delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2015/02/20/18:32:39

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:message-id:date:from:mime-version:to:subject
:content-type:content-transfer-encoding; q=dns; s=default; b=Vre
u8r0X25cvI2rw+iSfZPSY42t/LpC4+qt1ARV9RluP22P7TPFfR9yqnl5ZuycitH/
3U4fiDCaZhxkYwV4FV3Pe8hRNJ3aNlRRGqLWSbZSnoFL3zymN7TAFy57/C57OvVc
+3BuU4ztZpoiMdJbRTPjXUhfWHF8XXjqoak7IW80=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:message-id:date:from:mime-version:to:subject
:content-type:content-transfer-encoding; s=default; bh=4ZRDDAor9
uVeihTWuVbuff90YgE=; b=hPwg9oEGokYDhqzEzjNqafXiT8B+rUFxGLij4tDWB
jKC0pNbCPlz7PgnNMY39IdDYM51BdtUef2BZD9eXO1yhc7zOXm5ldrSh850CZoc0
7rk6TVocJBgOE3gBHmVIk3YQ74rAIAAOx3gLrhP+ymh1x7LaAYx79LoNQPewFZqb
eo=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-3.6 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO: mail2.intersystems.com
X-InterSystems: Sent from InterSystems
X-InterSystems: Sent from InterSystems
Message-ID: <54E7C402.80306@intersystems.com>
Date: Fri, 20 Feb 2015 18:32:18 -0500
From: Len Giambrone <Leonard DOT Giambrone AT intersystems DOT com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: <cygwin AT cygwin DOT com>
Subject: bug in csih?
X-IsSubscribed: yes

Running the latest version:

$ cygcheck -c cygwin openssh csih
Cygwin Package Information
Package              Version        Status
csih                 0.9.8-5        OK
cygwin               1.7.34-6       OK
openssh              6.7p1-2        OK

When I run

    ssh-host-config -y -w XXXXX


I get this:

*** Query: Create new privileged user account 'WX64LG\cyg_server' 
(Cygwin name: 'cyg_server')? (yes/no) yes
*** Info: User 'cyg_server' has been created with password 'XXXXX'.
*** Info: If you change the password, please remember also to change the
*** Info: password for the installed services which use (or will soon use)
*** Info: the 'cyg_server' account.

*** Warning: Expected privileged user 'cyg_server' does not exist.
*** Warning: Defaulting to 'SYSTEM'

Even though it successfully creates the account, it refuses to use it.  
I believe this is because of the following code in 
csih_service_should_run_as()

     if csih_privileged_account_exists "$csih_PRIVILEGED_USERNAME" 1>&2
     then
       # it already existed before this script was launched
       echo "$csih_PRIVILEGED_USERNAME"
       return
     elif /usr/bin/getent passwd "${csih_PRIVILEGED_USERNAME}" 
 >/dev/null 2>&1
     then
       # we probably just created it
       echo "$csih_PRIVILEGED_USERNAME"
       return
     else
       # a failure somewhere
       csih_warning "Expected privileged user 
'${csih_PRIVILEGED_USERNAME}' does not exist." 1>&2
       csih_warning "Defaulting to 'SYSTEM'" 1>&2
       echo "SYSTEM"
       return
     fi

I am on a machine in a domain.  /usr/bin/getent passwd cyg_server 
returns nothing:
$ getent passwd cyg_server

Even though it exists:

$ net user cyg_server
User name                    cyg_server
Full Name                    Privileged server
Comment                      <cygwin home="/var/empty" shell="/bin/false"/>
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            2/20/2015 6:18:39 PM
Password expires             Never
Password changeable          2/20/2015 6:18:39 PM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory               C:\cygwin\var\empty
Last logon                   Never

Logon hours allowed          All

Local Group Memberships      *Administrators       *Users
Global Group memberships     *None
The command completed successfully.

Running it through strace, I see it's looking for DOMAIN\cyg_server, and 
not the local account.








-- 
-Len

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019