X-Spam-Check-By: sourceware.org
From: "Dave Korn" <dave DOT korn AT artimi DOT com>
To: <cygwin AT cygwin DOT com>
Subject: RE: proftpd + mod_tsl + cygwin under win2003
Date: Fri, 24 Feb 2006 16:17:29 -0000
Message-ID: <008701c6395d$cee650a0$a501a8c0@CAM.ARTIMI.COM>
MIME-Version: 1.0
Content-Type: text/plain; 	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <Pine.GSO.4.63.0602241106140.18478@access1.cims.nyu.edu>
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 24 February 2006 16:07, Igor Peshansky wrote:

> On Fri, 24 Feb 2006, Dave Korn wrote:
> 
>> On 24 February 2006 15:24, Tyler Durden wrote:
>> 
>>> server (client.domain.com[10.0.0.28]) -
>>> PRIVS_RELINQUISH: unable to seteuid(PR_ROOT_UID):
>>> Permission denied
>> 
>>   Looks a lot like you will need to set up a specialised user a/c for
>> the service to run under so that you can grant it the "Create a token
>> object" privilege.  See 
>> 
>> http://www.cygwin.com/cygwin-ug-net/ntsec.html#ntsec-switch
> 
> Also, see /usr/share/doc/Cygwin/openssh.README (seems unrelated, I know).
> 
> It would probably be a good idea to have a proftpd-host-config (similar to
> ssh-host-config) that sets up that specialized user automatically when
> needed.

  "When needed", in this case, would be "When doing a non-standard install
from home-built sources and not using the cygwin packaged version at all".....
so I don't think adding a script to the package would help!  (Of course, if
the package maintainer ever wants to start building with mod_tls enabled
rather than disabled, this would change.)

  Oh, BTW, Moe or Tyler or whatever your name is today ;-), you were asking
where to find the cygwin specific patches.  They're part of the source package
for proftpd, which you can install via setup.exe - just tick the box in the
'sources' column next to proftpd.  In fact, you'd probably get the best
results by doing just that, and then building your mod_tls-enabled version
from the cygwin-specific sources.



    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/