Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Date: Fri, 12 Jul 2002 09:26:55 +0200 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: Getting sshd Configured on Win2k Platform Message-ID: <20020712092655.C10982@cygbert.vinschen.de> Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com References: <200207120654.g6C6sbRE000309@hemlock.highley-recommended.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200207120654.g6C6sbRE000309@hemlock.highley-recommended.com> User-Agent: Mutt/1.3.22.1i On Thu, Jul 11, 2002 at 11:54:37PM -0700, David Highley wrote: > We think there are missing single quotes in the ssh-host-config script. > When the environment parameter is done as in the script: > -e "CYGWIN=binmode ntsec tty" variables expanded here > the service will not start. If we do the following: > -e '"CYGWIN=binmode ntsec tty"' > the service will start and different users can login. We also found that > a /etc/group entry was missing which was causing the setgid problem. Works here w/o single quotes. They aren't needed. > We also ran snoop to verify the we have the communication link > encrypted an no information is leaking. For /etc/sshd_config we ended up > with: > RSAAuthentication yes > RhostsAuthentication yes > RhostsRSAAuthentication yes > PasswordAuthentication yes Rhosts authentication is BAD! Set to no. > We did add ssh to the ${SYSTEMROOT}/system32/drivers/etc/services file. Which should have been added already by ssh-host-config. > We did not make any modifications to the Local Security Settings as > discussed in the openssh README file. Which is good since the README explicitely says: =========================================================================== The following restrictions only apply to Cygwin versions up to 1.3.1 =========================================================================== [...] Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Developer mailto:cygwin@cygwin.com Red Hat, Inc. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/