Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
To: Randall R Schulz <rrschulz AT cris DOT com>
Cc: cygwin AT cygwin DOT com
Subject: Re: 1.3.12-4: editing /etc/passwd causes ssh to fail
References: <5 DOT 1 DOT 0 DOT 14 DOT 2 DOT 20021008135015 DOT 01fd2360 AT pop3 DOT cris DOT com>
From: Len Giambrone <frodo AT mit DOT edu>
Date: 08 Oct 2002 17:50:49 -0400
In-Reply-To: <5.1.0.14.2.20021008135015.01fd2360@pop3.cris.com>
Message-ID: <tml3crg4n2e.fsf@small-gods.mit.edu>
Lines: 104
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/21.1
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii


Hmm, some more data.

It seems that the newest snapshot improves things a little; it fails an
indeterminate number of times until it succeeds (I've seen 1,5,7 failures),
and then succeeds thereafter.

Even stranger was that I went back to the old dll, and was getting the same
behavior.  But the last three times I could not get a connection after *many*
tries.

For the record, if I restart sshd after adding the user, things work again.
If I then delete the foo user, it fails to work again.

                        -Len



Randall R Schulz <rrschulz AT cris DOT com> writes:

> Gentlemen,
> 
> Have you verified that the line newly added to the password file is
> consistent w.r.t. to line-ending convention (Unix vs. Windows) with
> the rest of the password file and the mount via which it is accessed
> by your ssh server?
> 
> Randall Schulz
> Mountain View, CA USA
> 
> 
> At 13:39 2002-10-08, Harig, Mark A. wrote:
> >I have seen this problem also, on Windows NT4 SP6.  I had the same
> >solution -- back out my changes.  I haven't had time to investigate what
> >is causing the problem but it starting occurring in one of the recent
> >releases of ssh in which privilege separation was added.
> >
> > > -----Original Message-----
> > > From: Len Giambrone [mailto:frodo AT mit DOT edu]
> > > Sent: Tuesday, October 08, 2002 4:18 PM
> > > To: cygwin AT cygwin DOT com
> > > Subject: 1.3.12-4: editing /etc/passwd causes ssh to fail
> > >
> > >
> > >
> > > This is on an installation using setup today with the latest
> > > packages on
> > > archive.progeny.net.  It's running Win2k Server.  I think
> > > I've also verified
> > > this on my XP HE box at home.
> > >
> > > I can happily ssh into my box.
> > >
> > > $ ssh Administrator AT foo
> > > Warning: Remote host denied X11 forwarding.
> > > Last login: Tue Oct  8 21:01:53 2002 from bar
> > >
> > > Administrator AT LORIEN ~
> > > $
> > >
> > > Now, I add the user foo:
> > >
> > > Administrator AT LORIEN ~
> > > $ net user foo bar /add
> > >
> > > I add the user to the password file
> > >
> > > Administrator AT LORIEN ~
> > > $ mkpasswd -l -u foo >>/etc/passwd
> > >
> > > And now I can't ssh in anymore:
> > >
> > > $ ssh Administrator AT foo
> > > Warning: Remote host denied X11 forwarding.
> > > Connection to foo closed.
> > > $ ssh Administrator AT 172 DOT 16 DOT 34 DOT 104
> > > Warning: Remote host denied X11 forwarding.
> > > Connection to 172.16.34.104 closed.
> > > $
> > >
> > > If I remove the new user foo, I can once again login:
> > >
> > > Administrator AT LORIEN ~
> > > $ rm /etc/passwd; mkpasswd -l | grep -v ^foo >/etc/passwd
> > >
> > > $ ssh Administrator AT foo
> > > Warning: Remote host denied X11 forwarding.
> > > Last login: Tue Oct  8 21:18:09 2002 from bar
> > >
> > > Administrator AT LORIEN ~
> > > $
> > >
> > > Has anyone seen this before?  Can someone please confirm or
> > > deny that this
> > > happens to them?
> > >
> > >                         -Len
> 
> 
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/