DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; q=dns; s=default; b=Q7
	g5Q+5Pb+kch5+cqNi2EHNFki2OEl/DW2dxemh5ZnOk7nByO61GkbxuIsLebpo0bZ
	fmijuElFsywuptwbXdXwbjLUS4dJGhRx3CCwjLE7nSvLpgFoq4/fh6UiTNw8H+m1
	R43+sU233zF3Bn6giitzaPjPV9ivYfyFQGZx86/xA=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
In-Reply-To: <CAN2X4tHCF0=XAuhmyUzq3EsKxTgJvgLA52XUVfUEa_DU4fNMUg@mail.gmail.com>
References: <CAN2X4tEmO4H8=757x_CYFWPHtcOr+YMRfR2b07Vg7rFcrNY6tg@mail.gmail.com>	<loom.20160414T170618-303@post.gmane.org>	<CAN2X4tFfqgPS5Jc9=rodiv_4mE-mb3akSD925oA1tWy6C5jebA@mail.gmail.com>	<87ega8t99o.fsf@Rainer.invalid>	<CAN2X4tHMu32aFfAnbz0fC3heNLBHrXPxVkcQvp8+RgT_o7rNbw@mail.gmail.com>	<87a8kwt39s.fsf@Rainer.invalid>	<CAN2X4tExtHpod9R_LLwt4sFvEJKp_bSh=UpyLFys5SbK1A1XnQ@mail.gmail.com>	<87r3e7lan9.fsf@Rainer.invalid>	<CAN2X4tGz2OJZ-m_hFjC9+ZcbjCZvHoNY_dQ8HW7vdsr9XwWMYg@mail.gmail.com>	<153497950.20160418003315@yandex.ru>	<CAN2X4tHCF0=XAuhmyUzq3EsKxTgJvgLA52XUVfUEa_DU4fNMUg@mail.gmail.com>
Date: Tue, 26 Apr 2016 13:29:45 -0400
Message-ID: <CAN2X4tEsWhTcmi=LOvbFgHaEJzaPsvcrG-DXcyM=7vtGMry5fg@mail.gmail.com>
Subject: Re: Cygwin-2.5.0 net share wbadmin no longer working post update
From: Alexandria Gutierrez <alegutier@gmail.com>
To: cygwin@cygwin.com
Content-Type: text/plain; charset=UTF-8

I wanted to provide an update in order to help others with the same issue.

We ended up using method 3 from this link:
https://cygwin.com/cygwin-ug-net/ntsec.html

Switching the user context without password, Method 3: With password

Essentially as the user run "passwd -R" in order to store the password
in the registry.
Given our setup this was the best option for us, due to our current
securities restrictions. Keep in mind that this option is most likely
not the best solution for everyone.

Thank you again for the assistance everyone.


On Mon, Apr 18, 2016 at 1:28 PM, Alexandria Gutierrez
<alegutier@gmail.com> wrote:
> I am still scratching my head on this one. I did read the link you
> provided. I am sure this should not be an issue as we have been
> running this for a long time without any issues. Keys where never an
> issue in that past. Currently the other computer is still auth via AD
> using cyg_serv as a domain user and running cyg_serv with SYSTEM
> privilege via gpo. That second computer is doing backups with out any
> issues. It is only the updated 2.5.0 machines we are having issues
> with. I will go over the link and ensure that the we are creating the
> token if necessary. If I find anything I will keep you updated as well
> as this could help others in the future as well.
>
> On Sun, Apr 17, 2016 at 5:33 PM, Andrey Repin <anrdaemon@yandex.ru> wrote:
>> Greetings, Alexandria Gutierrez!
>>
>>> I been working on this today and have figured a few things out:
>>
>>> The issue appears to be only be affecting us when we use ssh keys to
>>> authenticate. When we do not have keys for authentications the command
>>> gets executed successfully:
>>
>> This is actually somewhat predictable.
>> Please check the http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview
>>
>>> Here is the full command I am sending over ssh:
>>
>>> ssh USER@cygservername -q -n -v '/cygdrive/c/windows/Sysnative/wbadmin
>>> DELETE CATALOG -quiet ;  [[ -f /cygdrive/c/windows/Sysnative/nfsadmin
>>> ]] && /cygdrive/c/windows/Sysnative/nfsadmin client stop ;
>>> /cygdrive/c/windows/Sysnative/wbadmin START BACKUP -user:USER
>>> -password:PASSWORD -backuptarget:\\\\SERVERNAME\\PATH\\TO\\SHARE
>>> -allCritical -systemstate -quiet;  [[ -f
>>> /cygdrive/c/windows/Sysnative/nfsadmin ]] &&
>>> /cygdrive/c/windows/Sysnative/nfsadmin client start' 2>&1
>>
>>> When I have ssh keys available for USER to authenticate without a
>>> password, I reseive the same error:
>>
>>> "ERROR - The user name or password is unexpected because the backup location
>>> is not a remote shared folder."
>>
>>> But when I remove the keys, and I am prompted for password, the
>>> command executes correctly.
>>
>>> This is very strange, and I am not quite sure that could be triggering this.
>>> Event viewer does not show anything.
>>
>>> Is there anyway I can enable debug on sshd? for example /usr/bin/ssh -d ?
>>
>> Yes, you can do that. Though, the results may be skewed, if you run SSHD
>> from another user's account. (Other than its normal one, I mean.)
>>
>>> Thank you again for the ongoing assistance
>>
>>
>> --
>> With best regards,
>> Andrey Repin
>> Monday, April 18, 2016 00:28:12
>>
>> Sorry for my terrible english...
>>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple