Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Subject: RE: Windows 2003 Server & Cygwin Cron
Date: Tue, 16 Dec 2003 17:19:18 -0500
Message-ID: <BADF3C947A1BD54FBA75C70C241B0B9E014595E5@ex02.co.idirect.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
From: "Harig, Mark" <maharig AT idirect DOT net>
To: "Benn Schreiber" <bls AT starwhite DOT net>, <cygwin AT cygwin DOT com>
X-IsSubscribed: yes
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id hBGMJWah014881

1. Permissions for /var/cron/tabs/<user ID> should be 640,
   as you have reported.

2. Ownership for this file should be user.SYSTEM, as
   you have reported.

3. Please try the diagnostic script attached to this
   message:

http://sources.redhat.com/ml/cygwin/2003-11/msg01001.html

> -----Original Message-----
> From: Benn Schreiber [mailto:bls AT starwhite DOT net]
> Sent: Tuesday, December 16, 2003 11:51 AM
> To: cygwin AT cygwin DOT com
> Subject: Re: Windows 2003 Server & Cygwin Cron
> 
> 
> I am running on Windows 2003 server, and set up cron_server 
> per this note.
> The cron server starts just fine, but reports that it can't open
> tabs/theuser (where theuser is the user account name).
> 
> The protection on tabs/theuser is 640 o.g is user.SYSTEM  
> which is probably
> why cron server can't open it. I changed the group to 
> administrators, which
> cron_server is part of, but unfortunately, a 'crontab -e' 
> resets the group
> to SYSTEM.
> 
> Thanks
> 
> Benn
> 
> From: Corinna Vinschen <corinna-cygwin at cygwin dot com> 
> To: cygwin at cygwin dot com 
> Date: Tue, 11 Nov 2003 10:02:53 +0100 
> Subject: Re: Windows 2003 Server & Cygwin Cron 
> References: <NPEOLGGPKHICABBIJEIBCELECCAA DOT brian AT cruik DOT org> 
> Reply-to: cygwin at cygwin dot com 
> ________________________________________
> On Mon, Nov 10, 2003 at 03:26:07PM -0700, Brian Cruikshank wrote:
> >  I have tried putting
> > the everyone group on the Local Security policies for 
> "Create a token
> > object", "Logon as service", and "Replace a process level 
> token".  The
> > problem still happens.
> 
> URGH!  Don't do this.  Remove the Everyone group from these rights
> again.  The easiest way is to follow the ssh-host-config script in
> creating a special account:
> 
>   net user cron_server <passwd> /add /yes
>   net localgroup <administrators_group_name> cron_server /add
>   editrights -a SeAssignPrimaryTokenPrivilege -u cron_server
>   editrights -a SeCreateTokenPrivilege -u cron_server
>   editrights -a SeIncreaseQuotaPrivilege -u cron_server
>   editrights -a SeServiceLogonRight -u cron_server
>   mkpasswd -l -u cron_server >> /etc/passwd
> 
> For security reasons:
>   editrights -a SeDenyInteractiveLogonRight -u cron_server
>   editrights -a SeDenyNetworkLogonRight -u cron_server
>   editrights -a SeDenyRemoteInteractiveLogonRight -u cron_server
> 
> And then create a cron service using that account:
>   cygrunsrv -I cron -p /usr/sbin/cron -a -D -u cron_server -w <passwd>
> 
> > By the way, I see reference to a cron README file that 
> should have been in
> > the install.  I cannot find it anywhere yet.  Did it get 
> lost in the new
> > releases or is it hiding somewhere other than /usr/doc?
> 
> /usr/share/doc/...
> 
> Corinna
> 
> -- 
> Corinna Vinschen                  Please, send mails 
> regarding Cygwin to
> Cygwin Developer                                
mailto:cygwin AT cygwin DOT com
Red Hat, Inc.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/