Message-Id:	<200212100547.gBA5lAX10986@delorie.com>
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Tue, 10 Dec 2002 13:45:41 +0800
From:	"Redterra" <spamtrap AT redterra DOT net>
To:	cygwin AT cygwin DOT com
Subject:	CRON service under an alternate account
X-Return-Path:	spamtrap AT redterra DOT net
X-MDaemon-Deliver-To:	cygwin AT cygwin DOT com

I have a problem with getting the CRON service to run under an account other than SYSTEM.  The 
reason I need to get CRON to run under an alternate account is so that jobs spawned from CRON will 
be able to access network shares.  I first started this exercise by getting the SSHd service to run 
under an alternate with network rights.  The modifications necessary to the account policies have 
been discussed many times in this list
1.  Act as part of the OS
2.  Create new tokens
3.  Incread quotas
4.  Log on as a service
5.  Replace process level tokens

I created a new account called "REPL-SERVICE" and sucessfully installed SSHd under these 
credentials using CYGRUNSRV.  Now, SFTP clients were able to access UNC network paths on the 
server.  

Next I used CYGRUNSRV to install CRON as a service using the "REPL-SERVICE" account.  SFTP scripts 
run via CRON were not able to access network shares.  A quick look at TOP revealed that despite how 
CRON was installed as a service, it always reverts back to SYSTEM, UID 18.  

Why is CRON coded to always revert to SYSTEM, and as a consequence, never about to access network 
shares, despite the fact that SSHd can be started under alternate credentials and gain access to 
network shares?  Is there another way to change the account that CRON runs under other that 
CYGRUNSRV?

I am running CYGWIN1.DLL version: 1.3.17, CRON ver 3.0.1-7 on a WinNT4.0SP6a system using "ntsec" 
environment option.

Thanks in advance,
Mike



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -