Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
From: "kobi cohen arazi" <kobi AT mivzak DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15702.12290.408886.47875@gargle.gargle.HOWL>
Date: Sun, 11 Aug 2002 11:36:02 +0200
To: cygwin AT cygwin DOT com
CC: pechtcha AT cs DOT nyu DOT edu
Subject: Re: telnet to host running inetd, login always with SYSTEM account 

>> Hi Guys,
>>
>> If I need to send more
>> information, please let me know and I'll do it.
>>
>> cygcheck.out is below.
>> uname -a is
>> CYGWIN_NT-5.0 DUFAY 1.3.12(0.54/3/2) 2002-07-06 02:16 i686 unknown
>>
>> win2000, p-3, 256 MB memory.
>> using bash.
>> inetd, sshd installed as services.
>>
>> I have done mkpasswd -l >> /etc/passwd
>> and mkgroup -l >> /etc/group
>>
>> When trying to login using telnet or ftp to my localhost,
>> No matter what is the login name, It always login as SYSTEM.
>> I cannot understand what went wrong, that is because it used to work,
>> but one of the cygwin upgrading probably mess it up.
>> Looking at /etc/passwd and /etc/group , I can see that everything is OK.
>>
>> Why the login is always on SYSTEM account even when trying to login
>> with different username ?
>>
>> Is it configurable someplace ?
>>
>> Any help will be appreciated.
>>
>> Thanks a lot.
>> Keep the good job,
>>
>> Kobi.

>Kobi,
>Is your CYGWIN environment variable set in the system environment or the
>user environment?  I have a feeling the CYGWIN of the telnetd process
>doesn't include "ntsec"...
>	Igor

Thanks for your quick reply.

I have discover the following after playing around with /etc/passwd
and /etc/group :

when making the following:
mkpasswd -l > /etc/passwd
mkpasswd -d >> /etc/passwd
mkgroup -l > /etc/group
mkgroup -d >> /etc/group

everything is fine concerning the inetd, i.e. I can telnet and ftp to
the machine running the inetd . (By the way CYGWIN=ntsec is set as
System var.)
But : the problem is when going to a network directory on our company
domain (recall that I am using win2000 and having a network mapping to
other computers on the local net), and creating a file, the owner of
the file is written as SID. (I can see that using the windows explorer
...). Using ls -lna , I can see that my group is 513 (NONE).
That kind of owner SID makes lots of problems, because I cannot chmod
of that file as if I am not the owner of that file. Same is happening
when using the windows explorer when trying to look at the security
TAB.

When creating file on my local NTFS drive, I am the owner, but looking
at the security tab of windows explorer, I can see the SID-513 is also
an owner.

Reading the FAQ and the "NT Security and the ntsec usage" document, I
followed the instructions and did the following:
In 'passwd' file I have changed my group from 513 (none) to 547 (Power
users).
I have deleted the SID as well as 'domain\myname' as Instructed in the file (It may be
the cause of the problem!)
And in 'group' file, I have deleted the SID of the 547 group (Power
users) as well.

Now, When creating a file on a network directory (which I have a
*full* permissions in it), I can see that I am the owner and I can do
*anything* with that file including see my the security tab in the win
explorer or chmod of that file. However, Telnet to the inetd process
doesn't work well. (Recall that I have deleted my SID  and 547 group's
SID). When telneting, The users name logon is *always* SYSTEM. It
seems that is cannot obtain my SID, and the result is login with the
SYSTEM account !

I guess something is wrong with the way I've handle it. If anyone can
see what's is wrong and help me, I'll be grateful.

Take care,

Kobi.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/