X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 366B2383543B
Authentication-Results:	sourceware.org; dmarc=none (p=none dis=none)
	header.from=parrotbyte.com
Authentication-Results:	sourceware.org;
	spf=pass smtp.mailfrom=art AT parrotbyte DOT com
From:	art <art AT parrotbyte DOT com>
To:	"'L A Walsh'" <cygwin AT tlinx DOT org>
Subject:	RE: Need admin privs before something can inherit them (was Re:
	ssh-host-config doesn't "inherit" user admin privilege)
Thread-Topic:	Need admin privs before something can inherit them (was Re:
	ssh-host-config doesn't "inherit" user admin privilege)
Thread-Index:	AQHW6uMPIJChpYKZnkafSvBbdNZv2aon9eBQ
Date:	Fri, 15 Jan 2021 02:55:21 +0000
Message-ID:	<5d878506e47f4dc295a2f3c4e6dd8e8a@parrotbyte.com>
References:	<4da6176c0a89411c9cae02302b4dd505 AT parrotbyte DOT com>
	<6000F831 DOT 7080302 AT tlinx DOT org>
In-Reply-To:	<6000F831.7080302@tlinx.org>
Accept-Language:	en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip:	[192.168.0.124]
MIME-Version:	1.0
X-Spam-Status:	No, score=-1.9 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
	SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Cc:	"'cygwin AT cygwin DOT com'" <cygwin AT cygwin DOT com>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

Yes, I did a right-click on the cygwin terminal icon and chose a "run as administrator" option. This is like doing a sudo to start a linux shell... everything run in the shell inherits "admin"/"root" as appropriate. Followed by using this shell to do:

cd /usr/bin
./ssh-host-config

I entered 'yes' responses to the various setup questions including yes to privileged separation. I never bumped into this sort of inheritance problem in Windows 7 and earlier. Seems to be a Windows 10 "feature". This past week I ran into the same problem using an Intel supplied command script to install their hydra_mpi server. Another knowledgeable Windows 10 user reports he, too, has encountered this issue.

After installation I do some local tweaks to sshd_config such as disablng plain-text password logins. I'm able to succesfully connect using ssh/sftp from other platforms to this system using public key authentication. Windows is configured to autostart cygsshd.

I can add that I previously added C:\cygwin64 to the list of Windows Defender exceptions.

Yes, I used to do a lot of work on Control Data Cyber205s, ETA-10s and Cray C90s. Practically speaking vector operations can make effective use of memory bandwidth.
In other words, a vector a day keeps the scalars away! 

Regards,

Art

-----Original Message-----
From: L A Walsh [mailto:cygwin AT tlinx DOT org] 
Sent: Thursday, January 14, 2021 6:05 PM
To: art
Cc: 'cygwin AT cygwin DOT com'
Subject: Need admin privs before something can inherit them (was Re: ssh-host-config doesn't "inherit" user admin privilege)

On 2021/01/14 17:21, art wrote:
> I get a security code 5 when ssh-host-config tries to install cygsshd. I was logged into Win 10 pro/x64 as an admin user. The "fix" was to start a Cygwin64 Terminal with Admin and then run ssh-host-config within this script. 
You say ssh-host-config tries to install cygsshd.  How was ssh-host-config
called (started)?  When Cygwin64 Terminal was run, it was run with Admin
at the start.  Was that done when ssh-host-config was run?

How was it run?

unrelated...:
> Veni, vidi, vectori! @1976, 2021
>   
---
You like vectoring, I take it?  :-)?
Cheers!
Linda
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -