Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Authentication-Warning: slinky.cs.nyu.edu: pechtcha owned process doing -bs
Date: Fri, 8 Aug 2003 18:50:16 -0400 (EDT)
From: Igor Pechtchanski <pechtcha AT cs DOT nyu DOT edu>
Reply-To: cygwin AT cygwin DOT com
To: Brian DOT Kelly AT empireblue DOT com
cc: cygwin AT cygwin DOT com
Subject: Re: proftpd issues
In-Reply-To: <OFDBD9B2FC.CFA201E1-ON85256D7C.0074D35A@empirehealthcare.com>
Message-ID: <Pine.GSO.4.44.0308081846120.871-100000@slinky.cs.nyu.edu>
Importance: Normal
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Fri, 8 Aug 2003 Brian DOT Kelly AT empireblue DOT com wrote:

> Since having gotten xinetd working, I've shifted my effortst to the new
> proftpd.
>
> After another couple of hours of *pain* - I finally got it going in a
> limited fashion.
>
> First of all, I couldn't get it to start with the SYSTEM id as indicated in
> the proftpd.conf file.
>
> I had to use a custom ID added to the Administrators group and having the
> following User Rights assigned:
>
> "Act as part of the operating system"
> "Replace process level token"
> "Increase quotas"
>
> Question: Do these rights *have* to granted to the SYSTEM id for proftpd to
> work?

Yes.  Since you've as much as quoted from the ntsec userguide section, I'm
not going to bother citing a reference.  The above rights are needed to
switch user contexts.  SYSTEM has it by default on most NT-based versions
of Windows (but may not on some more recent ones, notably 2003 server).

> Next - I could log on with local id's - but not with Domain id's. Is proftpd
> set up to do domain authentication via ntsec??
> If not, is there an ETA?
>
> Brian Kelly

Cygwin (ntsec) is already set up for domain authentication.  However, to
be able to authenticate a domain user, that domain user has to be in
/etc/passwd (and his groups should most likely be in /etc/group).  Make
sure your /etc/passwd includes the users you're trying to authenticate.
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha AT cs DOT nyu DOT edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor AT watson DOT ibm DOT com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski, Ph.D.
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster."  -- Patrick Naughton


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/