Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Date: Wed, 6 Oct 2004 12:47:42 +0200 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: SSH + CVS But no login. Message-ID: <20041006104742.GC6702@cygbert.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: <307790-22004103610273860 AT M2W079 DOT mail2web DOT com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <307790-22004103610273860@M2W079.mail2web.com> User-Agent: Mutt/1.4.2i On Oct 6 06:27, mike AT fuckingbrit DOT com wrote: > >Urgh! SYSTEM is the account sshd is running under. Don't remove that. > > Various Guest/System accounts that weren't the SYSTEM account, I removed > IUSR_MOTHER and IWAM_MOTHER, the ASP.NET user etc. Ah, ok. That makes it clearer. > Without an entry in the cygwin passwd file a user with a valid windows > login can not authenticate into cygwin. > > Was this wrong? I just jumped up when I read the word "system". I'd remove only additional accounts which are not used anyway (as the above noted IUSR_foo accounts). Personally I'm in favor of keeping these accounts in the file and just do one or many of - Disable the account in the Windows user management console - Set the login shell in /etc/passwd to /bin/false - Use the AllowUsers and DenyUsers entries in sshd_config Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader mailto:cygwin AT cygwin DOT com Red Hat, Inc. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/