X-Spam-Check-By: sourceware.org
From: "Dave Korn" <dave DOT korn AT artimi DOT com>
To: <cygwin AT cygwin DOT com>
References: <f0tr37$ae2$1 AT sea DOT gmane DOT org>
Subject: RE: Puzzling local share permissions problem with ssh sessions on Win2K3
Date: Sat, 28 Apr 2007 14:09:28 +0100
Message-ID: <033001c78996$73b09300$2e08a8c0@CAM.ARTIMI.COM>
MIME-Version: 1.0
Content-Type: text/plain; 	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <f0tr37$ae2$1@sea.gmane.org>
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 27 April 2007 22:48, Shankar Unni wrote:

> I have a Win2K3 SP1 system, freshly installed with the latest bits, and
> sshd installed with privilege separation (using ssh_host_config).  The
> /etc/passwd has both local and domain users (in that order), as does
> /etc/group.

  And even better, you sent cygcheck output.  Excellent.

> I have a local shared directory c:\Views (shared as \\myhostname\Views).
> The problem is that when I log in as a domain user, and try to write
> something into \\myhostname\Views\, I get a permission denied error,
> even though I can do this successfully if I come in as that same user
> via Terminal Services.

cygcheck.out: CYGWIN = 'ntsec'

  Perhaps you need smbntsec as well?

"(no)smbntsec - if set, use ntsec on remote drives as well (default is
"nosmbntesc"). When setting "smbntsec" there's a chance that you get problems
with Samba shares so you should use this option with care. One reason for a
non working ntsec on remote drives could be insufficient permissions of the
users. The requires user rights are somewhat dangerous (SeRestorePrivilege),
so it's not always an option to grant that rights to users. However, this
shouldn't be a problem in NT domain environments."
http://www.cygwin.com/cygwin-ug-net/using-cygwinenv.html

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/