Mail Archives: cygwin/2001/05/02/12:22:38
I'm running sshd as system. I set up SRVANY to run a command prompt
instead of running sshd, so that I could run it manually and see what
was going on. I typed 'whoami' in the prompt - I'm running as system.
The ssh_host*_key files are owned by system.system, they're all 0600. I
read the stuff in the openssh readme file like you said in your other
post, and realized I was running as administrator, and then set up
srvany to start the command prompt. So I'm still stuck with it not
being able to log in. Any other suggestions, anyone?? Thanks for your
help!!!
-David Ziegler
-dziegler AT mit DOT edu
-------------------------
David,
Most likely, the problem is that you are trying to run sshd as the
local user and that user does not have the appropriate user rights to
"be a server" as outlined in /usr/doc/Cygwin/openssh*.README.
Probably the easiest thing for you to do is to set up sshd to run as a
service with srvany or Firedaemon as System.
Who is the owner of the /etc/ssh_host*_key files? What are their
permissions (should be 600 or -rw-------).
-ME
-----Original Message-----
From: cygwin-owner AT sources DOT redhat DOT com
[mailto:cygwin-owner AT sources DOT redhat DOT com] On Behalf Of David Ziegler
Sent: Tuesday, May 01, 2001 8:30 PM
To: cygwin AT cygwin DOT com
Subject: "Invalid user" when logging into SSH
I'm trying to get SSH to work in Win2K with the latest cygwin
distribution. I installed into c:\progra~1\cygwin. I set up SSH with
password authentication, and I can't get it to work. When I run sshd
-d, I get an "invalid user" message. If anyone can help with this, I'd
*really* appreciate it! Thanks. I've included my ssh and sshd output,
and the contents of my sshd_config and passwd.
sshd:
-----------------------------
C:\PROGRA~1\cygwin>c:\progra~1\cygwin\usr\sbin\sshd -d -d -f
c:\progra~1\cygwin\ etc\sshd_config
debug1: Seeding random number generator
debug1: sshd version OpenSSH_2.5.2p2
debug1: load_private_key_autodetect: type 0 RSA1
debug1: read SSH2 private key done: name rsa w/o comment success 1
debug1: load_private_key_autodetect: type 1 RSA
debug1: read SSH2 private key done: name dsa w/o comment success 1
debug1: load_private_key_autodetect: type 2 DSA
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
Generating 768 bit RSA key.
RSA key generation complete.
debug1: Server will not fork when running in debugging mode. Connection
from 127.0.0.1 port 2039
debug1: Client protocol version 1.5; client software version
OpenSSH_2.5.2p2
debug1: match: OpenSSH_2.5.2p2 pat ^OpenSSH
debug1: Local version string SSH-1.99-OpenSSH_2.5.2p2
debug1: Rhosts Authentication disabled, originating port not trusted.
debug1: Sent 768 bit server key and 1024 bit host key.
debug1: Encryption type: 3des
debug1: Received session key; encryption turned on.
debug1: Installing crc compensation attack detector.
debug1: do_authentication: illegal user Administrator
debug1: Attempting authentication for illegal user Administrator. Failed
password for illegal user Administrator from 127.0.0.1 port 2039 Failed
password for illegal user Administrator from 127.0.0.1 port 2039 Failed
password for illegal user Administrator from 127.0.0.1 port 2039
Connection closed by 127.0.0.1
debug1: Calling cleanup 0x416324(0x0)
------------------------------
ssh:
------------------------------
$ ssh -v -lAdministrator localhost
OpenSSH_2.5.2p2, SSH protocols 1.5/2.0, OpenSSL 0x0090600f
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be
trusted.
debug1: ssh_connect: getuid 500 geteuid 500 anon 1
debug1: Connecting to localhost [127.0.0.1] port 22.
debug1: Connection established.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Bad ownership or mode(0600) for '/etc/ssh_host_key'.
It is recommended that your private key files are NOT accessible by
others.
debug1: identity file /home/administrator/.ssh/identity type 0
debug1: identity file /home/administrator/.ssh/id_rsa type 1
debug1: identity file /home/administrator/.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version
OpenSSH_2.5.2p2
debug1: match: OpenSSH_2.5.2p2 pat ^OpenSSH
debug1: Local version string SSH-1.5-OpenSSH_2.5.2p2
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
debug1: Forcing accepting of host key for loopback/localhost.
debug1: Encryption type: 3des
debug1: Sent encrypted session key.
debug1: Installing crc compensation attack detector.
debug1: Received encrypted confirmation.
debug1: Doing password authentication. Administrator AT localhost's
password: Permission denied, please try again. Administrator AT localhost's
password: Permission denied, please try again. Administrator AT localhost's
password: Permission denied.
debug1: Calling cleanup 0x41a304(0x0)
----------------------------------
sshd_config:
----------------------------------
Port 22
Protocol 2,1
ListenAddress 0.0.0.0
HostKey c:/progra~1/cygwin/etc/ssh_host_key
HostKey c:/progra~1/cygwin/etc/ssh_host_rsa_key
HostKey c:/progra~1/cygwin/etc/ssh_host_dsa_key
ServerKeyBits 768
LoginGraceTime 600
KeyRegenerationInterval 3600
PermitRootLogin yes
IgnoreRhosts yes
StrictModes yes
X11Forwarding no
X11DisplayOffset 10
PrintMotd yes
KeepAlive yes
SyslogFacility AUTH
LogLevel INFO
RhostsAuthentication no
RhostsRSAAuthentication no
RSAAuthentication no
PasswordAuthentication yes
PermitEmptyPasswords no
CheckMail no
UseLogin no
--------------------------------
passwd:
-------------------------------
Everyone:*:0:0:,S-1-1-0::
SYSTEM:*:18:18:,S-1-5-18::
Administrators:*:544:544:,S-1-5-32-544::
Administrator::500:513:,S-1-5-21-1614895754-776561741-1801674531-500:/ho
me/administrator:/bin/sh
Guest:*:501:513:,S-1-5-21-1614895754-776561741-1801674531-501::
VUSR_DZIEGLER:*:1000:513:VSA Server
Account,S-1-5-21-1614895754-776561741-1801674531-1000::
-------------------------------
-David Ziegler
-dziegler AT mit DOT edu
--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple
- Raw text -