DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; q=dns; s=default; b=V+
	q6yJGdYu2OqVnvJUe8ZjSrjqafHfmqhIoSjjk7OAsyiPfsWY5e2S2IDtLGVBpH5Q
	fqqXpq0kX65uZ29M3209CSOx5uITs4Nq7W383ipyA5DHbfccEITpjOSvvfVWLFoD
	y7nX6HSZoLEqUBn3jBfZpLy0LPvOfgPwHxxRkNP7c=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
In-Reply-To: <CACoZoo21tHaXren41wFqmQMWU-cu6d9qyJGdQ5yBUr32eQkLxw@mail.gmail.com>
References: <CA+KYG0H60fK7MFBgAtcmgGWk2yL4_TvUT0r+XtUACgskZ31QtQ@mail.gmail.com>	<14810543544.20160311022206@yandex.ru>	<CACoZoo21tHaXren41wFqmQMWU-cu6d9qyJGdQ5yBUr32eQkLxw@mail.gmail.com>
Date: Fri, 11 Mar 2016 08:47:07 -0500
Message-ID: <CA+KYG0EA4ESECS+rU8iCBoi=OEuLjRF85UsoAh+KpRuSfwzaSQ@mail.gmail.com>
Subject: Re: passwd -R?
From: Alex P <student00x@gmail.com>
To: Erik Soderquist <ErikSoderquist@gmail.com>, cygwin@cygwin.com
Content-Type: text/plain; charset=UTF-8

I do have cygserver running as "Local System".

My original issue is that cron stopped working after domain user
password reset. Stopped as - it worked fine before.

My first stop was to reset password with "passwd -R", but it did not
fix my cron problem - not running as user (member of local
Administrators group - getting error in Event Viewer), not elevated
("As Administrator").

I suspect some security policies were modified (machine is part of
domain), but I don't know what to check.

Thanks for weighing in.
   AlexP.

On Thu, Mar 10, 2016 at 7:11 PM, Erik Soderquist
<ErikSoderquist@gmail.com> wrote:
> On Thu, Mar 10, 2016 at 6:22 PM, Andrey Repin <anrdaemon@yandex.ru> wrote:
>> Greetings, Alex P!
>>
>>> How do I check that "passwd -R" worked correctly?
>>> I get error messages in Event Viewer when I run it as user (vs "As
>>> Administrator").
>>
>> You must use it with elevated privileges. Else it wouldn't work at all.
>
> From https://cygwin.com/cygwin-ug-net/passwd.html
>
> "If normal, non-admin users should be allowed to enter their passwords
> using passwd -R, it's required to run cygserver as a service under the
> LocalSystem account before running passwd -R. This only affects
> storing passwords. Using passwords in privileged processes does not
> require cygserver to run."
>
> So without the cygserver running, 'passwd -R' is expected to fail
> unless it is running in a privileged shell; if you want it to work
> without a privileged shell, you have to have the cygserver running as
> a service under the LocalSystem account.
>
> -- Erik

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple