Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Mon, 15 Apr 2002 13:18:09 +0200
From: Corinna Vinschen <cygwin AT cygwin DOT com>
To: Cygwin <cygwin AT cygwin DOT com>
Subject: Re: sshd/cron seteuid() problem in latest CVS
Message-ID: <20020415131809.J29277@cygbert.vinschen.de>
Mail-Followup-To: Cygwin <cygwin AT cygwin DOT com>
References: <20020412152132 DOT GC948 AT tishler DOT net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020412152132.GC948@tishler.net>
User-Agent: Mutt/1.3.22.1i

On Fri, Apr 12, 2002 at 11:21:32AM -0400, Jason Tishler wrote:
> Using the latest CVS, I am getting the following Event Log error messages:
> 
>     o fatal: setuid 19695: Operation not permitted
>     o (CRON) error (can't switch user context)
> 
> with sshd and cron, respectively.  After some debugging, I determined
> that the following patch is causing the problem:
> 
>     http://cygwin.com/ml/cygwin-cvs/2002-q1/msg00218.html
> 
> The above patch needs to be reverted or reworked.  See attached for an
> strace snippet.
> 
> Note that I'm operating in a domain environment.  My WAG is that this
> problem may not be apparent in a workgroup environment.

This isn't clear to me.  The patch only changes the way, the PDC
is elicited.  I don't see any connection especially with the below
strace snippet.

Corinna


> 
> Thanks,
> Jason

>  1602 25198850 [main] sshd 836 seteuid: myself->gid: 513, gr: 268637752
>  2300 25201150 [main] sshd 836 set_process_privilege: 0 = set_process_privilege (SeCreateTokenPrivilege, 1)
> 5127879 30329029 [main] sshd 836 get_user_groups: 123 = NetUserGetGroups ()
>   979 30330008 [main] sshd 836 set_process_privilege: 1 = set_process_privilege (SeCreateTokenPrivilege, 0)
>   522 30330530 [main] sshd 836 create_token: -1 = create_token ()
>   206 30330736 [main] sshd 836 seteuid: create token failed, try subauthentication.
>  1212 30331948 [main] sshd 836 set_process_privilege: 0 = set_process_privilege (SeTcbPrivilege, 1)
> 60911 30392859 [main] sshd 836 extract_nt_dom_user: pw_gecos = 1003198A (U-TISHLERJASON\Administrator,S-1-5-21-1571110079-60108220-2047483585-500)
>  4446 30397305 [main] sshd 836 subauth: LsaLogonUser: -1073741702
>  1663 30398968 [main] sshd 836 set_process_privilege: 0 = set_process_privilege (SeTcbPrivilege, 0)
>  1127 30400095 [main] sshd 836 internal_getlogin: GetUserName() = SYSTEM
>  1271 30401366 [main] sshd 836 internal_getlogin: Domain: (null), Logon Server: \\PALO-ALTO-PDC, Windows Username: SYSTEM
> 225771 30627137 [main] sshd 836 internal_getlogin: Cygwins Username: SYSTEM
>   177 30627314 [main] sshd 836 seteuid: Diffs!!! token: -1, cur: 18, new: 500, orig: 18
>   439 30627753 [main] sshd 836 setuid: real: 18, effective: 18
> 

> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/