Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <000701c227d0$007120d0$0610a8c0@wyw>
From: "Wu Yongwei" <adah AT netstd DOT com>
To: <cygwin AT cygwin DOT com>
Subject: sshd 3.4p1-2 privsep question
Date: Wed, 10 Jul 2002 13:09:42 +0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300

When executing "net start sshd" in privilege separation mode, I saw this in
/var/log/sshd.log: "Bad owner or mode for /var/empty". Sshd works OK in
non-privsep mode.

This is how I set up sshd:
-----------------------------------------------------------------------
$ ssh-host-config
Overwrite existing /etc/ssh_config file? (yes/no) yes
Generating /etc/ssh_config file
Overwrite existing /etc/sshd_config file? (yes/no) yes
Privilege separation is set to yes by default since OpenSSH 3.3.
However, this requires a non-privileged account called 'sshd'.
For more info on privilege separation read /usr/doc/openssh/README.privsep.

Shall privilege separation be used? (yes/no) yes
Generating /etc/sshd_config file

Do you want to install sshd as service?
(Say "no" if it's already installed as service) (yes/no) no

Host configuration finished. Have fun!
-----------------------------------------------------------------------

ls -l /var seems to indicate the ownership is correct:

drwxrwxrwx    2 SYSTEM   SYSTEM          0 Jul 10 12:50 empty/

I have CYGWIN variable defined to "binmode ntsec tty", but it seems of no
use.

I am puzzled. Any suggestions?

Best regards,

Wu Yongwei


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/