delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2019/04/23/04:45:44

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:date:from:to:subject:message-id:reply-to
:references:mime-version:content-type:in-reply-to; q=dns; s=
default; b=DlsrxciklIZPoP65M2KN8L4Os5+HJm1l2gGBCigtNCjaHzEJaQVYA
3n3Z2xS5spiunfVqEmadRq1/za9pP/ULJLHb2CEgNcSaOoKoYC51ZEod4vntRvkN
darZgOc04LHSgILITG46OnT/2fEKlKKChgQcNxFmucEyxL2tthQkeA=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:date:from:to:subject:message-id:reply-to
:references:mime-version:content-type:in-reply-to; s=default;
bh=ZeuAzL6QLNueBaGxM74PA86tjOM=; b=gIJxxMVBKYkquegZUxwtYVzwInZt
IEEV1vO3RpxtOHDuoutrSm5g7r1Du1NFAYNupKf48L5fljHYSvzdrtNgplfuE+IN
80GwAj0sZiA2rRsS0/FaePU9I+tspt7VqUmb2cKg/gc9c7zZQrT9kUIDk/JkL5D3
xIbsFzhAGL4me2A=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-101.2 required=5.0 tests=AWL,BAYES_05,GOOD_FROM_CORINNA_CYGWIN,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 spammy=H*F:U*corinna-cygwin, SYSTEM, cygwinannounce, cygwin-announce
X-HELO: mout.kundenserver.de
Date: Tue, 23 Apr 2019 10:45:26 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: HEADSUP: SSHD service rename
Message-ID: <20190423084526.GA30041@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20190128090013 DOT GL3912 AT calimero DOT vinschen DOT de> <1555968539753-0 DOT post AT n5 DOT nabble DOT com>
MIME-Version: 1.0
In-Reply-To: <1555968539753-0.post@n5.nabble.com>
User-Agent: Mutt/1.11.3 (2019-02-01)

--0F1p//8PRICkK4MW
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 22 14:28, JZeman wrote:
> When I try to install Cygwin sshd, it creates the cygsshd service in wind=
ows
> however, it isn't creating the cyg_server account or any other account. It
> wants to use the System account.=20

https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd1

Also see the OpenSSH release message section "Portability" at
https://cygwin.com/ml/cygwin-announce/2019-04/msg00017.html

So, yes.  Using the SYSTEM account instead of cyg_server is correct.
We now use S4U authentication rather than trying to create our own
user token.  We only invented cyg_server to workaround the issue
that SYSTEM services are not allowed to create user tokens starting
with Windows Server 2003.


Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--0F1p//8PRICkK4MW
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=MyVq
-----END PGP SIGNATURE-----

--0F1p//8PRICkK4MW--

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019