X-Spam-Check-By:	sourceware.org
content-class:	urn:content-classes:message
MIME-Version:	1.0
Subject:	sshd password authentication results in identity of NT AUTHORITY\SYSTEM
Date:	Mon, 30 Jan 2006 12:57:32 -0500
Message-ID:	<E400628E9D6760429593FBE7A5AAD27826A95B@NAEAPAXREX04VA.nadsusea.nads.navy.mil>
From:	"Perdue, Dave T. CIV NAVAIR 5.4.3, Bldg 2035, Rm 205, Cube 200" <david DOT perdue AT navy DOT mil>
To:	<cygwin AT cygwin DOT com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id k0UHw50v008644

Hi all,
	Our facility has been using Cygwin-1.5.12-1 on Windows 2000 with our account home directories on a windows network shared folder using both a local login and an ssh remote system login with no problems.
	I recently tried Cygwin-1.5.18 and 19 and find that the network share account home directories return an access denied when logging in using ssh with password authentication, but a local login works fine.  
	The Cygwin "whoami" command reports the correct username, however the Window Resource kit "whoami.exe" reports "NT Authority\SYSTEM" for the username when using a password authenticated ssh login.  The user's SID is identical, just the username is different.  
	I have read responses in the Cygwin mail lists that indicated that RSA authenticated logins should act this way (no access to network shares due to incomplete user impersonation) however it also indicated that password authentication should provide network share access.  
	A minimal installation of Cygwin to support ssh (Cygwin with cygrunsrv and openssh) shows proper user context switching for Cygwin-1.5.12-1 but fails using Cygwin-1.5.19-4.  
	I do not have access to versions 13-17 so I cannot determine at what point full support of password authentication "broke".  
	Is no access to network shares when using ssh password authentication the intended Cygwin ssh functionality?

Dave

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -