X-Spam-Check-By: sourceware.org Message-ID: <45D602CA.3070205@cygwin.com> Date: Fri, 16 Feb 2007 14:15:22 -0500 From: "Larry Hall (Cygwin)" Reply-To: cygwin AT cygwin DOT com User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.9) Gecko/20061221 Fedora/1.5.0.9-1.fc4.remi Thunderbird/1.5.0.9 Mnenhy/0.7.4.0 MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: Make open ssh work with PKA on a Windows 2003 server References: <1171538180 DOT 11344 DOT 23 DOT camel AT mail DOT rebattu DOT fr> <45D45EB1 DOT 5030803 AT cygwin DOT com> <1171557280 DOT 11344 DOT 42 DOT camel AT mail DOT rebattu DOT fr> <45D4ADE5 DOT 6090406 AT cygwin DOT com> <1171622063 DOT 11344 DOT 59 DOT camel AT mail DOT rebattu DOT fr> In-Reply-To: <1171622063.11344.59.camel@mail.rebattu.fr> Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8bit Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Again - Reformatted Yohann Rebattu wrote: > Le jeudi 15 février 2007 à 14:00 -0500, Larry Hall (Cygwin) a écrit : >> - Reformatted >> >> Yohann Rebattu wrote: >> > thank you very much for answering me. >> > i don't trust the other web site anymore about cygwin; >> > >> > i did read openssh.README and reinstall the whole thing >> > the ssh-host-config didn't create sshd_server at the fisrt time, so >> > since i've read the readme i ran cygrunsrv -R sshd >> > and then run ssh-host-config again, this time it works and i got the >> > proper user sshd_server but i got the error message about changing owner >> > of /var/empty, /var/log/sshd.log >> > >> > so as explained in README file, i've tried to rerun ssh-host-config >> > no error message this time. >> > But once i run cygrunsrv -S sshd i get the message win32 error 1069 >> > >> > So i had a look in the mailind list, i understood i had to change >> > ownerchip of /var/empty and /var/log/sshd/log to SYSTEM:SYSTEM, but when >> > i try to do it i get invalid user message. >> > >> > i'v tried to gave theses files to sshd or sshd_server (i don't know >> > exactly wich one has to own the files) theses time i didn't get any >> > error message, but still have error when runing the cygrunsrv -S sshd >> > command. >> > >> > What shall i do now? >> > thank you once again. >> > >> >> # net helpmsg 1069 >> >> The service did not start due to a login failure. >> >> Sounds like sshd_service isn't allowed to log in. Check its permissions. >> > Hello again, > sorry to bother you, this this time, fallowing your instruction i could > start ssh daemon, i did try id and it seems to run fine with password > authentification, but as soon as i use the 'ssh-user-config' in order to > use the PKA, i can't login anymore (actualy i can but i'm diconnected > after 1 litle second), here is the end of ssh -vv > Administrateur AT localhost after i use the ssh-user-config: > > > the funny thing is after i delete all id from /home/Administrateur/.ssh/ > i can log again with password authentification. > > so i did look for log but i couldn't find any AUTH.log in /var/log > nether SyslogFacility in /etc/sshd_config. > (i even try to write SyslogFacility=AUTH in /etc/sshd_config, but > nothing happen). > > so do you know why the session closes right after it starts? > > Thank you again, for your help > I'd recommend starting the server with debugging enabled and looking at the output there. It's usually more instructive. To do this, I'd recommend stopping your current sshd server, copying /usr/bin/ssh-host-config, and then modifying the copy to install a new server (with a new name) with the added "-d -d -d" (on the cygrunsrv line). Running that will install the debug-enabled sshd server. Starting that server and trying to log in as you describe will generate some log info for you. I'd recommend reading through the sshd man page if you have questions about the options available for this. Also, be aware that you'll need to restart the debug server each time you finish a session. -- Larry Hall http://www.rfk.com RFK Partners, Inc. (508) 893-9779 - RFK Office 216 Dalton Rd. (508) 893-9889 - FAX Holliston, MA 01746 _____________________________________________________________________ A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting annoying in email? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/