X-Recipient: archive-cygwin@delorie.com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:message-id:from:reply-to:to:subject :references:in-reply-to:content-type; q=dns; s=default; b=wm9Vhc 4UDa/EssHBx1iC1mfxNCe1dVn/gZLaWfNFZ4q/kmP7eVC98UtWh3MuwYJhygiZPi 5kp0XXPqaKy/D9ITqgmG128HDBkiYkBXdbgeupghyFO4DU+x4m7hFV75yZfDkhuX z0p6qa8WzR9nwTYzUAUST+T667aayu0Ukg+3Q= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:message-id:from:reply-to:to:subject :references:in-reply-to:content-type; s=default; bh=+6EtZuW4mjHa e2SdyTTgzLVQKQY=; b=dl8G5CuR8Y7dExlZoO8mrsRo4FK8KEhH1lz2Wn5ZSE7T rdD7DSE2RVjfT0kAosNjHHPGq1Vc+zUqu56UW/1qJewSaAU/eoE56enCZxLlKuUK Sfss8D9NWHLMQC3ZNeC7gV4uRIn6SLoJO2RrkK312PvWgY5vA4rhvCT/mQcxENs= Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-2.6 required=5.0 tests=BAYES_00,NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=studied, privilege, reminder, habit X-HELO: lb1-smtp-cloud8.xs4all.net Date: Thu, 21 Feb 2019 12:43:23 +0100 Message-ID: <350972285e798d7fdc128b034e72952e@smtp-cloud8.xs4all.net> From: Houder Reply-To: cygwin@cygwin.com To: cygwin@cygwin.com Subject: Re: cygwin 3.0.1-1 breaks my sshd install References: <19759126.568100.1550686604174.ref@mail.yahoo.com> <19759126.568100.1550686604174@mail.yahoo.com> <47883ab06634fed3ecdaa375016dc3fb@smtp-cloud8.xs4all.net> <20190220202536.GX4256@calimero.vinschen.de> <20190220223629.GA4256@calimero.vinschen.de> <20190220224340.GC4256@calimero.vinschen.de> <20190221100911.GG4256@calimero.vinschen.de> In-Reply-to: <20190221100911.GG4256@calimero.vinschen.de> Content-Type: text/plain; charset=UTF-8; format=fixed User-Agent: mua.awk 0.99 On Thu, 21 Feb 2019 11:09:11, Corinna Vinschen wrote: > I managed it today already but I'm somewhat stumped. > > I ran ssh-host-config and let the script install a new local account > "test_server" to use for the sshd service. I started the service and > tried to login with a local account and it just worked out of the box. This is my case: using local accounts only. Reminder: sshd did work w/ 2.11.2 ... (and it works now in 3.0.1 after replacing cyg_server w/ SYSTEM (*) ) Way back I started using cyg_server because "csih" forced me to create this privileged account (W7!). I studied "csih" (cygwin-service-installation-helper.sh) again ... 64-@@# editrights -u cyg_server -l SeAssignPrimaryTokenPrivilege SeCreateTokenPrivilege SeServiceLogonRight SeDenyInteractiveLogonRight SeDenyRemoteInteractiveLogonRight Compared to "csih", the SeTcbPrivilege privilege was missing. I am not in the habit of messing with privileges ... Consequently, like you, I am stumped too :-) (*) after "moving" the sshd service from cyg_server to SYSTEM, I also changed the ownership of /var/empty and /etc/ssh* (to SYSTEM) ... Next, I disabled the cyg_server and sshd accounts. ssh still works. Henri -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple