Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
From: "Chris January" <chris AT atomice DOT net>
To: "Cygwin AT Cygwin DOT Com" <cygwin AT cygwin DOT com>
Subject: RE: sudo and runas
Date: Mon, 10 Mar 2003 10:56:11 -0000
Message-ID: <LPEHIHGCJOAIPFLADJAHOEIKDGAA.chris@atomice.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
In-Reply-To: <000d01c2e6e7$73f20570$3507000a@int.mediasurface.com>
Importance: Normal

> > > > Is this any use?
> > > >
> > > > http://www.doc.ic.ac.uk/~ccj00/twiki/bin/view/Cygwin/CygwinSu
> > > >
> > > > Chris
> > >
> > > jon AT shuttle (.../jon/tmp) % su root
> > > Password:
> > > su: cannot run /bin/bash: Permission denied
> >
> > Make sure /bin/bash is world executable.
>
> -rwxr-xr-x 1 root admin 596480 Nov 22 19:32 /bin/bash.exe
>
> That's what I found so confusing... ;)
>
> > > (I've renamed 'Administrator' as 'root' in /etc/passwd)
> > >
> > > jon AT shuttle (/home/jon) % su dba
> > > Password:
> > > su: cannot set user id: Permission denied
> >
> > Doesn't seem to be authenticating properly here. Are you sure
> > dba has network logon priveleges?
>
> I think so... I can certainly
>
> jon AT shuttle (~) % ssh -l dba localhost
>
> and that works fine. Ditto for root, and then bash executes fine. I can
> also log in as dba from the XP logon screen.
>
> Thanks for your help - I'd really like to get this to work.

The su binary on my webpage seems to need more privileges than I remember.
Try assigning yourself the "Replace a Process Level Token" right. I am
working on a version that doesn't require these privileges. Maybe by using
CreateProcessWithLogonW and then re-routing the console or something.

Chris


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/