DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:in-reply-to
	:references:mime-version:content-type; q=dns; s=default; b=JJfIN
	PQqurR7xra6bJ5ZXliwGZ8IaxuDCrXF8sBHTZbD876ElKkXUe+zSoe+weVp+w+KA
	576HmOyRcY9pUeGCS8jZ5P2eJy4nT+2sb9CrYzrDKW+6S1/2UEhu4apMw4MD6xqI
	AL6xt5L4aLnd+ZBXgRUy5LWKKJ/AbRzPFa84Nw=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Fri, 15 Jun 2018 19:56:35 +0900
From: Takashi Yano <takashi.yano@nifty.ne.jp>
To: cygwin@cygwin.com
Subject: Re: [bug: csih] Setting privileged rights to cyg_server fails on Windows 7.
Message-Id: <20180615195635.7fdf5323f459034451b675c3@nifty.ne.jp>
In-Reply-To: <20180614113132.GB2587@calimero.vinschen.de>
References: <20180613224901.d2cf679cef8eab89a834c494@nifty.ne.jp>	<20180613181407.GT7851@calimero.vinschen.de>	<20180614062218.eee6704d2ebc62383a2927c7@nifty.ne.jp>	<20180614091642.GA2587@calimero.vinschen.de>	<20180614192957.2128dbee897097bddb0844e4@nifty.ne.jp>	<20180614113132.GB2587@calimero.vinschen.de>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_"

--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Hi Corinna,

On Thu, 14 Jun 2018 13:31:32 +0200
Corinna Vinschen wrote:
> 2) I'm logged in with a non-admin domain account.  If I open a
>    shell with "run as administrator", enter credentials for the
>    above domain admin account, LOGONSERVER is set correctly.

In this case, LOGONSERVER is NOT set in my environment.
Are you sure of the above result?

Anyway, I tested csih-0.9.10-1 released yesterday.

First of all, iu-config shows error message at the beginning.

*** ERROR: winProductName: C:/cygwin/lib/csih/winProductName.exe: error while loading shared libraries: libssp-0.dll: cannot open shared object file: No such file or directory

libssp0 package is installed as follows. However, it seems to provide
cygssp-0.dll, but not libssp-0.dll. Is any aother package required?

$ cygcheck -c libssp0
Cygwin Package Information
Package              Version        Status
libssp0              6.4.0-4        OK

Even with the error above, iu-config seems to work. So, I continued
testing. Testing was done in the following 8 scenarios.

Machine not on a domain:
1.1. Non-admin account + "Run as administrator" for admin
1.2. Admin account

Machine on a domain:
2.1. Local non-admin account + "Run as administrator" for local admin
2.2. Local non-admin account + "Run as administrator" for domain admin
2.3. Domain non-admin account + "Run as administrator" for local admin
2.4. Domain non-admin account + "Run as administrator" for domain admin
2.5. Local admin account
2.6. Domain admin account

Results are as follows.

1.1: OK
1.2: OK
2.1: Failed
2.2: Failed
2.3: Failed
2.4: Failed
2.5: Failed
2.6: OK

In failure cases, error message is:
passwd: unknown user cyg_server
*** Warning: Setting password expiry for user 'cyg_server' failed!
*** Warning: Please check that password never expires or set it to your needs.
*** Warning: Expected privileged user 'cyg_server' does not exist.
*** Warning: Defaulting to 'SYSTEM'

To resolve this problem, I would like to propose a patch attached.
I tested the patch for above 8 scenarios, and succeeded for all.

Could you please have a look?

-- 
Takashi Yano <takashi.yano@nifty.ne.jp>

--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_
Content-Type: application/octet-stream;
 name="csih.patch"
Content-Disposition: attachment;
 filename="csih.patch"
Content-Transfer-Encoding: base64
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--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_
Content-Type: text/plain; charset=us-ascii


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
--Multipart=_Fri__15_Jun_2018_19_56_35_+0900_qNjEWyWascNEsJf_--