X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=JnEWsPgmHVMHafuAyOeLXZi7PwRWxYC1/3H8veo/dsDEz1b/UsvLl
	6GNu4TdlmmN52SQKfa5iAaMHcK+drHSfgEilTX4XRsyR7KogSdoQoNkpFp4uBz8Y
	TAe2o26orGighiZYLvUr6v9diJ2R5kCdGskX5VMXktQsURRBs1SWAU=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=4aF1YqglrN1lv103QiNXRFbegTY=; b=fUe7t9rPCRGTk61I8KvMit8fC4Wn
	R6tTWEjvLjxlYcnNraciFmsDs4BRq81BSLl1jVs3O0NJOhPLpl05/Af1ybvdXtzU
	mhdIq+3n/y8WFvBUCV9a4l9BajdK0OZqTW6nTexmXVScLTybL7bQ6bvLp8cWC7JP
	3cHY3dTkz7HrJC8=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Tue, 2 Sep 2014 21:14:36 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Windows Server 2012R2 64bit and 32bit Cygwin sshd
Message-ID:	<20140902191436.GF6056@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<8761hphfps DOT fsf AT Rainer DOT invalid> <loom DOT 20140902T134545-288 AT post DOT gmane DOT org> <20140902140751 DOT GD6056 AT calimero DOT vinschen DOT de> <loom DOT 20140902T180419-147 AT post DOT gmane DOT org>
MIME-Version:	1.0
In-Reply-To:	<loom.20140902T180419-147@post.gmane.org>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--TeJTyD9hb8KJN2Jy
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sep  2 16:24, Achim Gratz wrote:
> Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > I have no idea what could be wrong in your environment, sorry.
>=20
> Some more information: up until the check for /etc/nologin everything wor=
ks.
>  Things fall apart when sshd tries to switch to the user logging on.  I've
> traced this again, sshd apparently then tries to use the user token to set
> the primary group and gets the predictable error "0xC000005B --
> STATUS_INVALID_PRIMARY_GROUP".

This is a red herring.  The 0xC000005B status code returned by
NtSetInformationToken is not at all fatal, nor is it an exception.

The only exceptions in this code occur right after figuring
out the DC, when calling functions to request user or group information
from the DC, NetUserGetGroups and NetUserGetLocalGroups.  But these
are first chance exceptions for the debugger.  They don't occur if
no debugger is present.

However, for some reason, when this exception occurs in the sshd grand
child which is (probably) supposed to execve the shell, this exception
appears to be fatal suddenly.  There's no hint at all why, given that
it's a simple "access denied".

This is really unexpected.  We can try to workaround that, but it's
puzzeling that this should be required at all.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--TeJTyD9hb8KJN2Jy
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=d8R+
-----END PGP SIGNATURE-----

--TeJTyD9hb8KJN2Jy--

- Raw text -