Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <3EC22E2A.5020809@attglobal.net>
Date: Wed, 14 May 2003 04:53:14 -0700
From: Doug VanLeuven <roamdad AT attglobal DOT net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4a) Gecko/20030401
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: cygwin + samba pdc = ssh problem
References: <1052900218 DOT 1265 DOT 10 DOT camel AT ulysse DOT olympe DOT o2t>
In-Reply-To: <1052900218.1265.10.camel@ulysse.olympe.o2t>
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit
X-MailScanner: Found to be clean

Nicolas Mailhot wrote:

>Hi,
>
>	We've been using cygwin on w2k clients connected to a samba pdc for
>quite a some time. Unix home was automounted in user's p: and cygwin
>user home was defined as /cygdrive/p. This worked well for about a year.
>Lately however cygwin insists on masking all file permissions and
>present them all in 644 mode. This in turn breaks openssh key usage
>since it sees key file as having too open permissions and dead refuses
>to use them (the files real permissions are 600 on the linux server).
>
>	Is it possible to restore the old behaviour and/or change the cygwin
>file mask to 600 ? We use ssh to access cvs servers and having to type
>ssh password (and answer ssh warnings) every commit it killing cygwin
>usage here.
>
>	Older cygwin installs with the same os version and in the same samba
>domain work fine, so this is really a pure cygwin problem.
>
>	Regards,
>
>  
>
You'll need to set CYGWIN=smbntsec (plus whatever else you might be 
using) and "nt acl support = yes" in smb.conf for the affected shares.
Samba uses the "Take Ownership" nt property as a placeholder for no 
permissions, 0, when mapping unix permissions to ntacl's.  That gets 
interpreted by Cygwin as readable when CYGWIN=nosmbntsec the default 
behavior in 1.3.21 (what I have) contrary to what is documented.

Regards

-- 
Doug VanLeuven



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/