Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Wed, 8 Jun 2005 12:24:42 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Login & Something diff since cygwin 1.5.15-1 release - could it be security changes that were made
Message-ID: <20050608102442.GO23172@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <VA DOT 000011ab DOT 0053f8b1 AT thesoftwaresource DOT com> <20050606104023 DOT GG3268 AT calimero DOT vinschen DOT de> <VA DOT 000011af DOT 013e5ade AT thesoftwaresource DOT com> <20050607090035 DOT GB23172 AT calimero DOT vinschen DOT de> <VA DOT 000011b0 DOT 011613de AT thesoftwaresource DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <VA.000011b0.011613de@thesoftwaresource.com>
User-Agent: Mutt/1.4.2i

On Jun  7 16:13, Brian Keener wrote:
> I have attached the log (log14.out).  Just in case I did this for 1.5.17 as
> well just in case it would be helpful (log17.out).

I didn't expect that but actually the log from 1.5.17 was more informative
than the 1.5.14 one.  Thanks for sending it.  Apparently there's something
different in the LogonUser handling of W2K than in any other system.

According to my tests you must have given the "Act as part of the operating
system" privilege (SeTcbPrivilege) to your account.  Only when I added this
to my W2K account I got the same error as you, which was an "access denied"
in the LogonUser call.  This does not happen in XP or 2K3 with 1.5.17.

So I see now what happens, but there's no satisfying explanation other than
"well, it's just the way it is on W2K".  It's enough to create a workaround,
though.  I've checked in a change to the Cygwin DLL which works for me on
W2K, as long as SeTcbPrivilege is given to my account.

Please test the next snapshot from http://cygwin.com/snapshots/


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/