X-Spam-Check-By: sourceware.org
From: "Manel Rodero" <manel AT fib DOT upc DOT edu>
To: <cygwin AT cygwin DOT com>
Subject: RE: Wich privileges required by ssh-host-config running user?
Date: Wed, 18 Jan 2006 18:04:52 +0100
Message-ID: <006a01c61c51$4c52a090$043a5393@fib.upc.es>
MIME-Version: 1.0
Content-Type: text/plain; 	charset="us-ascii"
In-Reply-To: <SERRANOP9ww1WySvX5w000001bc@SERRANO.CAM.ARTIMI.COM>
X-Scaned-FIB: AntiVirus/AntiSpam en fib.upc.es
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id k0IH5ShR013246

Hi all,

SOLVED!

If I use the 'Administrator' local account the script ssh-host-config fails
when trying to chown the /etc/ssh* files.

But, if I use the 'Administrator' domain account then the script works (i.e.
this user can chown the files to the SYSTEM account). The only thing this
domain account can't do is create directories under /home.

Why? Because its primary group is "mkgroup-l-d". So I need to change this
first by running "mkpasswd -l" and "mkgroup -l". In this manner this domain
account can create /home/pkuser and then create here a .ssh directory with
the authorized_keys I need to implement public key authentication.

It now works like a charm.

Thank you very much to all for your help.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/