delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2015/03/11/06:19:46

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:from:to:subject:date:message-id:mime-version
:content-type:content-transfer-encoding; q=dns; s=default; b=ZRi
AmBE2v/yzC/w6ocnVD6SwnHnMzidQthIrCLa8QQ1XKzbpOvJ2vMSRnx7uHaA7VQU
4lvOcxeGFNsyFOClEKrp5dq8uL+RVfXBMTOvogdYMO7HnA72cfQK78mZEcwKa30l
V6l+orhJKX6rfaq2bSi33lHZzfGb7krDeZbzF+Fc=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:from:to:subject:date:message-id:mime-version
:content-type:content-transfer-encoding; s=default; bh=j6wGaMZ07
rvJYUTXIWSgtIQWvh0=; b=YdVlPWiZvJcYx/9x4wUUfVs6tSWFb82K7piimIIL3
ztq4v/o4qzcKnQ/rndjdxHneR1cKLDEypOoVu1UC6SJFaduoRpk15Fry3xIErnUR
lRAWXiZFOSW45N3c7VToYO3T8UFkK6kULTP9MqqVptlYZ81TENb2+DheyV0m4Ufi
mY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=0.3 required=5.0 tests=AWL,BAYES_00,MSGID_MULTIPLE_AT,RCVD_IN_DNSWL_LOW,SPF_PASS,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: nskntmtas04p.mx.bigpond.com
X-Authentication-Info: Submitted using ID max DOT rockliff AT bigpond DOT com
X-Authority-Analysis: v=2.0 cv=RsdH3VaK c=1 sm=1 a=6VslrNzXsdlmF2QCmrgadw==:17 a=kj9zAlcOel0A:10 a=1IlZJK9HAAAA:8 a=F65Tz-PLFONt3hWwgDwA:9 a=CjuIK1q_8ugA:10 a=6VslrNzXsdlmF2QCmrgadw==:117
From: "Max Rockliff" <max DOT rockliff AT bigpond DOT com>
To: <cygwin AT cygwin DOT com>
Subject: Non-privileged use can't logon
Date: Wed, 11 Mar 2015 18:19:12 +0800
Message-ID: <003601d05be4$d2574470$7705cd50$@rockliff@bigpond.com>
MIME-Version: 1.0
X-IsSubscribed: yes

Hi,

I'm raising this question again, after having removed CYGWIN SSHD and
resinstalled.

I am unable to execute an SSH <user>@localhost.  I am prompted for the
password and successfully logged on, only to receive an error message (see
below) and the session closed immediately.

Error Message:
1 [main] sshd 8284 C:\cygwin\usr\sbin\sshd.exe: *** fatal error - unable to
load C:\Windows\system32\userenv.dll, Win32 error 1114
Connection to localhost closed.

My Cygwin installation is on a Vista Home Premium (yes I know it's an old
OS), but the version I've been running for the past 3 years worked
perfectly.

The most interesting observation is that the logon works *if* I make the
user a member of the local Administrators group.

The Win32 1114 is a failure to initialise the dll.  The observed fact that
logging on with an administrator user account works, suggests that it is a
Windows privilege problem.  However, I would have thought that the privilege
should rest with the SSHD service account, cyg_server, which is an
Administrator and nothing to do with the user account trying to logon
through the SSH command.

Please remember that the old version I was running worked just fine.

I could work around using the account as a privileged account, but that's
not terribly desirable in this instance as the only intent of the SSHD
connection is to establish a tunnel for port redirection, so I'd prefer NOT
to expose a privileged account.

This is quite frustrating as I was simply trying to upgrade to the latest
(less vulnerable) SSHD daemon/service, from my 3-year old version.

I know one person on the forum has recently upgraded their SSHD on a Win8
machine and reported that they were able to ssh logon with an unprivileged
account.  So maybe it's a Vista backwards compatibility issue, but even then
I'm not convinced.

It might be constructive to understand what the default bash script is
trying to do that invokes a routine from userenv.dll.

I hope someone can help.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019