Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Date:	Fri, 26 Oct 2001 20:00:24 +0200
From:	Corinna Vinschen <cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: chmod/chown + ntsec doesn't work (was OpenSSH and RSA authentication problems)
Message-ID:	<20011026200024.A7622@cygbert.vinschen.de>
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<3BBDC64A DOT 62A1E696 AT cportcorp DOT com> <20011025141244 DOT A1888 AT dothill DOT com>
Mime-Version:	1.0
User-Agent:	Mutt/1.2.5i

On Thu, Oct 25, 2001 at 02:12:44PM -0400, Jason Tishler wrote:
> Peter,
> 
> On Fri, Oct 05, 2001 at 10:40:10AM -0400, Peter Buckley wrote:
> > But, chown still doesn't work.
> 
> I just stumbled over chown not working under certain conditions from
> a ssh login myself.  If I ssh into a domain machine without supplying
> a password, then I seem to be restricted in the operations that I
> can do -- even though I am a member of the local Administrators group.
> For example, I cannot chown a (local) file nor start/stop a service.
> However, if I ssh via password exchange, then I can perform these operations.
> 
> On the other hand, if I ssh to a workgroup machine, then I can perform
> these operations regardless of how I authenticate.
> 
> I know that it has been noted that one cannot access network shares from
> a ssh login due to running under the LocalSystem account.  But, I was
> surprised by the chown and start/stop service restrictions since I
> perceived them to be local operations.

I'm surprised, too.  I don't have a domain environment so I can't
test that further.  Are you sure that you're not just restricted
due to either having /etc/passwd or /etc/group not setup correctly
or actually having restrictions due to domain policy?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -