X-Recipient:	archive-cygwin AT delorie DOT com
X-Spam-Check-By:	sourceware.org
Message-ID:	<48C73751.9030304@scn.org>
Date:	Tue, 09 Sep 2008 22:56:17 -0400
From:	Just Me <be439 AT scn DOT org>
User-Agent:	Thunderbird 2.0.0.16 (X11/20080725)
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: SSH publickey problem, password works (Win 2003, OpenSSH_5.1p1, Cygwin DLL1.5.25 )
References:	<48C640CF DOT 6060809 AT scn DOT org> <20080909204840 DOT GF12841 AT proxix DOT com>
In-Reply-To:	<20080909204840.GF12841@proxix.com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Tom Schutter wrote:
> On Tue 08-09-09 04:24, Just Me wrote:
>   
>> I've been fighting with SSH for a week now, I've read everything I can
>> google, it's finally time to ask for help.
>>
>> I can ssh to any account using a password, no problem.  It bombs with a
>> cannot seteuid error in the event log when I use a keypair.
>>     
>
> I just solved this yesterday on my box.
>
> If you get a "Connection closed by xxx.xxx.xxx.xxx" message when using
> ssh to connect to a Cygwin sshd server, and/or the event log on the
> server machine contains the error "sshd: PID XXXX: fatal: seteuid YYYYY:
> Permission denied", the user account that sshd is running under probably
> does not have the "Create a token object" right.
>
> Note that if the account does not have this right, it probably doen't
> have other important rights as well.  These rights are normally setup by
> the ssh-host-config script for the sshd_server user.
>
>   

Both the cyg_server and sshd account have these rights:
Act as part of the Operating System
Create a Token Object
Impersonate a client after authentication
Log On as a service

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -