X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=0.1 required=5.0 tests=AWL,BAYES_00,T_RP_MATCHES_RCVD
X-Spam-Check-By:	sourceware.org
Message-ID:	<4F1EAC90.2080502@chalmers.se>
Date:	Tue, 24 Jan 2012 14:05:20 +0100
From:	Hans-Georg Scherneck <hgs AT chalmers DOT se>
User-Agent:	Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20111221 Firefox/9.0.1 SeaMonkey/2.6.1
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: ssh pubkey exchange failing at send_pubkey_test
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

> Greetings, Andrew DeFaria!
>
> >>  When I've seen this before on this list, it's because you are in a domain
> >>  and your user is a domain user.  If that's the case, you want to create a
> >>  domain account to run your sshd server or use a local user to ssh in
> >>  with.
> >>  If this doesn't describe your situation, I'd recommend adding debug flags
> >>  to your sshd server so that you can see a full log of things on that side
> >>  of the fence.  Typically this is very illuminating for server-side
> >>  issues.
> >  I'm on XP. I log into a domain. sshd is running as Local System account.
> >  I can log in if I specify my password. It's just pre-shared key that
> >  isn't working and I believe this to be a permissions problem (see other
> >  postings about permissions problems).
>
> You've tried to use network profile folder to store authorised_keys, which is
> not accessible to NT AUTHORITY\SYSTEM account.
>
>
> --
> WBR,
> Andrey Repin (anrdaemon AT freemail DOT ru) 24.01.2012,<12:31>
>
> Sorry for my terrible english...
Thanks, that with the debug option was what I needed. It says in essence:
debug1: test whether pkalg/pkblob are acceptable [preauth]
debug1: temporarily_use_uid: 1000/513 (e=18/544)
seteuid 1000: Permission denied
debug1: do_cleanup
mm_log_handler: write: Broken pipe

So the creation of the euid is not permitted, and this probably relates 
to privileges granted by windows, W7 in particular.
Now I have something to hack at. I'll report whether I had success, or I 
might need to bother you again.
Great many thanks to Larry, Andrew and Andrey
Hans-Georg


-- 
Med vänliga hälsningar / With best regards yours             -----
Hans-Georg Scherneck                                       /   A   \
---------------------+----------------------------------- |   / \   |
. Telephone&  -fax   | Chalmers University of Technology   \       /
. +46 31 772 5556    | Earth and Space Sciences              -----
. +46 31 772 5590 fx |&  Onsala Space Observatory             | |
. E-Mail:            | SE-439 92  Onsala, Sweden             /   \
. hgs AT chalmers DOT se    | http://www.chalmers.se/rss       ----------------
. Ocean Loading Serv.| froste.oso.chalmers.se/loading   /===\ ,===//===\
. Gravimeter         | froste.oso.chalmers.se/hgs/SCG  /    /`===,/    /
---------------------+---------------------------------\===//===' \===/


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -