X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-2.1 required=5.0 tests=AWL,BAYES_00,KHOP_RCVD_UNTRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD,SPF_NEUTRAL,TW_PG
X-Spam-Check-By:	sourceware.org
Message-ID:	<511D602E.805@cs.utoronto.ca>
Date:	Thu, 14 Feb 2013 17:07:42 -0500
From:	Ryan Johnson <ryan DOT johnson AT cs DOT utoronto DOT ca>
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: sshd fails to start: logon failure
References:	<511D4C70 DOT 30508 AT cs DOT utoronto DOT ca> <511D4EA8 DOT 1060202 AT gmail DOT com> <511D50FA DOT 9010304 AT cs DOT utoronto DOT ca> <511D54D3 DOT 4070300 AT cygwin DOT com>
In-Reply-To:	<511D54D3.4070300@cygwin.com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 14/02/2013 4:19 PM, Larry Hall (Cygwin) wrote:
> On 2/14/2013 4:02 PM, Ryan Johnson wrote:
>> On 14/02/2013 3:52 PM, marco atzeri wrote:
>>> On 2/14/2013 9:43 PM, Ryan Johnson wrote:
>>>> Hi all,
>>>>
>>>> I tried to ssh to my cygwin box today and was unable to connect. It
>>>> seems the sshd service can no longer run, for reasons that mystify me:
>>>>> # net start sshd
>>>>> System error 1069 has occurred.
>>>>>
>>>>> The service did not start due to a logon failure.
>>>>
>>>> I wasn't aware of having changed anything; would it be advisable to 
>>>> just
>>>> reinstall sshd from setup.exe and/or sshd_host_config, or is there 
>>>> some
>>>> simple troubleshooting I might do?
>>>
>>> reinstall is not the way.
>>> Likely something reset the cyg_server privileges.
>>> Try to re-enable them with
>>>
>>> editrights -u cyg_server -a SeAssignPrimaryTokenPrivilege
>>> editrights -u cyg_server -a SeCreateTokenPrivilege
>>> editrights -u cyg_server -a SeTcbPrivilege
>>> editrights -u cyg_server -a SeServiceLogonRight
>>> editrights -u cyg_server -a SeIncreaseQuotaPrivilege
>> No luck, the same error still occurs. However, now that you mention 
>> it, I
>> did play with cygserver settings while trying to install pgsql a 
>> while back.
>>
>> Is there a way to view the privileges to see what I may have broken?
>
> $ editrights -u cyg_server -l
> SeAssignPrimaryTokenPrivilege
> SeCreateTokenPrivilege
> SeTcbPrivilege
> SeServiceLogonRight
> SeDenyRemoteInteractiveLogonRight
Mine has all those, plus SeIncreaseQuotaPrivilege (possibly thanks to 
the above from Marco).

It seems that I managed to de-configure sshd somehow. There's no 
sshd_config in /etc/ (just the skeleton in /etc/defaults/), and 
sshd-host-config doesn't seem to exist, either. So, I blew away the sshd 
and cygrunsrv services and their associated users and re-ran 
ssh-host-config. All is well now... except that now an enormous ascii 
art hippo greets me at login. Ick.

Thanks,
Ryan


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -