X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type; q=dns; s=default; b=LTOwYpM3GsS9LbgmUN6Wx7ageeHPN
	i8Ets1ZWnXqxDvs+DBSO3OXWS7FNBLJJWXeioYPewp0472zgTNfqFWlgvlJdfO4b
	wci5AdnM42oW7pbezdFIyGJPpYYQOYLMCxiu0OWcem3QSf8kiENmMVaoctN8DjVe
	i/IeFa04io3rnc=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type; s=default; bh=u92G+jO6ZNIX16+Hevex1vUs62A=; b=aWN
	sajW05h+bb21yFkSGWhBr53hJwBUHJjSVRFZmgzEiVLp2TYBb9L7t+oMJTnw69Bu
	JmvxEzJaiioWwSQ3BMXBlfV01Pj/ZFkx27RkPKKxdZIUmUpI1oOeHo2rK0GcIwcB
	wl1f+O1plk1DJUybdir5NRVC1r6vRW7Fw+dqJWI0=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=1.0 required=5.0 tests=BAYES_40,KAM_LAZY_DOMAIN_SECURITY,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO:	dusares.com
Message-ID:	<553A597B.3050606@dusares.com>
Date:	Fri, 24 Apr 2015 10:55:55 -0400
From:	Peter Senft <peter AT dusares DOT com>
User-Agent:	Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Exim unable to send email with error "unable to set gid=544 or uid=18 after update

--xLowXb8D28XR9Vxs80ERLsqXQd3AD58vv
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi,

I had a perfectly fine running exim configuration, that delivered mail
to a smart host and rewrote the sender address to be a specific one
(necessary for the smart host). Then, through the installation of some
additional tools, I also got an update for Exim (now Exim version 4.84
#1 built 25-Jan-2015 22:16:19). Since then I receive the following error
message, when I try to send emails:

-----> snip <-----
2015-04-24 14:20:21 unable to set gid=3D544 or uid=3D18 (euid=3D197108):
privilege not needed
-----> snap <-----

Google was no help at all here and all I got out of this was, that I
should not need the privilege because I have it already, but then it
fails to get the privilege. Very confusing and not helping at all.
Especially, when nothing changed but the update.

One thing that was odd though, was that the output of mkpasswd -l
changed. Some shell entries switched from /bin/false to /bin/bash. But I
tried both versions and neither one works. FYI, I renamed Administrator
to root in the passwd and group file.

The server runs as user cyg_server:

-----> snip <-----
$ id cyg_server
uid=3D197610(cyg_server) gid=3D197121(None) groups=3D11(Authenticated
Users),197121(None),544(root),545(Users)
-----> snap <-----

Then I checked what is in /etc/passwd:

-----> snip <-----
SYSTEM:*:18:18:U-NT AUTHORITY\SYSTEM,S-1-5-18:/home/SYSTEM:/bin/bash
LOCAL SERVICE:*:19:19:U-NT AUTHORITY\LOCAL SERVICE,S-1-5-19:/:/sbin/nologin
NETWORK SERVICE:*:20:20:U-NT AUTHORITY\NETWORK
SERVICE,S-1-5-20:/:/sbin/nologin
Administrators:*:544:544:U-BUILTIN\Administrators,S-1-5-32-544:/:/sbin/nolo=
gin
NT SERVICE+TrustedInstaller:*:328384:328384:U-NT
SERVICE\TrustedInstaller,S-1-5-80-956008885-3418522649-1831038044-185329263=
1-2271478464:/:/sbin/nologin
root:*:197108:197121:U-WINBUILD\Administrator,S-1-5-21-2134289365-123406699=
9-3699115456-500:/home/Administrator:/bin/bash
cyg_server:*:197610:197121:U-WINBUILD\cyg_server,S-1-5-21-2134289365-123406=
6999-3699115456-1002:/home/cyg_server:/bin/bash
Guest:*:197109:197121:U-WINBUILD\Guest,S-1-5-21-2134289365-1234066999-36991=
15456-501:/home/Guest:/bin/bash
-----> snap <-----

Then I checked what is in /etc/group:

-----> snip <-----
SYSTEM:S-1-5-18:18:
NT
SERVICE+TrustedInstaller:S-1-5-80-956008885-3418522649-1831038044-185329263=
1-2271478464:328384:
Access Control Assistance Operators:S-1-5-32-579:579:
root:S-1-5-32-544:544:
Backup Operators:S-1-5-32-551:551:
Certificate Service DCOM Access:S-1-5-32-574:574:
Cryptographic Operators:S-1-5-32-569:569:
Distributed COM Users:S-1-5-32-562:562:
Event Log Readers:S-1-5-32-573:573:
Guests:S-1-5-32-546:546:
Hyper-V Administrators:S-1-5-32-578:578:
IIS_IUSRS:S-1-5-32-568:568:
Network Configuration Operators:S-1-5-32-556:556:
Performance Log Users:S-1-5-32-559:559:
Performance Monitor Users:S-1-5-32-558:558:
Power Users:S-1-5-32-547:547:
Print Operators:S-1-5-32-550:550:
RDS Endpoint Servers:S-1-5-32-576:576:
RDS Management Servers:S-1-5-32-577:577:
RDS Remote Access Servers:S-1-5-32-575:575:
Remote Desktop Users:S-1-5-32-555:555:
Remote Management Users:S-1-5-32-580:580:
Replicator:S-1-5-32-552:552:
Users:S-1-5-32-545:545:
WinRMRemoteWMIUsers__:S-1-5-21-2134289365-1234066999-3699115456-1000:197608:
None:S-1-5-21-2134289365-1234066999-3699115456-513:197121:
-----> snap <-----

Any help here is greatly appreciated, because the same happened on
multiple machines at the same time.

Thanks,

Peter

--=20
/"\                        | Peter Senft
\ / ASCII ribbon campaign  | E-Mail : peter AT dusares DOT com
 X  against HTML mail      | Jabber : dusares AT jabber DOT org
/ \                        | ICQ    : 62090394


--xLowXb8D28XR9Vxs80ERLsqXQd3AD58vv
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlU6WX4ACgkQ8C47DFW4ANMfBQCfdLxkVy6QQ9t8Bn8Gl+P4RU29
W78AoMTRkyXhUzbYN6t8y2jGMYs5UUjz
=/gOG
-----END PGP SIGNATURE-----

--xLowXb8D28XR9Vxs80ERLsqXQd3AD58vv--

- Raw text -