Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT sources DOT redhat DOT com Delivered-To: mailing list cygwin AT sources DOT redhat DOT com Date: Wed, 3 Oct 2001 21:48:43 -0400 From: "David J. Wilson" To: cygwin AT cygwin DOT com Subject: Re: OpenSSH and RSA authentication problems Message-ID: <20011003214843.A9463@drew.edu> References: <20011003103653 DOT A8662 AT drew DOT edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20011003103653.A8662@drew.edu>; from djwilson@drew.edu on Wed, Oct 03, 2001 at 10:36:53AM -0400 Following up... The two accounts I am dealing with are 'Administrator' and 'vlastyn'. My test involved running the server as vlastyn, and setting up identical configs for each user (i.e. running ssh-user-config as each user and answering yes to each question). When trying to login as vlastyn, it works as described. Here is what the debugging output of the server shows: debug1: ssh_rsa_verify: signature correct Accepted publickey for vlastyn from 127.0.0.1 port 3503 ssh2 debug1: Entering interactive session for SSH2. Attempting to login with Administrator, however, doesn't work: debug1: ssh_dss_verify: signature correct Failed publickey for Administrator from 127.0.0.1 port 4453 ssh2 Naturally this makes sense, because my vlastyn account probably doesn't have the right privileges to switch user context. The point is that I can't use RSA with *either* account when it's running as SYSTEM, which obviously is able to switch context or else password authentication wouldn't work. So, does anyone have any idea what's happening? David On Wed, Oct 03, 2001 at 10:36:53AM -0400, David J. Wilson wrote: > > Later tonight I'm going to try and run it under my own account and then > login as someone else to see the debugging output. For now I know that > it doesn't work for anyone at all when it's running as a service (which > I believe runs as the system account), and that it works fine if I run > it with my account and login with the same. > -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/