Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Message-ID: <3A1CFC56.BA45B34E@redhat.com>
Date: Thu, 23 Nov 2000 12:15:34 +0100
From: Corinna Vinschen <vinschen AT redhat DOT com>
Reply-To: cygwin <cygwin AT cygwin DOT com>
X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.14-SMP i686)
X-Accept-Language: de, en
MIME-Version: 1.0
To: cygwin <cygwin AT cygwin DOT com>
Subject: Re: NT5 - login incorrect
References: <001301c0553b$93c75700$0100a8c0 AT SOUTHPARK DOT local>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Warren Togami wrote:
> 
> Hi.  I'm a new user of Cygwin.  I just spent 10 hours over the past 2 days
> trying to get any login method (login.exe, inetd or sshd) to work without
> any success.  I have some background with various Linux and Solaris boxes so
> I hope I am not a complete newbie.  I'm running Windows 2000 Advanced Server
> running as a PDC.  login.exe, telnet and ssh attempts always fail with Login
> incorrect.

Did you read the docs in /usr/doc/Cygwin, at least the
openssh-2.3.0p1.README and inetutils-1.3.2.README?

Both contain information on how you have to add user rights
to the account which shall be able to switch to another user
account.

> Without ntsec enabled "passwd" seems to modify my NT passwords.  Is this
> normal?

Yes.

> Please correct me if my understanding is incorrect.  Some of the mailing
> list messages suggested that a remote login daemon like sshd or inetd will
> need access to create processes under any user name, and in order to do so
> they must be run by something like LocalSystem.  Even the "Administrator"
> account normally doesn't have access to this.

That's perfectly correct. If you want to use another account than
LocalSystem, you'll have to chenge the user rights of that account
On W2K change the user rights in the appropriate MMC Snap-In. On the
PDC you should use the Domain Controller Security Settings Snap-In.

> Anyway, I couldn't figure out how to run sshd as a NT service in order to
> run it as LocalSystem.  Google searches brought up references to svcinst.exe
> and svrany.exe, but I was unable to figure out how to extract them from the
> SMS package on the CD.

It's part of the NT/W2K Resource Kits.

> I'd like to get ssh logins integrated into the NT authentication, but if
> necessary I would happily use an independent /etc/passwd if possible.  Would
> the latter be under ntea?  How do I force passwd to update /etc/passwd
> instead of NT?  Likewise with login, sshd and inetd?

That's impossible. The authentication under NT/W2K always uses
the NT SAM.

> I'll probably be chastised with cries of 'RTFM', but I think that I tried a
> bit too hard at this.  Two of my friends running Cygwin (one Win9x and one
> Win2k Pro) are completey perplexed by these problems.  What am I missing
> here?

So your friend running W2K has never setup sshd or inetd?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.
mailto:vinschen AT redhat DOT com

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com