X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-1.3 required=5.0 tests=AWL,BAYES_00
X-Spam-Check-By:	sourceware.org
To:	cygwin AT cygwin DOT com
MIME-Version:	1.0
Subject:	Additional information: Cygwin/OpenSSH authentication without applying group policies...
X-KeepSent:	C3D8DE63:89D05670-C1257656:0024C5D5; type=4; name=$KeepSent
Message-ID:	<412_1256107411_4ADEAD93_412_120_1_OFC3D8DE63.89D05670-ONC1257656.0024C5D5-C1257656.0024EFCD@nbg.sdv.spb.de>
From:	Carsten DOT Porzler AT spb DOT de
Date:	Wed, 21 Oct 2009 08:43:42 +0200
X-SafeGuard_MailGateway:	Version: 5.60.3.9732 SGMG Date: 20091021064331Z
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

cygwin-owner AT cygwin DOT com schrieb am 21.10.2009 08:39:40:

> [Bild entfernt] 
> 
> Cygwin/OpenSSH authentication without applying group policies...
> 
> Carsten.Porzler 
> 
> an:
> 
> cygwin
> 
> 21.10.2009 08:40
> 
> Gesendet von:
> 
> cygwin-owner AT cygwin DOT com
> 
> Dear Cygwin community,
> 
> we are just having problems with some locations connect over WAN lines 
> with only little bandwith.
> 
> The logon process against a Win2003 AD domain controller takes much time 

> (>50s). After some analysis we found out that there is much traffic 
> between the SSH server and the domain controller over ip port 1026 (CAP, 

> used for applying/downloading the Win2003 group policies).
> 
> During a SSH logon it is not necessary to apply all group policies. 
> Instead it would be OK, if the user would just be authenticated and get 
> his group memberships.
> 
> Is it possible to deactivate applying the group policies during the SSH 
> logon process or to reconfigure the SSH service so that we can use LDAP 
> authentication instead of standard Win2003 authentication.
> 
> Thanks in advance for some hints and 
> 
> best regards
> 
> Carsten Porzler
> 

We are using 

Cygwin V.1.7.0(0.200/5/3) 2009-02-20 17:20

and OpenSSH

OpenSSH_5.1p1, OpenSSL 0.9.8j 07 Jan 2009

Best regards

Carsten Porzler


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -