X-Recipient: archive-cygwin@delorie.com X-SWARE-Spam-Status: No, hits=-7.4 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,KHOP_PGP_SIGNED,KHOP_RCVD_TRUST,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE X-Spam-Check-By: sourceware.org Date: Thu, 5 Apr 2012 12:33:19 +0200 From: David Sastre Medina To: cygwin@cygwin.com Subject: Re: sshd not doing key based authentication Message-ID: <20120405103318.GA5442@pris.crapsteak.org> References: <4F7C0884.2080006@gmail.com> <74924010.20120404152639@mtu-net.ru> <20120404133001.GA8876@pris.crapsteak.org> <4F7D2B6D.8070306@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mYCpIKhGyMATD0i+" Content-Disposition: inline In-Reply-To: <4F7D2B6D.8070306@gmail.com> User-Agent: Mutt/1.5.21 (2010-09-15) X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com --mYCpIKhGyMATD0i+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable (replying to the list, sorry if it breaks the thread) On Thu, Apr 05, 2012 at 03:19:41PM +1000, Rurik Christiansen wrote: > I was hoping more for some pointers to what the permissions must be and > then do the troubleshooting myself. > The "unix" side of permissions look ok. > I don't know what the windows side must be or if it matters. > The "ssh -vvv' (client side) has not been particularly helpful to me > when it comes to permissions. > and my understanding is that I can't run the sshd frontend without > screwing the permissions. > (the client sends the publickey packet and then jumps to next auth method) How did you setup the server? IIRC, ssh-host-config complains if it finds wrong perms. How do you start the service? Is there something in /var/log/sshd.log (provided you are logging there, and not elsewhere via syslog-ng or other means). You could also delete the service and recreate it. --=20 Primary key fingerprint: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56 --mYCpIKhGyMATD0i+ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iF4EAREIAAYFAk99dOoACgkQ95urBFKZ7FbKbAD+Ii5CyYo8U08P3BNkVZEBokl2 j+BUOQ79OASt+qUVvkIA/irdx5FL9RsxRiMqzZSTSkoJwjEhUEyKEzFP1TIQDQ21 =DITZ -----END PGP SIGNATURE----- --mYCpIKhGyMATD0i+--