwt 1 root cvs  879 May 25 17:05 taginfo
-rwxrwsrwt 1 root cvs  649 May 25 17:05 rcsinfo
-rwxrwsrwt 1 root cvs  564 May 25 17:05 notify
-rwxrwsrwt 1 root cvs 1151 May 25 17:05 modules
-rwxrwsrwt 1 root cvs 1168 May 25 17:05 loginfo
-rwxrwsrwt 1 root cvs 1025 May 25 17:05 editinfo
-rwxrwsrwt 1 root cvs  602 May 25 17:05 cvswrappers
-rwxrwsrwt 1 root cvs  760 May 25 17:05 commitinfo
-rwxrwsrwt 1 root cvs  826 May 25 17:05 checkoutlist,v
-rwxrwsrwt 1 root cvs  503 May 25 17:05 checkoutlist
-rwxrwxrwt 1 root cvs 1002 May 25 22:09 history
-rwxrwsrwt 1 root cvs 1123 May 25 22:57 config~
-rwxrwsrwt 1 root cvs 1108 May 25 23:04 config
drwxrwsrwt 3 root cvs 4096 May 25 23:05 ..
drwxrwsrwt 3 root cvs 4096 May 26 23:46 .


PROBLEM:

Any system user who's also part of the newly created "cvs" group can
login to CVS using pserver but NO USER can checkout the
basic repository over pserver.  Heres breakdown of errer messages:

login as: wacko
address@hidden's password:
Last login: Mon May 26 21:59:58 2003 from 192.168.60.4
address@hidden ~]$ cvs login
Logging in to :pserver:address@hidden:2401/cvs
CVS password:
address@hidden ~]$ cd temp
address@hidden temp]$ cvs co CVSROOT
cvs checkout: cannot open /home/wacko/.cvsignore: Permission denied
cvs [checkout aborted]: cannot make directory /cvs.lock/CVSROOT:
Permission denied
address@hidden temp]$

Every user has a ".cvsignore: Permission denied" error and lock
error.  Local CVS login and checkout works a-ok, heres the output:

address@hidden temp]$ cvs -d /cvs co CVSROOT
cvs checkout: Updating CVSROOT
U CVSROOT/checkoutlist
U CVSROOT/commitinfo
U CVSROOT/config
U CVSROOT/cvswrappers
U CVSROOT/editinfo
U CVSROOT/loginfo
U CVSROOT/modules
U CVSROOT/notify
U CVSROOT/rcsinfo
U CVSROOT/taginfo
U CVSROOT/verifymsg
U CVSROOT/writers
address@hidden temp]$

CAN ANYONE HELP OUT?