X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=2.7 required=5.0 tests=AWL,BAYES_00,BOTNET,KHOP_THREADED,RCVD_IN_DNSWL_NONE,RCVD_IN_HOSTKARMA_NO,RCVD_IN_HOSTKARMA_YE
X-Spam-Check-By:	sourceware.org
Message-id:	<4F84650A.9010402@cygwin.com>
Date:	Tue, 10 Apr 2012 12:51:22 -0400
From:	"Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to:	cygwin AT cygwin DOT com
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20120327 Thunderbird/11.0.1
MIME-version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: sshd not doing key based authentication
References:	<4F7C0884 DOT 2080006 AT gmail DOT com> <74924010 DOT 20120404152639 AT mtu-net DOT ru> <20120404133001 DOT GA8876 AT pris DOT crapsteak DOT org> <4F7D2BBA DOT 1080004 AT gmail DOT com> <612505306 DOT 20120406024449 AT mtu-net DOT ru> <4F838B78 DOT 8090704 AT gmail DOT com> <jm1eht$cj6$1 AT dough DOT gmane DOT org>
In-reply-to:	<jm1eht$cj6$1@dough.gmane.org>
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 4/10/2012 10:02 AM, Thorsten Kampe wrote:
> * Rurik Christiansen (Tue, 10 Apr 2012 11:23:04 +1000)
>> On 6/04/2012 08:44, Andrey Repin wrote:
>>> Greetings, Rurik Christiansen!
>>
>> [...]
>>
>>>> and my understanding is that I can't run the sshd frontend without
>>>> screwing the permissions.
>>> I don't understand what you mean by this.
>>
>>  From an earlier mail on this list:
>>
>> http://cygwin.com/ml/cygwin/2008-11/msg00212.html
>>
>> I cite:
>>
>> "Ugh!  This suggests that you have not read OpenSSH readme in
>> /usr/share/doc/Cygwin.  You can't do this without screwing up all
>> the permissions on various directories and files that SSH checks
>> the permissions of."
>
> Nonsense. sshd doesn't change or "screw up" any permissions. I've been
> running sshd as user or sshd via xinetd run as user for the last seven
> years on my workstation and never had no problem. Of course I can only
> login as myself but that's expected.

And that's exactly the point of the referenced thread.  If you know how
to do what you've done and what the limitations are, then you can make
things work within these limitations.  For those that don't know all these
little details and limitations and just want to get sshd running in a
general, non-restrictive way, using the provided configure scripts is the
way to go and the Cygwin readme for OpenSSH is the right place to look for
details about these scripts and how to run them.  And more importantly,
unless you use these resources, it's assumed you know what you're doing
and that you don't need this list's help if you run into problems.  Just
to button up this thread for whoever may be reading it in the future,
if the previous statement doesn't describe you, don't try to initially
hand configure your OpenSSH installation and don't run sshd from the
command line unless you know what you are doing.

-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -