Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Thu, 16 May 2002 14:29:03 -0400 (EDT)
From: Prentis Brooks <prentis AT aol DOT net>
To: "Gerrit P. Haase" <freeweb AT nyckelpiga DOT de>
cc: cygwin AT cygwin DOT com
Subject: Re: SSHD under SYSTEM account (was: Re: cygwin & opensshd on .net
 enterprise server)
In-Reply-To: <23540989351.20020516191126@familiehaase.de>
Message-ID: <Pine.LNX.4.44.0205161428420.1416-100000@magetower.office.aol.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

 I think these docs are out of date.  this is fixed now, since I am
doing it.

On Thu, 16 May 2002, Gerrit P. Haase wrote:

> Inc) schrieb:
> 
> >>I did copy him on the original note so he would be aware of the issue,
> >>but at this point I have completely removed his version (including
> >>deleting registry keys) and installed the cygwin environment. It appears
> >>that all of cygwin works when run in a system owned command window, but
> >>nothing works from an administrator account.
> 
> > Can you please acknowledge whether or not you read openssh*.README so that
> > we know whether you've missed the obvious user rights settings necessary for
> > the administrator account?
> 
> I read it and still have similar problems and there is this:
> 
>   "The system account does of course own that user rights by default."
> 
> That means SYSTEM is ok and it is the default if I let the
> ssh-host-config do the service setup.  So I expect no problems here.
> More:
> 
>   Unfortunately, if you choose that way, you can only logon with
>   NT password authentification and you should change
>   /etc/sshd_config to contain the following:
> 
>     PasswordAuthentication yes
>     RhostsAuthentication no
>     RhostsRSAAuthentication no
>     RSAAuthentication no
> 
> 
> Wow this is like a hammer.  That means I cannot use PublicKey
> Authentication?  If I cannot use public key authentication, the whole
> benefit (besides transfering passwords encrypted) is futsch...
> 
> If I let them try to guess my password several days there will be at
> least one intruder every month...
> 
> Is this true that PublicKey auth isn't working? (I cannot believe it).
> 
> 
> Gerrit
> 

-- 
Prentis Brooks	| prentis AT aol DOT net | 703-265-0914 | AIM: PrentisBrooks
Senior System Administrator - Web Infrastructure & Security

       A knight is sworn to valor.  His heart knows only virtue.  His blade
       defends the helpless.  His word speaks only truth.  His wrath undoes
       the wicked. - the old code of Bowen, last of the dragonslayers


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/