Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Wed, 01 Jun 2005 13:22:13 EDT
To:	cygwin AT cygwin DOT com
Subject:	Login & Something diff since cygwin 1.5.15-1 release - could it be security changes that were made
Message-Id:	<VA.000011ab.0053f8b1@thesoftwaresource.com>
From:	Brian Keener <bkeenerReMoVeAnTiSpAm AT thesoftwaresource DOT com>
Reply-To:	Brian Keener <bkeenerReMoVeAnTiSpAm AT thesoftwaresource DOT com>

I realize that login is not the normal mode of access for most Cygwin users and 
that most use simply the cygwin.bat to start one of the shells.  I have my 
cygwin.bat set to run login.exe which then runs the appropriate shell based on 
the login I use - actually it starts several login sessions and depending on 
the login I use (each unique to Cygwins passwd file ) it will run a different 
shell (IE briank runs bash, briankt runs tcsh, briankz runs zsh).  

This also keeps some one who sits down at my machine from accidentally 
accessing my cygwin install without knowing one of my logins or passwords.  

Up until 1.5.15-1 this worked perfectly and with 1.5.15-1 and since this has 
changed.  Login runs but no matter what login or password I use - I am told it 
is an incorrect login.  Simply rolling back to 1.5.14-1 corrects this and all 
works as expected.  I notice in the release for 1.5.15-1  

http://cygwin.com/ml/cygwin-announce/2005-04/msg00022.html

that there were several security changes (or at least what I perceive to be 
security changes) and wonder if this could have affected my use of login.  Or 
was the fact my use of login worked a fluke and that has since been corrected.  
Since each of these cygwin id's are based on the same Win2k/NT login I also 
wonder if that could that be the culprit. 

My cygwin.bat looks like the following:

@echo off
SET MAKE_MODE=unix
SET CYGWIN=binmode ntsec nostrip_title title tty      
SET PATH=d:\cygwin\usr\local\bin;d:\cygwin\usr\bin;d:\cygwin\bin;%PATH%;.
D:
chdir \cygwin

start "Using rxvt/bash" CMD /c bin\rxvt -geometry 90x30 -fg grey -bg 
midnightblue -cr red -sr -sl 2000 -fn "Lucida Console-12" -tn rxvt -e 
/usr/bin/login

start "bash Shell" CMD  /c bin\login.exe
start "zsh Shell"  CMD  /c bin\login.exe 
start "tcsh Shell" CMD  /c bin\login.exe

exit

The entries in the /etc/passwd file are:

briank:unused_by_nt/2000/xp:1000:513:Brian 
Keener,U-FPC-ATL-BKNB\briank,S-1-5-21
-1349939503-2058308305-1131544683-1000:/home/briank:/bin/bash

briankz:unused_by_nt/2000/xp:1000:513:Brian 
Keener,U-FPC-ATL-BKNB\briank,S-1-5-2
1-1349939503-2058308305-1131544683-1000:/home/briank:/bin/zsh

briankt:unused_by_nt/2000/xp:1000:513:Brian 
Keener,U-FPC-ATL-BKNB\briank,S-1-5-2
1-1349939503-2058308305-1131544683-1000:/home/briank:/bin/tcsh

I have also attached my cygcheck output which is for my system running 
1.5.14-1. I can create the problem simply by updating to 1.5.15-1. 

Any insight on this would be appreciated and thank you.  

bk





--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -