X-Spam-Check-By: sourceware.org
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; 	charset="iso-8859-1"
Subject: Unable ssh login using Windows Domain account using password autheationntic
Date: Wed, 22 Feb 2006 12:51:51 -0500
Message-ID: <E400628E9D6760429593FBE7A5AAD27801FA506F@NAEAPAXREX04VA.nadsusea.nads.navy.mil>
From: "Perdue, Dave T.  CIV NAVAIR 5.4.3, Bldg 2035, Rm 205, Cube 200" <david DOT perdue AT navy DOT mil>
To: <cygwin AT cygwin DOT com>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id k1MHsQND028060

We are currently using Cygwin 1.5.12-1 on our Windows 2000 Domain as the ssh server for our PCs.  1.5.12-1 ssh allows us to log into the domain PCs remotely using our domain accounts.  I installed Cygwin 1.5.19-4 on one system and find that when I remotely log in using a domain account the native Windows "whoami" command reports my identity as "NT AUTHORITY\SYSTEM".  When I remotely ssh log in on the same system using a local account I see the correct identity.  All logins are using manually entered passwords.  I used the following commands to create the passwd and group files:

mkpasswd -l > /etc/passwd
mkpasswd -d  >> /etc/passwd
mkgroup -l > /etc/group
mkgroup -d >> /etc/group

I configured ssh to use the sshd privilege separation account and specified "ntsec binmode tty".  The sshd server is configured to logon as the local system account.  What changes do I need to make to allow 1.5.19-4 to support logons using our domain account like 1.5.12-1 can?  Thanks in advance for any help that you can provide.

Also, I have noticed that an "id -G" in 1.5.12-1 produces the same output when logged in locally and thru an ssh session, while in 1.5.19-4 it produces different output for the two types of logon.

David Perdue


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/