X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=eQJtkQxmq1vmDJM1j4GmvTzkwUxM5OwI5Y1XqcX9CUhPyE4150Liq
	WZYKu+hrp/sXbunc/ETqV9pbR3q32N/REwNEJBYBTqQ87WjA0+GWcsh3kNuHCEuR
	xUMQsnLEGNCstAv/0VezIelgwtLSPvIgQijeuHqNyRc7ykrd1wOXw0=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=gRD3CBVzls8/XOnimNkPqbz7sWs=; b=tAp895T+7TvgaTkPzaBQWa7o0vA2
	56DoR3JuWz8Wd6BVeU6PR3N8iGpGc/4ShZeAUD1i0YV/TRpiooj8dn/iDo88zlq3
	BRSMd7YNINaV797eXedBuJIQvDYg9pDF5sVmdowcJ/trKlT0Zwn71ImOGJphAYEK
	YMAfmnxpAmrY4bA=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Tue, 19 Aug 2014 19:02:35 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Windows Server 2012R2 64bit and 32bit Cygwin sshd
Message-ID:	<20140819170235.GB29878@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<8761hphfps DOT fsf AT Rainer DOT invalid> <loom DOT 20140819T152804-628 AT post DOT gmane DOT org>
MIME-Version:	1.0
In-Reply-To:	<loom.20140819T152804-628@post.gmane.org>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--vGgW1X5XWziG23Ko
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug 19 13:37, Achim Gratz wrote:
> I've run strace on both the 32bit and the 64bit sshd and here's the
> difference between the two, right after sshd gets an exception 5 from the=
 DC:
>=20
> 32bit
> --- Process 5820, exception 00000005 at 75BF1D4D
> 43239 4372793 [waitproc] sshd 2400 pinfo::maybe_set_exit_code_from_window=
s:
> pid 5820, exit value - old 0x0, windows 0x5, cygwin 0x8000500
>=20
> 64bit
> --- Process 484, exception 00000005 at 00007FFA4F5D5BF8
>  9907 4522411 [main] sshd 484 seterrno_from_win_error:
> .../cygwin-snapshot-20140819-1/winsup/cygwin/sec_auth.cc:263
> windows error 5

This is a call to the Win32 API call NetUserGetGroups creating an
exception due to an "access denied".  The difference between 32 and 64
bit is probably a result of the differences in exception handling, and
given that an ExceptionCode 5 will be ignored by Cygwin's exception
handler, it's probably the next handler in the chain.

Are you running sshd under a local cyg_server account or under a domain
cyg_server account?  Is it possible that this is a local cyg_server
account, and as a non-domain account actually gets an "access denied"
when trying to request AD user information?

If your cyg_server is a local account I'd suggest to try with an
AD account per https://cygwin.com/faq/faq.html#faq.using.sshd-in-domain

Other than that I have a funny idea how to workaround this problem from
inside Cygwin.  If you want to give it a try, I'll send you a pointer
to a 32 bit DLL via PM.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--vGgW1X5XWziG23Ko
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=dVG7
-----END PGP SIGNATURE-----

--vGgW1X5XWziG23Ko--

- Raw text -