DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=iZvza+L
	NpA/FVPNQ+DMk8HKLvoqfx+A9KqAl4LyuzcMoLfiRg7ssSeGCrrhzTfWh5BzEg9V
	Sg4G2H9o81PqaJC8VR2GAMS0jQqoyPtTatzrMywPPWqHs0l4z90LTsGr6rbF8U2k
	bsbrq/qncgX+p7MRbjIVclEcGEeslH3ez6yE=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
In-Reply-To: <CACoZoo2BkF1PuEuto-V7=0MV8ZqsFQ1tu39B8vScmFOfoGG8Wg@mail.gmail.com>
References: <6d6087eef8f444edbe659c278f63ab43@AUSX13MPC128.AMER.DELL.COM> <CACoZoo2BkF1PuEuto-V7=0MV8ZqsFQ1tu39B8vScmFOfoGG8Wg@mail.gmail.com>
From: Erik Soderquist <ErikSoderquist@gmail.com>
Date: Fri, 19 May 2017 17:37:45 -0400
Message-ID: <CACoZoo2nvevrE5k4Myyt=gXOLLwp8UtwarpXP0nbbBRm0kEt6A@mail.gmail.com>
Subject: Re: SSH Keys breaking symlink access?
To: cygwin@cygwin.com
Content-Type: text/plain; charset="UTF-8"

On Fri, May 19, 2017 at 5:30 PM, Erik Soderquist wrote:
> This is expected behavior if you have not used "password -R" to
> provide the network password.


from the doc (https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview):
So what we do is to utilize this registry area for the purpose of
set(e)uid. The Cygwin command passwd -R allows a user to specify
his/her password for storage in this registry area. When this user
tries to login using ssh with public key authentication, Cygwin's
set(e)uid examines the LSA private registry area and searches for a
Cygwin specific key which contains the password. If it finds it, it
calls LogonUser under the hood, using this password. If that works,
LogonUser returns an access token with all credentials necessary for
network access.


-- Erik

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple