Mail Archives: cygwin/2005/06/23/12:04:20
Ugh. Top-posting. Reformatted. BTW, there was no need to Cc: me, I read
the list. Please make sure your mailer respects the Reply-To: header.
On Thu, 23 Jun 2005, Christophe Delarue wrote:
> -----Original Message-----
> From: cygwin-owner AT XXXXXX DOT XXX On Behalf Of Igor Pechtchanski
> Sent: Thursday, June 23, 2005 15:14
> To: Christophe Delarue
> Cc: cygwin AT XXXXXX DOT XXX
<http://cygwin.com/acronyms/#PCYMTNQREAIYR>. Thanks.
> Subject: [spam] Re: Windows rights
>
> > Same problem in both cases. Read all of
> > <http://cygwin.com/cygwin-ug-net/ntsec.html>, especially the part
> > titled "Switching User Context", carefully.
>
> Thank's for your answer
>
> My server is Ms 2000.
>
> I read the url you gave me (I have allready read). I do not well
> understand the section switching user context
>
> Does the second paragraph "On NT and Windows 2000 the SYSTEM user
> has these privileges and can run services such as sshd." says that
> I should run the services as SYSTEM and not LocalSystem ?
No, SYSTEM and LocalSystem are two names for the same user. It's known as
SYSTEM in Cygwin, but Windows calls it LocalSystem. Perhaps the above
link should be amended to clarify this.
> Do the third paragraph
>
> " An important restriction of this method is that a process started
> without a password cannot access network shares which require
> authentication. This also applies to subprocesses which switched user
> context without a password. Therefore, when using ssh or rsh without a
> password, it is typically not possible to access network drives"
>
> Means it is impossible to access any network drives without explicit
> login ?
Sort of. It is impossible to access network drives that require
authentication without an explicit login.
> Is there a method to rsh on a windows machine without password and
> access network drives ?
If you use rsh, you might as well do what's suggested in the FAQ entry
that Larry pointed you to and make your shares world-readable, since
security is completely shot anyway.
If you decide to switch to ssh, I think you can use ssh-agent to
password-authenticate without having to type in your password every time.
I haven't used ssh-agent much, so I don't recall the exact recipe for
starting it. Read the documentation or ask for help somewhere else (I
doubt any usage questions will be Cygwin-specific).
Igor
--
http://cs.nyu.edu/~pechtcha/
|\ _,,,---,,_ pechtcha AT cs DOT nyu DOT edu
ZZZzz /,`.-'`' -. ;-;;,_ igor AT watson DOT ibm DOT com
|,4- ) )-,_. ,\ ( `'-' Igor Pechtchanski, Ph.D.
'---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow!
"The Sun will pass between the Earth and the Moon tonight for a total
Lunar eclipse..." -- WCBS Radio Newsbrief, Oct 27 2004, 12:01 pm EDT
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
- Raw text -