DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=F7XT3rjOovIfBlrz
	r0SQ/DdzhM+Z/THO4WvTpsWjfMQP6VVuXL30njVaIOhHN8ZxJqJz2kaAjtVWEKCQ
	c53zo3VjohhqNhtpzGeHARyZ1KrfG+qtH4j8tddGMZVRCnFVpDMy7wm+bMhl/YBr
	XzWEfffDVhfHiKeqNwcqZmm8IDs=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Message-id: <52375AF0.6030600@cygwin.com>
Date: Mon, 16 Sep 2013 15:24:32 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh@cygwin.com>
Reply-to: cygwin@cygwin.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-version: 1.0
To: cygwin@cygwin.com
Subject: Re: Fwd: Way to test cyglsa?
References: <CAMhuX2BzMOmeLeJSUcsm8yMd4gw8THBiBG=+iorVgv1uDwveJQ@mail.gmail.com> <CAMhuX2BoDhcVUyv_ba4jXC+Y0fX=Fa50OOFfzK_fBBQe9N=o-A@mail.gmail.com> <5237373E.1070905@cygwin.com> <CAMhuX2ALMEw+2D5_urYo_MPhbjvebROs5UAY4L0Gx1a0rAagSA@mail.gmail.com> <523748CD.5070205@cygwin.com> <CAMhuX2CvmLJs4c4HANjCXZBARzCRrrBe3L5dpsBTDqMrhXz+7Q@mail.gmail.com> <523752B8.2010306@cygwin.com> <CAMhuX2CCzUvwqkpg7drPAohVbkL+rE-sLJbK0tk5v7pTT6Xh0A@mail.gmail.com>
In-reply-to: <CAMhuX2CCzUvwqkpg7drPAohVbkL+rE-sLJbK0tk5v7pTT6Xh0A@mail.gmail.com>
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit

On 9/16/2013 3:06 PM, Evan Rowley wrote:
> Its great that I now have some actual debug output. Thanks a lot, Larry.
>
> Towards the end of the log this appeared:
>
> seteuid 1019: Operation not permitted
>
> I'll check again that /etc/passwd, /etc/group, cyglsa-config, and
> ssh-host-config all have the correct login credentials. Before I do,
> is there anywhere else I can look? The cyglsa test from before did
> pass so I'm almost certain the passwords entered into it are correct.
> Does the order in which a user runs ssh-host-config and cyglsa-config
> matter?
>

No, the order of running the config scripts doesn't matter.  cyglsa
can be used with sshd but that's not the only service that would
benefit.  And sshd can certainly be run without cyglsa, as you know.

So does the user running sshd have permission to seteuid?  A properly
configured 'cyg-server' user, as prepared by ssh-host-config, will have
the required permissions for local users.  For domain users, you need
to tweak 'cyg-server' so that it is a domain administrator at least.


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple