X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	q=dns; s=default; b=tzEr1Qd+tQNoJEdGh7Hon2zb3YgY3cXg82dCGzFhIjA
	aMqwly6N7jRXc7oLq/DOxccwgJ2E3XJbKuP9kvph79dK7JKImAfBKzKgLqgxcidG
	zmrjwhoQkV4zBdsypFovrT5XUfqQ7YPm1FAyqGWR0N/p+yqjsXczURRPaPJZ5XUs
	=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	s=default; bh=t1ARUzC+yPtG14R8flk4EezBsho=; b=mcjFA2MfnZ3LV/i8S
	3aXwsnpb04Ib9qVRWQA8uXsTWLwM6QFGYqP6V83sV6yLZvDLUNVPMXXwTztlA/L8
	18Fi13rbdvFJiR804h40/jfB/VotXHKdSGcG6PLbx+SFZkEQMwbzWKM+8dNhGkpo
	rSgslMrjMlmyvGj53alxCU0Iwo=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.4 required=5.0 tests=AWL,BAYES_00,SPF_PASS,T_RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO:	mgw-sa01.nokia.com
Message-ID:	<54A809B5.5020603@nokia.com>
Date:	Sat, 03 Jan 2015 17:24:37 +0200
From:	Ilya Dogolazky <ilya DOT dogolazky AT nokia DOT com>
User-Agent:	Mozilla/5.0 (X11; Linux i686 on x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Never ending SSHD story: offering public key terminates connection
References:	<54A485DE DOT 1090802 AT nokia DOT com> <54A77392 DOT 40704 AT cygwin DOT com>
In-Reply-To:	<54A77392.40704@cygwin.com>
X-Nokia-AV:	Clean
X-IsSubscribed:	yes

Hi Larry!

01/03/2015 06:44 AM, ext Larry Hall (Cygwin) wrote:
 > use ssh-user-config

The manual key creation doesn't do any harm, because the problem is 
obviously on the server side. To see this I did all the testing running 
the client on a remote machine, no difference in symptoms.

 > Don't use 'ssh-host-config -y'.

I don't quite understand: what answers should I give to the script?
If there is any question which should not be answered by "yes", please 
explain which question and what should be the answer.

 > Drop the flag "-y" ... so that you get a proper password.

As a matter of fact even with the "-y" flag the script asks for the 
password for the new user, "xx" is the "proper password" I'm using 
(there are no seciruty concerns in my setup)

 > If you don't have a "root" in your '/etc/group' file...

I do have it, here is the very first line from the file:
root:S-1-5-32-544:0:

 > If that doesn't work, you may have gotten caught by permissions 
settings as
 > a result of having the sshd service improperly started by the SYSTEM 
user.

It seems to me that SYSTEM user needs a security capability to call 
"seteuid". Being a member of "Administartors" group doesn't seem to be 
enough Alas I don't know which capability needs to be added
I found a UI program called "Local Security Policy", but I don't know 
which of those properties is/are needed for "seteuid" call

 > you could just wipe out your
 > installation and start over

I do it every day many times anyway, including fresh windows 
installation (as I described in one of the previous messages). Very 
frustrating the whole business.

Ilya


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -