X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=3.4 required=5.0 tests=AWL,BAYES_00,BOTNET,RCVD_IN_DNSWL_NONE,TW_RW,TW_WX
X-Spam-Check-By:	sourceware.org
Message-id:	<4E5E777B.6060700@cygwin.com>
Date:	Wed, 31 Aug 2011 14:03:39 -0400
From:	"Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to:	cygwin AT cygwin DOT com
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: sshd win2003 CYGWIN_NT-5.2 1.7.7(0.230/5/3)
References:	<0087189622C8E440B0568619CF342A0B29A8C7 AT x2008mb2 DOT infoblox DOT com>
In-reply-to:	<0087189622C8E440B0568619CF342A0B29A8C7@x2008mb2.infoblox.com>
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 8/26/2011 11:08 AM, Drew Patten wrote:
> # ls -ld /var/empty
> drwxr-xr-x+ 1 cyg_server root 0 Mar  9 14:39 /var/empty
>
> # ls -ld /etc/ssh*
> -rw-r--r-- 1 ????????   root 1555 Aug 26 07:56 /etc/ssh_config
> -rw------- 1 cyg_server None  668 Mar  9 14:39 /etc/ssh_host_dsa_key
> -rw-r--r-- 1 cyg_server None  613 Mar  9 14:39 /etc/ssh_host_dsa_key.pub
> -rw------- 1 frtest     root  227 Aug 25 14:48 /etc/ssh_host_ecdsa_key
> -rw-r--r-- 1 frtest     root  178 Aug 25 14:48 /etc/ssh_host_ecdsa_key.pub
> -rw------- 1 cyg_server None  988 Mar  9 14:39 /etc/ssh_host_key
> -rw-r--r-- 1 cyg_server None  653 Mar  9 14:39 /etc/ssh_host_key.pub
> -rw------- 1 cyg_server None 1675 Mar  9 14:39 /etc/ssh_host_rsa_key
> -rw-r--r-- 1 cyg_server None  405 Mar  9 14:39 /etc/ssh_host_rsa_key.pub
> -rw-r--r-- 1 ????????   root 3185 Aug 26 07:56 /etc/sshd_config
>
> # cat /var/log/sshd.log
> /var/empty must be owned by root and not group or world-writable.

Have you compared ownerships between working and non-working machines?
Absent that (or assuming that doesn't yield results for some reason),
I'd recommend changing the owners of '/etc/ssh_config' and
'/etc/sshd_config' to 'cyg_server' (my group for these files is 'None'
but I doubt that's of any significance.)  Check '/var/empty' with
'getfacl'.  Mine reads this way:

$ getfacl /var/empty
# file: /var/empty
# owner: cyg_server
# group: root
user::rwx
group::r-x
group:SYSTEM:rwx
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -