X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-1.9 required=5.0 tests=BAYES_00
X-Spam-Check-By:	sourceware.org
MIME-Version:	1.0
Subject:	RE: cyglsa lsaauth failure
Date:	Tue, 20 Apr 2010 16:58:54 -0400
Message-ID:	<A4AC3816FD34354F878DD1F440F3ABCE01DDA343@CINMLVEM24.e2k.ad.ge.com>
In-Reply-To:	<20100420205242.GA26489@proxix.com>
References:	<20100420205242 DOT GA26489 AT proxix DOT com>
From:	"Garber, Dave (GE Infra, Energy, Non-GE)" <dave DOT garber AT ge DOT com>
To:	<cygwin AT cygwin DOT com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

http://cygwin.com/ml/cygwin-announce/2010-04/msg00021.html

In particular,
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=3D=3D
NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE
NOTE

Cygwin 1.7.1 or earlier users of LSA authentication using the cyglsa.dll
or cyglsa64.dll files *must* replace the old cyglsa DLL with the new one
from this package, otherwise LSA authentication will fail with the new
1.7.3 Cygwin DLL.

This is unfortunately necessary, but it should be the last time for
quite some time.

DON'T FORGET TO REBOOT after replacing cyglsa.dll.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=3D=3D=20


Dave=20


-----Original Message-----
From: cygwin-owner AT cygwin DOT com [mailto:cygwin-owner AT cygwin DOT com] On Behalf
Of Tom Schutter
Sent: Tuesday, April 20, 2010 4:53 PM
To: cygwin AT cygwin DOT com
Subject: cyglsa lsaauth failure

I have a machine where cron worked in 1.7.1, but now fails after an
upgrade to 1.7.5.  Using strace, I have determined that lsaauth
succeeded before, but it now fails.

This is the strace output from the Cygwin 1.7.1 cron:
   50 43500986 [main] cron 2092 cygsidlist::debug_print: -- ende sidlist
---
 8503 43509489 [main] cron 2092 lsaauth: 0x67C =3D lsaauth ()
  251 43509740 [main] cron 2092 load_registry_hive: User registry hive
for S-1-5-21-2555220796-769361577-1294736918-8718 already exists

This is the strace output from the Cygwin 1.7.5 cron:
   38 38536506 [main] cron 2612 cygsidlist::debug_print: -- ende sidlist
---
 3901 38540407 [main] cron 2612 lsaauth: LsaLogonUser: 0xC00000F1
   47 38540454 [main] cron 2612 seterrno_from_win_error:
/ext/build/netrel/src/cygwin-1.7.5-1/winsup/cygwin/sec_auth.cc:1143
windows error 87
   42 38540496 [main] cron 2612 geterrno_from_win_error: windows error
87 =3D=3D errno 22
   38 38540534 [main] cron 2612 __set_errno: void
seterrno_from_win_error(const char*, int, DWORD):319 val 22
  276 38540810 [main] cron 2612 lsaauth: 0x0 =3D lsaauth ()
   70 38540880 [main] cron 2612 seteuid32: lsaauth failed, try
create_token.

Is there anything else that I can do to diagnose the problem?

Is there any way to enable more verbosity/logging in cyglsa?  It would
be helpful to know when login attempts are being made, if they are
successful, what the LsaLoginUser parameters are, and most importantly
any information as to why they fail.

--
Tom Schutter
First American Spatial Solutions
303-440-7272 x6822
512-977-6822

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -