Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Date: Fri, 26 Oct 2001 18:00:58 +0200
From: Corinna Vinschen <cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: problems with sshd and RSAAuthentication
Message-ID: <20011026180058.Y7622@cygbert.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <1004109070 DOT 20843 DOT ezmlm AT sources DOT redhat DOT com> <20011026102738 DOT B13230 AT lucent DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20011026102738.B13230@lucent.com>; from psfales@lucent.com on Fri, Oct 26, 2001 at 10:27:38AM -0500

On Fri, Oct 26, 2001 at 10:27:38AM -0500, Peter Fales wrote:
> I'm currently trying to get sshd access to our Cygwin/Win2000 machine.  
> Currently it works well using password authentication, but I can't get
> it to use RSAAuthentication - it seems to be accepting the key, but
> then exits right away and creates a windows event log entry:
> 
> 10/26/2001      9:51:38 AM      1       0       0       sshd    NT AUTHORITY\SYSTEM             EXPNOVE sshd : Win32 Process Id = 0x470 : Cygwin Process Id = 0x470 : fatal: setuid 1000: Not owner
> 
> I know something like this has been discuseed before, and I've tried to 
> follow all the steps I can find documented:
> 
> 	- I've added "CYGWIN=ntsec tty" to the system environement
> 	- I've added these rights for the user that is running cygrunsrv
> 	  and the SYSTEM account:
> 		"Act as part of operating system" 
> 	        "Replace a process level token" 
>           	"Increase quotas" 

- SYSTEM doesn't need that rights set since it has all rights already.
- That are the rights needed for being able to change account using
  password authentication.

Either you let SYSTEM run cygrunsrv or you have to add the (very dangerous)
"Create a token object" user right to the account running cygrunsrv.

Besides that, do you have created a /etc/group file using mkgroup
and did you check your /etc/passwd file being ok?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/