Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Wed, 10 Dec 2003 21:00:30 +0200
Message-Id:	<200312101900.hBAJ0Uki015582@beta.mvs.co.il>
From:	"Ehud Karni" <ehud AT unix DOT mvs DOT co DOT il>
To:	mberney AT polyserve DOT com
Cc:	cygwin AT cygwin DOT com, cygwin-lh AT cygwin DOT com
Subject:	Re: Question about cygwin sshd and StrictModes
In-reply-to:
	<C75BC7A96CFE2C44B38C639E4362739E018A29A1 AT postman DOT ms DOT polyserve DOT com>
	(message from Matt Berney on Wed, 10 Dec 2003 09:17:23 -0800)
Organization:	Mivtach-Simon Insurance agencies
Reply-to:	ehud AT unix DOT mvs DOT co DOT il
References:	<C75BC7A96CFE2C44B38C639E4362739E018A29A1 AT postman DOT ms DOT polyserve DOT com>
MIME-Version:	1.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 10 Dec 2003 09:17:23 -0800, Matt Berney <mberney AT polyserve DOT com> wrote:
>
> Thanks for the no-help.  I have already read all relevant
> documentation that I could find.  That is the reason for
> posting a message to the group.  In the future, if you wish
> to be helpful, please offer more than RTFM.

I don't exactly know what Larry meant, but if you read the "Fucking"
manual as you claim, you either missed or misunderstood the following
(from the man pages of sshd_config(5) ):

  StrictModes
    Specifies whether sshd should check file modes and ownership of
    the user's files and home directory before accepting login.  This
                        ^^^^^^
    is normally desirable because novices sometimes accidentally
    leave their directory or files world-writable.  The default is
    ``yes''.

Which is in plain English: check the permissions of your Home (~/)
and your ssh (~/.ssh) directories. Your home directory must NOT be
writable by others (not even from your group) and the ~/.ssh should
not be readable by others (because you may have your private keys
there).

Ehud.


- --
 Ehud Karni           Tel: +972-3-7966-561  /"\
 Mivtach - Simon      Fax: +972-3-7966-667  \ /  ASCII Ribbon Campaign
 Insurance agencies   (USA) voice mail and   X   Against   HTML   Mail
 http://www.mvs.co.il  FAX:  1-815-5509341  / \
 GnuPG: 98EA398D <http://www.keyserver.net/>    Better Safe Than Sorry
-----BEGIN PGP SIGNATURE-----
Comment: use http://www.keyserver.net/ to get my key (and others)

iD8DBQE/121NLFvTvpjqOY0RApgtAJ9dsH7eFVYhn7KjgI0Mt6glHiSoygCfY4aU
dDt9iTdg2EqXanRErmOkBk8=
=DDIp
-----END PGP SIGNATURE-----

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -