Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-Id: <5.1.1.5.2.20020716153729.022ef2f8@lindy.stanford.edu>
X-Sender: rwilper AT lindy DOT stanford DOT edu (Unverified)
Date: Tue, 16 Jul 2002 15:37:33 -0700
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
From: Ross Wilper <rwilper AT stanford DOT edu>
Subject: PublicKey logon failures 
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

I've got the latest cygwin (1.3.12-2), gzip (1.3.3-3), ssl (0.9.6d-1), and 
ssh (3.4p1-4) packages.
Using ntsec, privsep, no strictmodes. NTFS on Windows 2000 in a Windows 
2000 domain.

I've done more tests with various changes in config/owners/acls. (BTW, 
Setuid before opening authorized_keys is definitely failing).

Results
SSHD Running as LocalSystem -> Password auth works, Public key fails 
(original test)
SSHD Running as member of local admins group -> Password auth fails, Pubkey 
works for a local administrator only
SSHD Running as local admin + Act as OS, etc. -> Password auth works, 
Pubkey works for a local administrator only

All public key failures have the same messages like below (DEBUG3)

Date: Fri, 05 Jul 2002 15:25:21 -0700
>Problem: Successful RSA authentication is ignored?
>Accepted publickey for administrator from 171.64.x.x port 2373 ssh2.
>debug1: monitor_child_preauth: administrator has been authenticated by 
>privileged process.
>debug2: userauth_pubkey: authenticated 1 pkalg ssh-rsa.
>Failed publickey for administrator from 171.64.x.x port 2373 ssh2.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/