X-Recipient: archive-cygwin@delorie.com
X-Spam-Check-By: sourceware.org
Date: Thu, 3 Apr 2008 10:45:00 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: How do I run sshd as a particular user?
Message-ID: <20080403084500.GK4468@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <D06D8751-81CE-408B-931B-66DA714FE1CC@von-campe.com> <47C4A0DB.6020007@cygwin.com> <6ADC05D7-7602-4123-81EF-1DE06D26E91F@von-campe.com> <D1627F08-4387-4C0A-94B2-5AFC6C1EA325@von-campe.com> <006301c890e8$4fa2f070$2708a8c0@CAM.ARTIMI.COM> <FB6643AB-610F-46F7-B019-389E82E687C8@von-campe.com> <20080402132726.GG4468@calimero.vinschen.de> <48B1F68C-02BA-4C66-A152-504906008D30@von-campe.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <48B1F68C-02BA-4C66-A152-504906008D30@von-campe.com>
User-Agent: Mutt/1.5.16 (2007-06-09)
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie.com@cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com

On Apr  2 13:55, Alfred von Campe wrote:
> On Apr 2, 2008, at 9:27, Corinna Vinschen wrote:
>> - Does the domain user have an entry in the local /etc/passwd?  sshd
>>   needs that when checking file ownership.  And it allows to specify the
>>   user to cygrunsrv without the "domain\win_username" syntax.
>
> Well, there is an entry for a user of the same name.  Is that enough or is 
> there a way to specify the fact that it's a domain user?

The SID in the pw_gecos field must match.  When in doubt, try
mkpasswd -d -u username.

>> - Did you chown /etc/ssh* and /var/empty to the domain user when trying
>>   to start the service under that account?  That's a must have.
>
> No, I did not know about this either.  I will try these suggestions as soon 
> as I get a chance, but that might not be until I return to the office next 
> week.  A quick question, though.  Instead of making all these changes, is 
> there a better way to (re-)install Cygwin sshd so that it is properly set 
> up for a domain user?

No, that's not supported by the install scripts.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

