Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Info: ODIN / NASA Glenn Research Center
Message-Id: <5.1.1.5.2.20031006150737.01ad1ba0@popserve.grc.nasa.gov>
X-Sender: xxjames AT popserve DOT grc DOT nasa DOT gov
Date: Mon, 06 Oct 2003 15:41:41 -0400
To: Pierre DOT Humblet AT ieee DOT org
From: James D Below <James DOT Below AT grc DOT nasa DOT gov>
Subject: Re: messed up user permissions from w2k terminal session
Cc: cygwin AT cygwin DOT com
In-Reply-To: <3F81BA8C.DB1418D7@ieee.org>
References: <Pine DOT GSO DOT 4 DOT 56 DOT 0310031710320 DOT 15176 AT slinky DOT cs DOT nyu DOT edu>
 <5 DOT 1 DOT 1 DOT 5 DOT 2 DOT 20031003155210 DOT 01a43a98 AT popserve DOT grc DOT nasa DOT gov>
 <5 DOT 1 DOT 1 DOT 5 DOT 2 DOT 20031003155210 DOT 01a43a98 AT popserve DOT grc DOT nasa DOT gov>
 <5 DOT 1 DOT 1 DOT 5 DOT 2 DOT 20031006130729 DOT 01ac7b40 AT popserve DOT grc DOT nasa DOT gov>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

Hi Pierre,

I forgot to clarify the user account differences.

Ignore my first post regarding the Administrators group. I thought I had 
put my id in the admin group but I must have hit cancel because when I 
checked today it wasn't there.

If the user account is in an admin group (Domain admins or Administrators ) 
then everything is fine.


>In your initial post you wrote "The administrator account doesn't experience
>problem. A user account belonging in the Administrators group does."
>Is the most recent experiment, is the user in question in the Administrators
>group?
>Also, prior to launching H:\cygwin\cywin.bat, is there any other Cygwin
>process running under that user name on the machine?

nope, no other processes.

>Could you try again when there is absolutely no Cygwin process running?
>
> > When I walk up to the console and login, cywin 1.5.5.1 runs just fine.
> >
> > The problem does *not* occur in version cygwin version 1.3.22-1
>
>Yep, a security hole was fixed in recent versions, but somehow now there
>is "too much" security. I have a theory but I don't have easy access to a
>terminal server to experiment.
>
>So here are two more questions;
>1) When you run 1.3.22 and you do ps -a from a Terminal Server session, do you
>see all Cygwin processes on the machine or only yours?

Only mine, only the ones that I have launched from my window/login session. 
I don't see my process in my other terminal windows.

>2) With 1.5.5, can you run simple Cygwin processes, such as ps or cat,
>from the cmd prompt window?

nope, only from an account with admin privileges

It appears the privilege that is assigned to a user from a "terminal 
session" is different than that of the same user logging in directly at the 
console.

I hope this helps.

thanks.
james


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/