X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:subject:to:references:from:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=L0iMlTs2+DpSyGNc
	lXGd4pAg5c2y2/RYWucVU1qULC2/roaks9k5239p4SYal2UEMLBzQOCLbTCiUXH0
	1cj7ichSgkeRXV5JD4UoaniJP0o33fpgJVWOlF5Mm07gMS2RVIjyFofgJdPCKCju
	DxLm7BLG6ys0U1PqCXJ0TDrVszo=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:subject:to:references:from:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=PTxrXfNGPfu8CXnpHiAxJv
	YUlSQ=; b=oFI8mf+cskFTP+BbSVQH45Wvg4LrEjGcvHSWIzM4T9jgEGox2LNRNC
	NUJJKu73VPdqMbEeC/Pm0OKwrmWper61OSEYaQLsEkv9N4dz6OXzNpb2G9PJKUWC
	+8SHbIHPmrthzfU0Ps4c13eQomo7FGiFCo8ifXMw7IrwBzVrMex5g=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.8 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=no version=3.3.2 spammy=Services, act, his, services
X-HELO:	smtp-out-so.shaw.ca
X-Authority-Analysis:	v=2.3 cv=cav8UELM c=1 sm=1 tr=0 a=MVEHjbUiAHxQW0jfcDq5EA==:117 a=MVEHjbUiAHxQW0jfcDq5EA==:17 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=5XokXtswbGC1uQ9QsCcA:9 a=QEXdDO2ut3YA:10 a=OO2XiV6ZNdAA:10 a=sRI3_1zDfAgwuvI8zelB:22
Reply-To:	Brian DOT Inglis AT SystematicSw DOT ab DOT ca
Subject:	Re: sshd: PID 2308: fatal: seteuid 1090146: Permission denied --> Login to domain server windows 2k12r2 not possible
To:	cygwin AT cygwin DOT com
References:	<5AA122070200001D000536EA AT gwia2 DOT boku DOT ac DOT at>
From:	Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Message-ID:	<bf24dc16-98c5-07b8-de81-3066ff2d251c@SystematicSw.ab.ca>
Date:	Thu, 8 Mar 2018 08:24:21 -0700
User-Agent:	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version:	1.0
In-Reply-To:	<5AA122070200001D000536EA@gwia2.boku.ac.at>
X-CMAE-Envelope:	MS4wfEfyRSfzh+7d+Qcr/PY9GLo1mtvCSGKnEAc92Nt6ygdRA9iHzg/0vw2PhdKqa2tOBype2R0/ULRfgB03+4YSJm6EUeaJMR5B9u6vet4eOrVBCYH9QSjm 3FMFvxo0t8KBtNE8OqNdCOxNZYi/Cp85C2TiiiQTzrXtrXaxUxeC4uJtkSD6yB5x9qwWcLSKGCCaIA==
X-IsSubscribed:	yes

On 2018-03-08 04:44, Bernhard Finster wrote:
> login via ssh to cygwin on a domain server 2012r2 standardis not possible (see error in mail subject). The login is either with password, nor with publickey possible.
> The package was created with cygwinsetup.exe v 2.877 (32bit) and works fine on every standalone servers. I have createt a setup batch file with the content below:
> 
> 	c:\start\cygwin\setup.exe -q --local-install --root c:\cygwin -l c:\Start\cygwin
> 	cd C:\cygwin\bin  
> 	bash --login -c "ssh-host-config -y -c "tty ntsec" -u "cyg_server" -w "password" --privileged"  
> 	bash --login -c "mkdir .ssh"  
> 	bash --login -c "cp /cygdrive/c/Start/authorized_keys .ssh/authorized_keys"  
> 	bash --login -c "chmod 700 .ssh"
> 	bash --login -c "cygrunsrv -S sshd"
> 	bash --login -c "syslog-ng-config -y"
> 	bash --login -c "cygrunsrv -S syslog-ng"
> 
> The setup is always startet with the user "Administrator AT domain" after joining the domain.
> In my test-domain I have enabled the following user right assignement for the domain admin cyg_server:
> 
> * Act as part of the operating system
> * Create a token object
> * Log on as a batch job
> * Log on as a service
> * Repace a process level token
> * Deny log on locally
> * Deny logon through Remotedesktop Services
> 
> Attachements:
> 
> * ssh_config, sshd_config, original copy from the server
> * ssh-ddd.txt is the output of the command "/usr/sbin/sshd -d -d -d"
> * ssh-vvv.txt is the output of a login attempt to the server (usual Administrator AT hostname), I have defined in .ssh/config (host * user Administrator)
> * messages.txt is the output of a login attemt to the server from his syslog-ng log
> * cygcheck
> 
> Sorry for my bad english, I hope it will get better.
> Please help if you have any idea for me to get out of this desaster.

You might want to try upgrading setup, upgrading installed packages, and
manually running the ...-config scripts elevated, to see if that fixes the problem.

seteuid handling:
https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -