X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:in-reply-to
	:references:mime-version:content-type; q=dns; s=default; b=JJfIN
	PQqurR7xra6bJ5ZXliwGZ8IaxuDCrXF8sBHTZbD876ElKkXUe+zSoe+weVp+w+KA
	576HmOyRcY9pUeGCS8jZ5P2eJy4nT+2sb9CrYzrDKW+6S1/2UEhu4apMw4MD6xqI
	AL6xt5L4aLnd+ZBXgRUy5LWKKJ/AbRzPFa84Nw=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:in-reply-to
	:references:mime-version:content-type; s=default; bh=MCMH7p3c6iQ
	3CcTcuPkmdBaw5ME=; b=oGZxHGXuHiq80Z5UWBsuX8ZjAaiXXuA7TGpKcVo/200
	j64Fjsp+eskGliIZJLMQTzQ1mCZlKxVSTb8gnKUiYZ8ASDa/PgDTfbUTSB/1AZto
	lI0sh0WEzznCO1vuyzbk7XyV+TudJZOfha1B52vGMZoz/rPrav3Hh6ZoJcASbW/Y
	=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-2.0 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=Package, 2.3, rights, H*c:HHHH
X-HELO:	conssluserg-02.nifty.com
DKIM-Filter:	OpenDKIM Filter v2.10.3 conssluserg-02.nifty.com w5FAuLJ1030371
X-Nifty-SrcIP:	[125.3.30.127]
Date:	Fri, 15 Jun 2018 19:56:35 +0900
From:	Takashi Yano <takashi DOT yano AT nifty DOT ne DOT jp>
To:	cygwin AT cygwin DOT com
Subject:	Re: [bug: csih] Setting privileged rights to cyg_server fails on Windows 7.
Message-Id:	<20180615195635.7fdf5323f459034451b675c3@nifty.ne.jp>
In-Reply-To:	<20180614113132.GB2587@calimero.vinschen.de>
References:	<20180613224901 DOT d2cf679cef8eab89a834c494 AT nifty DOT ne DOT jp> <20180613181407 DOT GT7851 AT calimero DOT vinschen DOT de> <20180614062218 DOT eee6704d2ebc62383a2927c7 AT nifty DOT ne DOT jp> <20180614091642 DOT GA2587 AT calimero DOT vinschen DOT de> <20180614192957 DOT 2128dbee897097bddb0844e4 AT nifty DOT ne DOT jp> <20180614113132 DOT GB2587 AT calimero DOT vinschen DOT de>
Mime-Version:	1.0
X-IsSubscribed:	yes

--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Hi Corinna,

On Thu, 14 Jun 2018 13:31:32 +0200
Corinna Vinschen wrote:
> 2) I'm logged in with a non-admin domain account.  If I open a
>    shell with "run as administrator", enter credentials for the
>    above domain admin account, LOGONSERVER is set correctly.

In this case, LOGONSERVER is NOT set in my environment.
Are you sure of the above result?

Anyway, I tested csih-0.9.10-1 released yesterday.

First of all, iu-config shows error message at the beginning.

*** ERROR: winProductName: C:/cygwin/lib/csih/winProductName.exe: error while loading shared libraries: libssp-0.dll: cannot open shared object file: No such file or directory

libssp0 package is installed as follows. However, it seems to provide
cygssp-0.dll, but not libssp-0.dll. Is any aother package required?

$ cygcheck -c libssp0
Cygwin Package Information
Package              Version        Status
libssp0              6.4.0-4        OK

Even with the error above, iu-config seems to work. So, I continued
testing. Testing was done in the following 8 scenarios.

Machine not on a domain:
1.1. Non-admin account + "Run as administrator" for admin
1.2. Admin account

Machine on a domain:
2.1. Local non-admin account + "Run as administrator" for local admin
2.2. Local non-admin account + "Run as administrator" for domain admin
2.3. Domain non-admin account + "Run as administrator" for local admin
2.4. Domain non-admin account + "Run as administrator" for domain admin
2.5. Local admin account
2.6. Domain admin account

Results are as follows.

1.1: OK
1.2: OK
2.1: Failed
2.2: Failed
2.3: Failed
2.4: Failed
2.5: Failed
2.6: OK

In failure cases, error message is:
passwd: unknown user cyg_server
*** Warning: Setting password expiry for user 'cyg_server' failed!
*** Warning: Please check that password never expires or set it to your needs.
*** Warning: Expected privileged user 'cyg_server' does not exist.
*** Warning: Defaulting to 'SYSTEM'

To resolve this problem, I would like to propose a patch attached.
I tested the patch for above 8 scenarios, and succeeded for all.

Could you please have a look?

-- 
Takashi Yano <takashi DOT yano AT nifty DOT ne DOT jp>

--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_
Content-Type: application/octet-stream;
 name="csih.patch"
Content-Disposition: attachment;
 filename="csih.patch"
Content-Transfer-Encoding: base64
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--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_
Content-Type: text/plain; charset=us-ascii


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_--

- Raw text -