Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
From: "Peter Kok" <peterkok AT peter-angela DOT com>
To: cygwin AT cygwin DOT com
Reply-To: peterkok AT peter-angela DOT com
Subject: Re: rsync  question
X-IPAddress: 206.130.170.11
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Message-Id: <E1BFej2-00063E-5p@host4-server.com>
Date: Mon, 19 Apr 2004 15:46:40 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host4-server.com
X-AntiAbuse: Original Domain - cygwin.com
X-AntiAbuse: Originator/Caller UID/GID - [32043 544] / [47 12]
X-AntiAbuse: Sender Address Domain - host4-server.com

> At 12:08 AM 4/17/2004 +0200, Corinna Vinschen wrote:
> >On Apr 16 15:44, Peter Kok wrote:
> 
> >> Q2: Could nontsec work with public key authentication?  I have 
granted 
> >> the account with several local user rights, "create token object, 
> >> logon 
> >> as a service' and 'replace a process level token'
> >
> >Did you give the SYSTEM account the right to read your ~/.ssh 
directory
> >and the files in it?  Does the service know about nontsec (set CYGWIN
> >in global windows environment or through cygrunsrv)?  Is StrictModes 
set
> >to no in /etc/sshd_config?
> 
> >From Peter's question it's not clear if his sshd is running as 
SYSTEM.
> If it is, then granting the privileges to the user should not be
> necessary, but that doesn't explain the problem.
> 
> I can reproduce on an NT system, with sshd running as SYSTEM,
> but I can't explain it. Part of the debug output of ssh is given
> below, with and without ntsec. The difference is in the last few
> lines.
> 
> Pierre
> 
>It's a problem with the ntsec specific test in OpenSSH itself.  The
>test requires ntsec to be turned on for switching user context w/o
>password.  This isn't required anymore for a while but the test in
>OpenSSH still insists on ntsec for pubkey auth.
>
>I've send a patch to the portable OpenSSH developers list which 
>hopefully
>makes it into 3.8.1p1, which is due RSN.
>
>Corinna

Thank you Corinna for your quick response.  I just saw that OpenSSH has 
release 3.81pl on April 19, but unfortunately, it didn't include the 
new patch.  Can you please show me tips/website onto how I could 
compile the new modified bsd-cygwin_util.c to be used by cygwin?

Thanks in advance,
Peter


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/