Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<000701c227d0$007120d0$0610a8c0@wyw>
From:	"Wu Yongwei" <adah AT netstd DOT com>
To:	<cygwin AT cygwin DOT com>
Subject:	sshd 3.4p1-2 privsep question
Date:	Wed, 10 Jul 2002 13:09:42 +0800
MIME-Version:	1.0
X-Priority:	3
X-MSMail-Priority:	Normal
X-MimeOLE:	Produced By Microsoft MimeOLE V5.50.4910.0300

When executing "net start sshd" in privilege separation mode, I saw this in
/var/log/sshd.log: "Bad owner or mode for /var/empty". Sshd works OK in
non-privsep mode.

This is how I set up sshd:
-----------------------------------------------------------------------
$ ssh-host-config
Overwrite existing /etc/ssh_config file? (yes/no) yes
Generating /etc/ssh_config file
Overwrite existing /etc/sshd_config file? (yes/no) yes
Privilege separation is set to yes by default since OpenSSH 3.3.
However, this requires a non-privileged account called 'sshd'.
For more info on privilege separation read /usr/doc/openssh/README.privsep.

Shall privilege separation be used? (yes/no) yes
Generating /etc/sshd_config file

Do you want to install sshd as service?
(Say "no" if it's already installed as service) (yes/no) no

Host configuration finished. Have fun!
-----------------------------------------------------------------------

ls -l /var seems to indicate the ownership is correct:

drwxrwxrwx    2 SYSTEM   SYSTEM          0 Jul 10 12:50 empty/

I have CYGWIN variable defined to "binmode ntsec tty", but it seems of no
use.

I am puzzled. Any suggestions?

Best regards,

Wu Yongwei


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -