delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2004/03/18/13:58:18

Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Thu, 18 Mar 2004 14:24:25 -0500
From: "Pierre A. Humblet" <pierre DOT humblet AT ieee DOT org>
To: cygwin AT cygwin DOT com
Subject: Re: sshd authentication question
Message-ID: <20040318192424.GA319523@Worldnet>
References: <C75BC7A96CFE2C44B38C639E4362739E018A2CB0 AT postman DOT ms DOT polyserve DOT com> <20040318184344 DOT GM17229 AT cygbert DOT vinschen DOT de>
Mime-Version: 1.0
In-Reply-To: <20040318184344.GM17229@cygbert.vinschen.de>
User-Agent: Mutt/1.4.1i

On Thu, Mar 18, 2004 at 07:43:44PM +0100, Corinna Vinschen wrote:
> On Mar 18 10:29, Matt Berney wrote:
> > Thanks, I suspect that it is something in our environment that is causing this.  Specifically, how do I use the strace tool in this context?  Can I substitute the 'ssh' command with 'strace ssh' command?
> 
> Ooh, no.  The interesting part happens on the server side.  You must
> start sshd under strace.  Create a new service using cygrunsrv, e. g.
> called "trace_sshd", which runs `/bin/strace /usr/sbin/sshd -D'.  Run
> it instead of the normal sshd service. The output will be automatically
> redirected to /var/log/trace_sshd.log.  Be aware that the file might
> get *very* big.  And it's a good idea to switch off privilege separation
> in your sshd_config file for this.
> 
> Another step you can try first:  There's a small chance that an Event
> Log entry has been created when the problem happens.  I can't tell you
> how that might look like, but it's perhaps worth a try.
> 
> Just musing: Is it possible that the /etc/passwd or /etc/group file
> gets frequently rewritten on the server machine?  Perhaps something
> goes wrong there.  It shouldn't but...
> 
> 
> Corinna

Here is another hypothesis. Cygwin gets the groups from a variety of
sources during setuid(). One of them is a call to NetUserGetGroups
to get the global groups from the logon server. 
Failure of that call does not call a failure of setuid, because it 
happens normally while running disconnected. So the problem could be
with your logon server or your LAN.
That hypothesis seems consistent with the outputs of your original
mail.
Fortunately there is a workaround: edit /etc/group and explicitly 
include the user in question in the groups that should contain him.

Pierre

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019