X-Spam-Check-By:	sourceware.org
Date:	Fri, 20 Apr 2007 13:19:11 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: VS 2005 cl.exe /Zi fails under ssh public key authentication
Message-ID:	<20070420111911.GA31947@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<fb2ac3c90704191458u45bb3e09u4fa677ce129c728f AT mail DOT gmail DOT com>
Mime-Version:	1.0
In-Reply-To:	<fb2ac3c90704191458u45bb3e09u4fa677ce129c728f@mail.gmail.com>
User-Agent:	Mutt/1.4.2.2i
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On Apr 19 15:58, Andrew Jorgensen wrote:
> After a good deal of debugging Microsoft has advised me that if sshd
> would start the user process with NT AUTHORITY\INTERACTIVE as one of
> it's groups, which should be possible by simply changing the
> parameters used when spawning the new process, or so they tell me.

Current Cygwin 1.5.24 doesn't add the interactive group to the token's
group list automatically.  This has been changed in current CVS and
you could try if a recent developer snapshot (http://cygwin.com/snapshots/)
works for you.

If that helps, you could create your own 1.5.24 version, applying the
patch, which should have the same effect.  YMMV.

Index: security.cc
===================================================================
RCS file: /cvs/src/src/winsup/cygwin/security.cc,v
retrieving revision 1.194.4.1
diff -u -p -r1.194.4.1 security.cc
--- security.cc 16 Oct 2006 12:46:34 -0000      1.194.4.1
+++ security.cc 20 Apr 2007 11:17:09 -0000
@@ -473,8 +473,7 @@ get_token_group_sidlist (cygsidlist &grp
 	grp_list += well_known_network_sid;
       if (sid_in_token_groups (my_grps, well_known_batch_sid))
 	grp_list += well_known_batch_sid;
-      if (sid_in_token_groups (my_grps, well_known_interactive_sid))
-	grp_list += well_known_interactive_sid;
+      grp_list += well_known_interactive_sid;
       if (sid_in_token_groups (my_grps, well_known_service_sid))
 	grp_list += well_known_service_sid;
     }


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -