X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-2.5 required=5.0 tests=AWL,BAYES_00,SPF_HELO_PASS
X-Spam-Check-By:	sourceware.org
Message-ID:	<4B587F1D.6050700@cygwin.com>
Date:	Thu, 21 Jan 2010 11:21:49 -0500
From:	"Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-To:	cygwin AT cygwin DOT com
User-Agent:	Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.21) Gecko/20090320 Remi/2.0.0.21-1.fc8.remi Lightning/0.9 Thunderbird/2.0.0.21 Mnenhy/0.7.5.0
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Cygwin/OpenSSH V.5.3: Key authentication does not work under Windows 2008: Problem is solved now!!!
References:	<16301_1264086092_4B586C4C_16301_305990_2_OF11708682 DOT 5FB599E5-ONC12576B2 DOT 0050FA30-C12576B2 DOT 00528821 AT nbg DOT sdv DOT spb DOT de> <4426_1264090236_4B587C7C_4426_313_1_OF6D70C15D DOT A621C2E3-ONC12576B2 DOT 00585C7B-C12576B2 DOT 0058DAC7 AT nbg DOT sdv DOT spb DOT de>
In-Reply-To:	<4426_1264090236_4B587C7C_4426_313_1_OF6D70C15D.A621C2E3-ONC12576B2.00585C7B-C12576B2.0058DAC7@nbg.sdv.spb.de>
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 01/21/2010 11:10 AM, Carsten DOT Porzler AT spb DOT de wrote:
> Dear Cygwin Community,
>
> my problem described is solved now.
>
> The change to Windows Server 2003 is the fact, that the OpenSSHd Server
> service must run under a user account, SYSTEM account is not enough!
>
> The choosen user account must have the following privileges:
>
>      Create a token object
>      Logon as a service
>      Replace a process level token
>      Increase Quota
>
> It does not work, if you give SYSTEM account all the rights! These
> behaviour was described in the year 2007 in a "CopSSH" forum.

...and in the openssh readme file, as well as the email archives of this
forum.  This is also all handled for you if you configure your installation
with 'ssh-host-config'.

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -