Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
MIME-Version:	1.0
Subject:	Problem running cygrunsrv with non SYSTEM accounts
Date:	Thu, 13 Jan 2005 19:10:07 -0600
Message-ID:	<B1FAB0BF7755FC4597FBCFBDE66EA4A6011F57DD@DCEVS1.tekelec.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
From:	"Aitken, Sean" <Sean DOT Aitken AT tekelec DOT com>
To:	<cygwin AT cygwin DOT com>
X-OriginalArrivalTime:	14 Jan 2005 01:10:11.0375 (UTC) FILETIME=[CBAE13F0:01C4F9D5]
X-IsSubscribed:	yes
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id j0E1AK9w021793

Hello all,
 
I have been fighting a problem with trying to run SSHD on a Windows
Server 2003 box. I have been able to narow the problem down a bit. I did
post earlier to day, but have stumbled across what appears to be a
strong lead on the solution.

Facts:
- With 'runas', I am able to start sshd with no problems using the
'sshd_server' account. I can even connect!
- I have granted all local rights (RunAsService, Token,.. Etc.) These
seemed to be configured already by the ssh-host-config program
- Running the service under the local SYSTEM account produces output in
/var/log/sshd.log
- Running the service under any other account produces NO log file!
- Permissions against sshd and required Cygwin libs aren't a problem
(since I could runas 'sshd_server' and it works fine)
- When I invoke the sshd process with RunAs, it's after establishing a
bash shell
- Permissions in /var/log allow users to write (tested with runas)

With a little (actually a LOT) experimentation, it seems as though the
'sshd_server' user is having a hard time starting things up.  When I run
as SYSTEM, I get output in the log folder..

I have tried about anything. Does anyone know of any Win2K3 settings
that would disallow certain acccounts from being worthy service runners?

Many thanks!
Sean F. Aitken

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -