Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
From:	"Chris January" <chris AT atomice DOT net>
To:	"Cygwin AT Cygwin DOT Com" <cygwin AT cygwin DOT com>
Subject:	RE: sudo and runas
Date:	Mon, 10 Mar 2003 10:56:11 -0000
Message-ID:	<LPEHIHGCJOAIPFLADJAHOEIKDGAA.chris@atomice.net>
MIME-Version:	1.0
X-Priority:	3 (Normal)
X-MSMail-Priority:	Normal
X-MimeOLE:	Produced By Microsoft MimeOLE V6.00.2800.1106
In-Reply-To:	<000d01c2e6e7$73f20570$3507000a@int.mediasurface.com>
Importance:	Normal

> > > > Is this any use?
> > > >
> > > > http://www.doc.ic.ac.uk/~ccj00/twiki/bin/view/Cygwin/CygwinSu
> > > >
> > > > Chris
> > >
> > > jon AT shuttle (.../jon/tmp) % su root
> > > Password:
> > > su: cannot run /bin/bash: Permission denied
> >
> > Make sure /bin/bash is world executable.
>
> -rwxr-xr-x 1 root admin 596480 Nov 22 19:32 /bin/bash.exe
>
> That's what I found so confusing... ;)
>
> > > (I've renamed 'Administrator' as 'root' in /etc/passwd)
> > >
> > > jon AT shuttle (/home/jon) % su dba
> > > Password:
> > > su: cannot set user id: Permission denied
> >
> > Doesn't seem to be authenticating properly here. Are you sure
> > dba has network logon priveleges?
>
> I think so... I can certainly
>
> jon AT shuttle (~) % ssh -l dba localhost
>
> and that works fine. Ditto for root, and then bash executes fine. I can
> also log in as dba from the XP logon screen.
>
> Thanks for your help - I'd really like to get this to work.

The su binary on my webpage seems to need more privileges than I remember.
Try assigning yourself the "Replace a Process Level Token" right. I am
working on a version that doesn't require these privileges. Maybe by using
CreateProcessWithLogonW and then re-routing the console or something.

Chris


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -