X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:to:message-id:subject
	:mime-version:content-type:content-transfer-encoding:references;
	q=dns; s=default; b=RNPxNnsVC0rqw55hQBoqq5KS2S45cXI4TQ3zY/6PwYR
	PJjPJbriYlesuYyLZDkDQR2+84E9AK+mkYnfrbtlTci1kJ9z/iK0C9bnJkjtsUSw
	/+E2EYeADLB4r5Szi5lcWQ4u6LC9QpsWEdJJbl7gP+JPgZs7OToPs5X4PgRdYHwg
	=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:to:message-id:subject
	:mime-version:content-type:content-transfer-encoding:references;
	s=default; bh=MvtIWwIJAQApHVLmjK35QJA/RQA=; b=EEI1nlFh9FV/NeVhz
	vrlJhFq0qprIVTEWFzqYXVoiTWPGJhUHry6tme8dC5RwB0jTD8GgOW5POEvu2njS
	b0RUfr8hitH9UHGLx3VsBJi+nCZhp3F1ziCON1hdqIV1KUGeEsBMbz90TEMzyDX9
	2Y7SyEwFkL6iK0Y+69ZQuNNH8E=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=3.0 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2 spammy=credentials, 544, sbin, H*F:D*no
X-HELO:	nm44-vm7.bullet.mail.ne1.yahoo.com
Date:	Wed, 30 Dec 2015 11:59:57 +0000 (UTC)
From:	morten bjoernsvik <morten_bjoernsvik AT yahoo DOT no>
Reply-To:	morten bjoernsvik <morten_bjoernsvik AT yahoo DOT no>
To:	The Cygwin Mailing List <cygwin AT cygwin DOT com>
Message-ID:	<1586487723.7522145.1451476797458.JavaMail.yahoo@mail.yahoo.com>
Subject:	sshd - difference between keylogin and password
MIME-Version:	1.0
References:	<1586487723 DOT 7522145 DOT 1451476797458 DOT JavaMail DOT yahoo DOT ref AT mail DOT yahoo DOT com>
X-IsSubscribed:	yes

Hi all

Login in with private key gives less credentials than using password.
It is a no password private key.
user is a domain user.


How can this be fixed? I really like to use the private nopassword key.
Some security options in /etc/sshd_config ?
Haven't changed anything here except for kexAlgorithm



$ ssh test1-front.bptest.local -l sa_deploy
sa_deploy AT test1-front DOT bptest DOT local's password:
Last login: Wed Dec 30 12:02:08 2015 from 10.11.51.56

sa_deploy AT vmics01t1 ~
$ id
uid=1050685(sa_deploy) gid=1049089(Domain Users) groups=1049089(Domain Users),545(Users),544(Administrators),4(INTERACTIVE),66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),4095(CurrentSession),70145(Authentication authority asserted identity),1049758(grp_sec_localadmin_test),1050679(grp_sec_localadmin_all_dev_environments),405504(High Mandatory Level)


sa_deploy AT BPOLMOBJ1 ~
$ ssh -i sa_deploy.key test1-front.bptest.local -l sa_deploy
Last login: Wed Dec 30 12:09:39 2015 from 10.11.51.56

sa_deploy AT vmics01t1 ~
$ id
uid=1050685(sa_deploy) gid=1049089(Domain Users) groups=1049089(Domain Users),11(Authenticated Users),66048(LOCAL),66049(CONSOLE LOGON),4(INTERACTIVE),15(This Organization),545(Users),4095(CurrentSession),401408(Medium Mandatory Level)



$ cygcheck -s | grep ssh | uniq
Found: C:\cygwin64\bin\ssh.exe
143k 2015/03/17 C:\cygwin64\bin\cygssh2-1.dll
Service             : sshd
Display name        : CYGWIN sshd
Command             : /usr/sbin/sshd -D
libssh2_1            1.5.0-1            OK
openssh              7.1p1-1            OK


Thanks, any help really appreciated.

--
Morten Bjoernsvik, Oslo, Norway

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -