Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-Id:	<5.1.1.5.2.20020716153729.022ef2f8@lindy.stanford.edu>
X-Sender:	rwilper AT lindy DOT stanford DOT edu (Unverified)
Date:	Tue, 16 Jul 2002 15:37:33 -0700
To:	"cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
From:	Ross Wilper <rwilper AT stanford DOT edu>
Subject:	PublicKey logon failures
Mime-Version:	1.0

I've got the latest cygwin (1.3.12-2), gzip (1.3.3-3), ssl (0.9.6d-1), and 
ssh (3.4p1-4) packages.
Using ntsec, privsep, no strictmodes. NTFS on Windows 2000 in a Windows 
2000 domain.

I've done more tests with various changes in config/owners/acls. (BTW, 
Setuid before opening authorized_keys is definitely failing).

Results
SSHD Running as LocalSystem -> Password auth works, Public key fails 
(original test)
SSHD Running as member of local admins group -> Password auth fails, Pubkey 
works for a local administrator only
SSHD Running as local admin + Act as OS, etc. -> Password auth works, 
Pubkey works for a local administrator only

All public key failures have the same messages like below (DEBUG3)

Date: Fri, 05 Jul 2002 15:25:21 -0700
>Problem: Successful RSA authentication is ignored?
>Accepted publickey for administrator from 171.64.x.x port 2373 ssh2.
>debug1: monitor_child_preauth: administrator has been authenticated by 
>privileged process.
>debug2: userauth_pubkey: authenticated 1 pkalg ssh-rsa.
>Failed publickey for administrator from 171.64.x.x port 2373 ssh2.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -