delorie.com/archives/browse.cgi | search |
X-Recipient: | archive-cygwin AT delorie DOT com |
DKIM-Filter: | OpenDKIM Filter v2.11.0 sourceware.org C494F385842B |
DKIM-Signature: | v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; |
s=default; t=1657763299; | |
bh=lQpWiairbQ3Ew0+3+K5ALDZu6F3aaaznaYQt5TPeta4=; | |
h=To:Subject:Date:References:In-Reply-To:List-Id:List-Unsubscribe: | |
List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc: | |
From; | |
b=wR0gVor+CoQ5I+8jn5sHRShYS1nKd2AW2yoqr+L2US2FCAb21i5oFBj41VkYc/Vw/ | |
Vc+8rXhnHe7HPmsrrv1pj41FId1QsG8IWyXdrA92RdduxeWAk7+tI7G73jvWj1uL2j | |
gJBSSjW+oDZoemwZrcyDIN5Bu7D4BL0BqKELNTOw= | |
X-Original-To: | cygwin AT cygwin DOT com |
Delivered-To: | cygwin AT cygwin DOT com |
DMARC-Filter: | OpenDMARC Filter v1.4.1 sourceware.org 4E2733858D1E |
To: | "'Stephen Carrier'" <carrier AT berkeley DOT edu>, |
"'Achim Gratz'" <Stromeko AT nexgo DOT de> | |
Subject: | RE: EXTERNAL SENDER: Re: Issue with seteuid and openssh |
Thread-Topic: | EXTERNAL SENDER: Re: Issue with seteuid and openssh |
Thread-Index: | AQHYcGAZF2x6ammIfkqmXnc0DlXWv60yJ8SAgEs2iWA= |
Date: | Thu, 14 Jul 2022 01:47:04 +0000 |
Message-ID: | <ca6b1a16f76e4a9bb5f1817281424f4b@bryanhealth.org> |
References: | <aebd99eefc4e4c6697a9d2dacd8be275 AT bryanhealth DOT org> |
<877d694i25 DOT fsf AT Rainer DOT invalid> <20220526234307 DOT GB13111 AT iguana DOT crashland DOT org> | |
In-Reply-To: | <20220526234307.GB13111@iguana.crashland.org> |
Accept-Language: | en-US |
X-MS-Has-Attach: | yes |
X-MS-TNEF-Correlator: | |
x-originating-ip: | [10.240.2.50] |
MIME-Version: | 1.0 |
X-Proofpoint-GUID: | 4cLuwlNQ7rHvsTRDIcuY9rKYC636KNHN |
X-Proofpoint-ORIG-GUID: | 4cLuwlNQ7rHvsTRDIcuY9rKYC636KNHN |
X-Proofpoint-Spam-Details: | rule=outbound_notspam policy=outbound score=0 |
spamscore=0 adultscore=0 | |
mlxscore=0 phishscore=0 lowpriorityscore=0 clxscore=1011 suspectscore=0 | |
impostorscore=0 mlxlogscore=999 priorityscore=1501 bulkscore=0 | |
malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 | |
engine=8.12.0-2206140000 definitions=main-2207140006 | |
X-Spam-Status: | No, score=-0.7 required=5.0 tests=BAYES_00, DKIM_SIGNED, |
DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, LIKELY_SPAM_FROM, RCVD_IN_DNSWL_LOW, | |
SPF_HELO_NONE, SPF_PASS, TXREP, | |
T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 | |
X-Spam-Checker-Version: | SpamAssassin 3.4.6 (2021-04-09) on |
server2.sourceware.org | |
X-BeenThere: | cygwin AT cygwin DOT com |
X-Mailman-Version: | 2.1.29 |
List-Id: | General Cygwin discussions and problem reports <cygwin.cygwin.com> |
List-Archive: | <https://cygwin.com/pipermail/cygwin/> |
List-Post: | <mailto:cygwin AT cygwin DOT com> |
List-Help: | <mailto:cygwin-request AT cygwin DOT com?subject=help> |
List-Subscribe: | <https://cygwin.com/mailman/listinfo/cygwin>, |
<mailto:cygwin-request AT cygwin DOT com?subject=subscribe> | |
From: | Dale Lobb via Cygwin <cygwin AT cygwin DOT com> |
Reply-To: | Dale Lobb <Dale DOT Lobb AT bryanhealth DOT org> |
Cc: | "'cygwin AT cygwin DOT com'" <cygwin AT cygwin DOT com> |
Sender: | "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com> |
--_002_ca6b1a16f76e4a9bb5f1817281424f4bbryanhealthorg_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Greetings All, I got the chance to work on this issue some more today. Unfortunately, n= one of the suggestions helped. What I tried: 1. I verified that that the windows firewall is allowing port 22 inbound= for the cygsshd service. This has not changed since system inception last= year. 2. I verified that the cygsshd service has a dependency on the tcpip ser= vice and I set cygsshd to delayed automatic start: no change in behavior a= fter reboot. 3. I installed the cygserver service and set it to delayed automatic sta= rt. I changed the cygsshd service back to normal automatic start and added= a dependency on the cygserver service: again, no change in behavior after = reboot. I also verified that a windows console login will end the embargo on cygs= shd after reboot, just as an RDP session will. Any other ideas? Best Regards, Dale Lobb > -----Original Message----- > From: Cygwin <cygwin-bounces+dale.lobb=3Dbryanhealth DOT org AT cygwin DOT com> > On Behalf Of Stephen Carrier > Sent: Thursday, May 26, 2022 6:43 PM > To: Achim Gratz <Stromeko AT nexgo DOT de> > Cc: cygwin AT cygwin DOT com > Subject: EXTERNAL SENDER: Re: Issue with seteuid and openssh > > In the 2019 occurence of a similar problem, cygserver wasn't being used, > so I would be interested and happy to hear if running it and waiting for = it > are enough to fix this. > > --Stephen > > > On Wed, May 25, 2022 at 07:51:14PM +0200, Achim Gratz wrote: >>Check the dependencies on both the cygserver and sshd service definitions= . >> You must start them after the network is up (make them both depend >> on tcp_ip and sshd depend on cygserver) or they won't work correctly. >> On domain machines that sometimes still isn't quite enough, so I've set >> them to "delayed start" in those instances and that seems to have fixed = it. >> >>Also check that the firewall allows connections through whatever port you= 've >> configured sshd to use. >> >>Regards, >>Achim. >> >>Dale Lobb wrote on 5/24/2022: >>>Greetings All, >>> >>> Has anyone seen an issue similar to this? >>> >>> I have a VMWare virtual machine loaded with Windows Server 2016 OS and >>>a Cygwin installation. Cygwin runs an installed SSHD service via >>>cygrunsrv.exe. A data gateway engine on a different machine makes regul= ar >>>programmatic connections via SFTP to the server throughout the day. Thi= s >>>setup was established in 2021 and has run without issue for almost a yea= r. >>> >>> Last night, the server rebooted automatically after windows updates. >>>After the reboot, the data gateway was then no longer able to connect to >>>the server. This condition persisted until I was informed of the issue >>>this morning and connected to the Windows server using RDP to take a loo= k >>>at the issue, at which point the SSH connection suddenly started working= . >>>Further tests showed this to be entirely repeatable. After rebooting th= e >>>server, the SSHD daemon does not allow connections, neither with passwor= d >>>nor public key authorization, until someone connects to the server via R= DP, >>>at which time the SSH connections suddenly starts working again. >>> >>> The server's Windows application event log shows numerous errors from >>>the SSHD daemon stating "sshd: PID <####>: fatal: seteuid 197108: No suc= h >>>device or address" during the time frame when SSH connection were not >>>working. The errors stop immediately when the RDP connection is recorde= d >>>in the same event log. >>> >>> A google search for the error message turned up something somewhat >>>similar from this mailing list back in March of 2019, but there is no >>>mention of RDP in that exchange. Also, the advice given, to convert the >>>SSHD service from running under the cyg_server account to LocalSystem, d= oes >>>not apply here, because the Cygwin installation is recent enough that it= is >>>already running under LocalSystem. >>> >>> When this issue started, the server was running openssh-8.7p1-1. The >>>server was subsequently updated to the latest, openssh-9.0p1-1, but ther= e >>>has been no change in the observed behavior. >>> >>>Best Regards, >>> >>>Dale Lobb ________________________________ CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is = for the sole use of the intended recipients and may contain confidential an= d privileged information. Any unauthorized review, use, disclosure or distr= ibution is prohibited. If you are not the intended recipient, please contac= t the sender by reply e-mail and destroy all copies of the original message= . --_002_ca6b1a16f76e4a9bb5f1817281424f4bbryanhealthorg_ Content-Type: text/x-vcard; name="Dale Lobb.vcf" Content-Description: Dale Lobb.vcf Content-Disposition: attachment; filename="Dale Lobb.vcf"; size=4581; creation-date="Thu, 14 Jul 2022 01:17:47 GMT"; modification-date="Thu, 14 Jul 2022 01:17:47 GMT" Content-Transfer-Encoding: base64 QkVHSU46VkNBUkQNClZFUlNJT046Mi4xDQpYLU1TLVNJR05BVFVSRTpZRVMNCk47TEFOR1VBR0U9 ZW4tdXM6TG9iYjtEYWxlDQpGTjpEYWxlIExvYmINCk9SRzpCcnlhbiBIZWFsdGg7SW5mb3JtYXRp b24gVGVjaG5vbG9neQ0KVElUTEU6U3lzdGVtcyBQcm9ncmFtbWVyDQpURUw7V09SSztWT0lDRToo NDAyKSA0ODEtMjEwOQ0KVEVMO0NFTEw7Vk9JQ0U6KDQwMikgNzMwLTEwNTANClRFTDtXT1JLO0ZB WDooNDAyKSA0ODEtODM1NA0KQURSO1dPUks7UFJFRjo7OzE2MDAgU291dGggNDh0aCBTdHJlZXQ7 TGluY29sbjtORTs2ODUwNi0xMjk5O1VuaXRlZCBTdGF0ZXMgb2YgQW1lcmljYQ0KTEFCRUw7V09S SztQUkVGO0VOQ09ESU5HPVFVT1RFRC1QUklOVEFCTEU6MTYwMCBTb3V0aCA0OHRoIFN0cmVldD0w RD0wQT0NCkxpbmNvbG4sIE5FIDY4NTA2LTEyOTkNClgtTVMtT0wtREVGQVVMVC1QT1NUQUwtQURE UkVTUzoyDQpVUkw7V09SSzp3d3cuYnJ5YW5oZWFsdGgub3JnDQpFTUFJTDtQUkVGO0lOVEVSTkVU OmRhbGUubG9iYkBicnlhbmhlYWx0aC5vcmcNClgtTVMtQ0FSRFBJQ1RVUkU7VFlQRT1KUEVHO0VO Q09ESU5HPUJBU0U2NDoNCiAvOWovNEFBUVNrWkpSZ0FCQVFFQVlBQmdBQUQvMndCREFBY0ZCUVlG QkFjR0JRWUlCd2NJQ2hFTENna0pDaFVQRUF3UkdCVWENCiBHUmdWR0JjYkhpY2hHeDBsSFJjWUlp NGlKU2dwS3l3ckdpQXZNeThxTWljcUt5ci8yd0JEQVFjSUNBb0pDaFFMQ3hRcUhCZ2MNCiBLaW9x S2lvcUtpb3FLaW9xS2lvcUtpb3FLaW9xS2lvcUtpb3FLaW9xS2lvcUtpb3FLaW9xS2lvcUtpb3FL aW9xS2lyL3dBQVINCiBDQUExQUdvREFTSUFBaEVCQXhFQi84UUFId0FBQVFVQkFRRUJBUUVBQUFB QUFBQUFBQUVDQXdRRkJnY0lDUW9MLzhRQXRSQUENCiBBZ0VEQXdJRUF3VUZCQVFBQUFGOUFRSURB QVFSQlJJaE1VRUdFMUZoQnlKeEZES0JrYUVJSTBLeHdSVlMwZkFrTTJKeWdna0sNCiBGaGNZR1Jv bEppY29LU28wTlRZM09EazZRMFJGUmtkSVNVcFRWRlZXVjFoWldtTmtaV1puYUdscWMzUjFkbmQ0 ZVhxRGhJV0cNCiBoNGlKaXBLVGxKV1dsNWlabXFLanBLV21wNmlwcXJLenRMVzJ0N2k1dXNMRHhN WEd4OGpKeXRMVDFOWFcxOWpaMnVIaTQrVGwNCiA1dWZvNmVyeDh2UDA5ZmIzK1BuNi84UUFId0VB QXdFQkFRRUJBUUVCQVFBQUFBQUFBQUVDQXdRRkJnY0lDUW9MLzhRQXRSRUENCiBBZ0VDQkFRREJB Y0ZCQVFBQVFKM0FBRUNBeEVFQlNFeEJoSkJVUWRoY1JNaU1vRUlGRUtSb2JIQkNTTXpVdkFWWW5M UkNoWWsNCiBOT0VsOFJjWUdSb21KeWdwS2pVMk56ZzVPa05FUlVaSFNFbEtVMVJWVmxkWVdWcGpa R1ZtWjJocGFuTjBkWFozZUhsNmdvT0UNCiBoWWFIaUltS2twT1VsWmFYbUptYW9xT2twYWFucUtt cXNyTzB0YmEzdUxtNndzUEV4Y2JIeU1uSzB0UFUxZGJYMk5uYTR1UGsNCiA1ZWJuNk9ucTh2UDA5 ZmIzK1BuNi85b0FEQU1CQUFJUkF4RUFQd0Q2Um9vb29BS0tNMFVBRkZGRkFCU0dscERRQmw2NXJs bm8NCiBHbW0rMUJpc0FkVVpnTTR5Y1Zac05SdE5UdGx1TENlT2VGaGtNalpyRzhjYWZaYW40WW10 TlJra2loZGwrZU1aS25QQi9PdkgNCiAyc1BFM2dLVVgralhKdWJBblBtdy9NaEhvNjlqWGJRdzBh MVBlMHZ3WjV0ZkZ5b1ZiV3ZIOFVmUVlwYzE1MzRWK0srbTYxNWQNCiB0cTIyd3ZDUU1zZjNibjJQ YjhhOUJSd3d5RGtIb2E1cXRHcFJseXpWanNvMTZkYVBOQjNKS0tRRUhwUzFtYkFhNG8rSVBFRGUN CiBOcE5BaWkwM0N4ZWQ1enEvM2V3eG5yWGExNTljZmJmK0Z3VC9BTm5HSHpmc0M1ODRIR1B3b0Ew dFk4UjZ2NGFrdHB0WnRiV2UNCiB3bWxFTHoyck1yUkU5Q1ZiT1J4WFdoZ2NIUFd2T3ZHc1dyUnhX MTU0aVdDNDBhMm5TU2FHMEpWaWM0Qk9lb3lhWmRXd3YvaVQNCiBZUTJ1b1hpV09vV0xUbFVtSUJC QlBIcGtZb0E5STNxUmtNTWZXbDNEMUZlYytMZkMzOWplQ0xoOU51N3g1TGFVVGJtbmJkdEoNCiB3 UndlbGFQaUdXM3YvQk9uUjZlMGdlK2VGTFFwSXdZRmlNOGc1NEdjMEFkb1dWUmtzQVBjMHBJOWE0 ZVN5MDYwMXE0aDFtL2ENCiA2ajJLdHJaUkYyYUpjY2toZStlNXFMd1V6NnRwK3VhYk5jWEp0NEx0 bzRXWnlKRVhBSUdldEFlcDEycWFmQnFlbnlXMC9DTjMNCiAvdW5zYTRTNzBqVmZEc3JTMjdtYTNQ M21VWlZoL3RMVC9BV2tEVy9Dbm02dmQzVnlCUElpbzB6QURwenh5VFdsOFBwWlh0TlYNCiBzcmlW NTRyUzlhS0x6RHVJWDB6VzlLdEtucDBPT3ZoWTF2ZTJsM09EMVR3dG8zaURkTFlGZEkxRThtTWsr UktmL1pNKzFVdEwNCiA4VStLUGgvZUpZNnRHODFpRGp5cFR1VUw2b3cvbHlQYXZRdkZ0ajRmc1dW NTcrRFRyaVU0VkNlR0o5aHlQcldKTTAxcmJDMDENCiBhM2p2dE9rKzZHK1pTUFZXN1Y2MGFrYWxQ VlhYWi9venhIVGxRcWIyZmRiZk5IcHVuWGtkL3A4TjNDZjNjeUIxK2hxMWlxR2oNCiBRd1FhUGJS V21SQXNZQ0FubkZYNjhPV2ttZlNRdTRwc1U5SzRXVFRQRVVmajJUWGJmVGJkN2RvZklFVFhRVmlC L0ZuSEgwcnUNCiBxS1JaeGV2Nlg0aDhWV2cweWUzdGRMMCtSMU54SUovT2tkUWNnS0FvQTVBNjFD MmhhdmIrTmJIVWJUVDR2c0ZqYmZaVVUzQTMNCiBGTVl6K1hhdTZvTkFGZTVpaXVyT1dHNlVHS1JD a2luMEk1RmNCNEUwbTZiVUgrMFhDM09sNlBOTEZwN2djT3pIbHZmQXlQcVQNCiBYVjYzNFppMXk2 aWU1dkxxT0ZGMnZCRktWV1FaNzAvVXRKZHRHaHNkSTIyd2hsaUtCZUFxcTRKL1FmalFCZ2FYcFd1 YURyV3ENCiBQQloydDh0OU41a2QwOXhzTWY4QXNzTUVuSHRSb1dsNjc0ZnU5WGFTMnQ3NzdiS1ox ZU9ZSUFTT2hEZHFzZjJCcWEzRUR6T2INCiBoWTd1U1J2bkF5cHhqajhPbExjNkxyVXR4cXN5eVI0 djdhYUZZdzVIbG5iaU0vNC9XZ0JuZ2ZUTlc4UDZETFlhamF4R1ZaSGwNCiBqTWM0dzViSEh0U2VE TksxZlNialUvN1R0WVk0N3ljenE4Y3dmYm5zUldqSnBNOTNxRUY1TEFzTHBiU3hzUE15ZDUyN0R4 N0ENCiAwYURwT29hZlBHMTdjbVpSYUxGeWZ1c0R6OWZyVEE4eTFud1dianhYcU9wZUpMd3hXejNM dEJid3R2bWxYZHgzd3E0Ly9WWFMNCiBhSk5MY3lRNlpwbW5SeDZXaDJtRGJ1RzMxTEh2VzBQQnJY dXMzTjNxTW1Jbm1aa1JUeVJuam50WFQydG5EWlFpSzFpV05CMkENCiByMEo0bVBJbzd2OEFCSGkw OEpVZFJ5ZWl2ODJPdG9FdGJaSVl4OHFEQXFYSDFwd3pTYmE4NW5zcEsydzZpaWlnWVVVVVVBRkIN CiA2VVVVQUpTNG9vb0FLS0tLQUNpaWlnQW9vb29BLzlrPQ0KDQpYLU1TLU9MLURFU0lHTjtDSEFS U0VUPXV0Zi04OjxjYXJkIHhtbG5zPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmlj ZS9vdXRsb29rLzEyL2VsZWN0cm9uaWNidXNpbmVzc2NhcmRzIiB2ZXI9IjEuMCIgbGF5b3V0PSJs ZWZ0IiBiZ2NvbG9yPSJmZmZmZmYiPjxpbWcgeG1sbnM9IiIgYWxpZ249Im1pZCIgYXJlYT0iNDYi IHVzZT0iY2FyZHBpY3R1cmUiLz48ZmxkIHhtbG5zPSIiIHByb3A9Im5hbWUiIGFsaWduPSJsZWZ0 IiBkaXI9Imx0ciIgc3R5bGU9ImIiIGNvbG9yPSIwMDAwMDAiIHNpemU9IjEwIi8+PGZsZCB4bWxu cz0iIiBwcm9wPSJ0aXRsZSIgYWxpZ249ImxlZnQiIGRpcj0ibHRyIiBjb2xvcj0iMDAwMDAwIiBz aXplPSI4Ii8+PGZsZCB4bWxucz0iIiBwcm9wPSJkZXB0IiBhbGlnbj0ibGVmdCIgZGlyPSJsdHIi IGNvbG9yPSIwMDAwMDAiIHNpemU9IjgiLz48ZmxkIHhtbG5zPSIiIHByb3A9Im9yZyIgYWxpZ249 ImxlZnQiIGRpcj0ibHRyIiBjb2xvcj0iMDAwMDAwIiBzaXplPSI4Ii8+PGZsZCB4bWxucz0iIiBw cm9wPSJibGFuayIgc2l6ZT0iNCIvPjxmbGQgeG1sbnM9IiIgcHJvcD0iYWRkcndvcmsiIGFsaWdu PSJsZWZ0IiBkaXI9Imx0ciIgY29sb3I9IjAwMDAwMCIgc2l6ZT0iNyIvPjxmbGQgeG1sbnM9IiIg cHJvcD0idGVsd29yayIgYWxpZ249ImxlZnQiIGRpcj0ibHRyIiBjb2xvcj0iMDAwMDAwIiBzaXpl PSI3Ij48bGFiZWwgYWxpZ249InJpZ2h0IiBjb2xvcj0iNjI2MjYyIj4oV29yayk8L2xhYmVsPjwv ZmxkPjxmbGQgeG1sbnM9IiIgcHJvcD0iZmF4d29yayIgYWxpZ249ImxlZnQiIGRpcj0ibHRyIiBj b2xvcj0iMDAwMDAwIiBzaXplPSI3Ij48bGFiZWwgYWxpZ249InJpZ2h0IiBjb2xvcj0iNjI2MjYy Ij4oRmF4KTwvbGFiZWw+PC9mbGQ+PGZsZCB4bWxucz0iIiBwcm9wPSJ0ZWxjZWxsIiBhbGlnbj0i bGVmdCIgZGlyPSJsdHIiIGNvbG9yPSIwMDAwMDAiIHNpemU9IjciPjxsYWJlbCBhbGlnbj0icmln aHQiIGNvbG9yPSI2MjYyNjIiPihNb2JpbGUpPC9sYWJlbD48L2ZsZD48ZmxkIHhtbG5zPSIiIHBy b3A9ImVtYWlsIiBhbGlnbj0ibGVmdCIgZGlyPSJsdHIiIGNvbG9yPSIwMDAwMDAiIHNpemU9Ijci Lz48ZmxkIHhtbG5zPSIiIHByb3A9IndlYndvcmsiIGFsaWduPSJsZWZ0IiBkaXI9Imx0ciIgY29s b3I9IjAwMDAwMCIgc2l6ZT0iNyIvPjxmbGQgeG1sbnM9IiIgcHJvcD0iYmxhbmsiIHNpemU9Ijgi Lz48ZmxkIHhtbG5zPSIiIHByb3A9ImJsYW5rIiBzaXplPSI4Ii8+PGZsZCB4bWxucz0iIiBwcm9w PSJibGFuayIgc2l6ZT0iOCIvPjxmbGQgeG1sbnM9IiIgcHJvcD0iYmxhbmsiIHNpemU9IjgiLz48 ZmxkIHhtbG5zPSIiIHByb3A9ImJsYW5rIiBzaXplPSI4Ii8+PC9jYXJkPg0KUkVWOjIwMjIwNjA3 VDE2MjIzOFoNCkVORDpWQ0FSRA0K --_002_ca6b1a16f76e4a9bb5f1817281424f4bbryanhealthorg_ Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple --_002_ca6b1a16f76e4a9bb5f1817281424f4bbryanhealthorg_--
webmaster | delorie software privacy |
Copyright © 2019 by DJ Delorie | Updated Jul 2019 |