Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Date: Wed, 3 Oct 2001 21:48:43 -0400
From: "David J. Wilson" <djwilson AT drew DOT edu>
To: cygwin AT cygwin DOT com
Subject: Re: OpenSSH and RSA authentication problems
Message-ID: <20011003214843.A9463@drew.edu>
References: <20011003103653 DOT A8662 AT drew DOT edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20011003103653.A8662@drew.edu>; from djwilson@drew.edu on Wed, Oct 03, 2001 at 10:36:53AM -0400


Following up...

The two accounts I am dealing with are 'Administrator' and 'vlastyn'.  My
test involved running the server as vlastyn, and setting up identical configs
for each user (i.e. running ssh-user-config as each user and answering yes
to each question).

When trying to login as vlastyn, it works as described.  Here is what the
debugging output of the server shows:

debug1: ssh_rsa_verify: signature correct
Accepted publickey for vlastyn from 127.0.0.1 port 3503 ssh2
debug1: Entering interactive session for SSH2.

Attempting to login with Administrator, however, doesn't work:

debug1: ssh_dss_verify: signature correct
Failed publickey for Administrator from 127.0.0.1 port 4453 ssh2

Naturally this makes sense, because my vlastyn account probably doesn't have
the right privileges to switch user context.  The point is that I can't use
RSA with *either* account when it's running as SYSTEM, which obviously is 
able to switch context or else password authentication wouldn't work.  So,
does anyone have any idea what's happening?

David

On Wed, Oct 03, 2001 at 10:36:53AM -0400, David J. Wilson wrote:
> 
> Later tonight I'm going to try and run it under my own account and then
> login as someone else to see the debugging output.  For now I know that
> it doesn't work for anyone at all when it's running as a service (which
> I believe runs as the system account), and that it works fine if I run 
> it with my account and login with the same.
> 

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/