Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Message-ID: <3EC22E2A.5020809@attglobal.net> Date: Wed, 14 May 2003 04:53:14 -0700 From: Doug VanLeuven User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4a) Gecko/20030401 X-Accept-Language: en-us, en MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: cygwin + samba pdc = ssh problem References: <1052900218 DOT 1265 DOT 10 DOT camel AT ulysse DOT olympe DOT o2t> In-Reply-To: <1052900218.1265.10.camel@ulysse.olympe.o2t> Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-MailScanner: Found to be clean Nicolas Mailhot wrote: >Hi, > > We've been using cygwin on w2k clients connected to a samba pdc for >quite a some time. Unix home was automounted in user's p: and cygwin >user home was defined as /cygdrive/p. This worked well for about a year. >Lately however cygwin insists on masking all file permissions and >present them all in 644 mode. This in turn breaks openssh key usage >since it sees key file as having too open permissions and dead refuses >to use them (the files real permissions are 600 on the linux server). > > Is it possible to restore the old behaviour and/or change the cygwin >file mask to 600 ? We use ssh to access cvs servers and having to type >ssh password (and answer ssh warnings) every commit it killing cygwin >usage here. > > Older cygwin installs with the same os version and in the same samba >domain work fine, so this is really a pure cygwin problem. > > Regards, > > > You'll need to set CYGWIN=smbntsec (plus whatever else you might be using) and "nt acl support = yes" in smb.conf for the affected shares. Samba uses the "Take Ownership" nt property as a placeholder for no permissions, 0, when mapping unix permissions to ntacl's. That gets interpreted by Cygwin as readable when CYGWIN=nosmbntsec the default behavior in 1.3.21 (what I have) contrary to what is documented. Regards -- Doug VanLeuven -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/