Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <3F65BAF7.8030902@speeq.com>
Date: Mon, 15 Sep 2003 15:13:27 +0200
From: Olivier ALLART <olivier DOT allart AT speeq DOT com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3.1) Gecko/20030425
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Sshd - Can't get access thru Public Key
References: <3F61ED47 DOT 6090606 AT speeq DOT com> <20030913085632 DOT GO9981 AT cygbert DOT vinschen DOT de>
In-Reply-To: <20030913085632.GO9981@cygbert.vinschen.de>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Corinna Vinschen wrote:

>On Fri, Sep 12, 2003 at 05:59:03PM +0200, Olivier ALLART wrote:
>  
>
>>On aWin 2003 Server, I got the message
>>'Setuid : 500: Not permitted' when trying to login using RSA PK mechanisms.
>>Login/Passwd works just fine, but using a PKey won't work.
>>    
>>
>
>That can be found in the mailing list archive already.
>E.g. http://www.cygwin.com/ml/cygwin/2003-07/msg00684.html
>
>Corinna
>

I found out the following;

>create a special account for this, which is member of the admins
>group and has the additional user privileges "Create a token object",
>"Replace a process level token" and "Logon as a service".  Probably
>it makes sense to remove other privileges from that account, e.g.
>the right to logon locally or so.

my (dumb ?) question is : where do we define such parameters ?

And if I get the thing correctly, sshd sould still run the same way 
(under the sshd user account with local sys privileges) but we should 
connect using this newluy created user account to log in .. am I right ?

>
>  
>



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/