X-Spam-Check-By: sourceware.org Date: Thu, 10 Aug 2006 09:21:30 +0200 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: logon failure from subauth in 2006-08-02 snapshot Message-ID: <20060810072130.GB20467@calimero.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: <20060809183753 DOT GA2940 AT tela DOT daveroth DOT dyndns DOT org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20060809183753.GA2940@tela.daveroth.dyndns.org> User-Agent: Mutt/1.4.2i Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On Aug 9 11:37, David Rothenberger wrote: > I've noticed repeated logon failures in my Security event log with > the 2006-08-02 snapshot. (I have security auditing enabled.) > > It looks like these failures occur when cron runs a job. I attached > strace to cron and saw the following: > > 2315 31545159 [main] CRON 4164 subauth: LsaLogonUser: -1073741702 > 2072 31547231 [main] CRON 4164 seterrno_from_win_error: /netrel/src/cygwin-snapshot-20060802-1/winsup/cygwin/security.cc:1067 windows error 127 > 686 31547917 [main] CRON 4164 geterrno_from_win_error: windows error 127 == errno 3 > > I'm not sure whether this is expected behavior or not. It does fill > up the Security event log pretty quick, though. It's expected behaviour if you didn't set up subauthentication. There's nothing I can do about this at this point. I've noted it on my TODO list to look into at one point. As usual, PTC. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/