X-Spam-Check-By: sourceware.org Message-ID: <458A58A6.7090708@jasper-moeller.de> Date: Thu, 21 Dec 2006 10:49:26 +0100 From: Jasper Moeller User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: OpenSSH: differences for public key and password authentication Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Hi folks, I'm sure I had found some references to this before, but I'm completely unable to dig them out again, so please bear with me. We are using cygwin+openssh for remote logins from linux onto an WinXP machine, which we use for automated build processes. We set up public key authentication successfully, however, there seem to be some differences between publickey authentication and password authentication - mainly, when using the public key, several permissions are wrong/missing/whatsoever. On problem is when trying to access network shares (we use AFS, just to complicate matters further...), the other manifests itself when trying to run several .NET applications (NDoc and especially signtool.exe). We can work around most ones, except for the signtool issue :-( I'd really hate going back to password logins since this basically prevents fully automated builds, so is there any way around it? Probably some server misconfiguration which I can't find out? SSH server config excerpt: - Uses privilege separation - service starts as SYSTEM account - CYGINW=ntsec - Rest as suggested by ssh-host-config Thanks in advance JM -- Jasper Moeller yWorks GmbH Vor dem Kreuzberg 28 72070 Tuebingen Germany -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/