Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Wed, 15 Oct 2003 12:22:04 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: sshd only allows connection to local accounts
Message-ID: <20031015102204.GO14344@cygbert.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <3F8D0E9F DOT 1662D14D AT doe DOT carleton DOT ca>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3F8D0E9F.1662D14D@doe.carleton.ca>
User-Agent: Mutt/1.4.1i

On Wed, Oct 15, 2003 at 05:08:47AM -0400, Fred Ma wrote:
> Hello,
> 
> I followed the procedure of setting up sshd:
> http://pigtail.net/LRP/printsrv/cygwin-sshd.html
> 
> I launch the sshd with an account that is part of
> the administrator group (WinXP).  One peculiarity
> about this account is that it is not a local
> account i.e. when I log into Windows, I specify a domain
> name other than the name of the local PC.
> 
> In order for sshd to respond to connection requests,
> I did "mkpasswd -l > /etc/passwd".  This did not
> allow me to connect to sshd from outside, since
> "mkpasswd -l" only generates entries for local users.
> 
> Therefore, I used "mkpasswd -d", grepped my User ID
> from the output, then appended it to /etc/passwd.
> This didn't fix the problem.
> 
> To check that sshd allowed connections to local user
> accounts, I created a local user account "Test" and
> successfully connected to it via sshd from outside.
> 
> What more is required to allow ssh connections to
> nonlocal user accounts?  I only have control over
> the local PC.  Even here, I don't have absolute
> control; for example, I can't login as "administrator",
> but I can login to an account that is part of the
> administrators group.

You're assuming too much.  We don't know about your settings at all.
What cygwin version?  What ssh version?  Password authentication or
pubkey authentication?  What do you mean by "I launch the sshd with
an account that is part of the administrator group"?  Does that
mean you start sshd on the command line using that account?  Or does
that mean you start an sshd service from the command line using that
account?  Or do you mean the service runs under that account?  Etc.
Please see http://cygwin.com/problems.html.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/