Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Fri, 19 Jul 2002 10:39:25 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Fwd: Re: cron and NT domains
Message-ID: <20020719103925.G6932@cygbert.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20020717190123 DOT GC440 AT tishler DOT net> <20020718223940 DOT B1727 AT SmartSC DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020718223940.B1727@SmartSC.com>
User-Agent: Mutt/1.3.22.1i

On Thu, Jul 18, 2002 at 10:39:40PM -0700, David MacMahon wrote:
> Are you running sshd under your domain account, your local account,
> or the "SYSTEM" account?  To ask it another way, who owns the
> /etc/ssh_host* files?
> 
> I am getting these three errors: 1308, 1300, and 1326.

1300: Not all privileges referenced are assigned to the caller.

That's bad.  It means, you're running cron probably not under
SYSTEM account.  The error refers to:

>  1197 16102161 [main] sshd 1544 set_process_privilege: Privilege
> SeCreateTokenPrivilege couldn't be assigned
>   190 16102351 [main] sshd 1544 seterrno_from_win_error:
> /netrel/src/cygwin-1.3.12-2/winsup/cygwin/sec_helper.cc:383 windows
> error 1300

The SeCreateTokenPrivilege is needed to do a NtCreateToken() call.
Only SYSTEM has this privilege by default.

1308: This security ID may not be assigned as the primary group of an object.

Refers to:

>   174 16100698 [main] sshd 1544 setegid32: SetTokenInformation(process,
> TokenPrimaryGroup): Win32 error 1308

Doesn't mean too much here.  If the gid 10513 in /etc/group actually
exists and refers to a existing group, than you can ignore it for now.

1326: Logon failure: unknown user name or bad password.

This one you can completely ignore.  The actual problem is the first
one, error 1300.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/