X-Spam-Check-By: sourceware.org
Date: Thu, 26 Jul 2007 15:30:56 -0700 (PDT)
From: Chris Stromsoe <cbs AT cts DOT ucla DOT edu>
To: =?ISO-8859-1?Q?Ren=E9_Berber?= <r DOT berber AT computer DOT org>
cc: cygwin AT cygwin DOT com
Subject: Re: proftpd as a service under 2003
In-Reply-To: <f8b4f7$a8p$1@sea.gmane.org>
Message-ID: <Pine.LNX.4.64.0707261517380.27722@potato.cts.ucla.edu>
References: <Pine DOT LNX DOT 4 DOT 64 DOT 0707261316500 DOT 24994 AT potato DOT cts DOT ucla DOT edu>  <f8b4f7$a8p$1 AT sea DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="1635799168-1837389130-1185489056=:27722"
X-Probable-Spam: no
X-Spam-Report: none
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

--1635799168-1837389130-1185489056=:27722
Content-Type: TEXT/PLAIN; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Thu, 26 Jul 2007, Ren=E9 Berber wrote:
> Chris Stromsoe wrote:
>
>> I'm having trouble getting proftpd to run as a service under 2003.  I=20
>> read /usr/share/doc/Cyginw/openssh.README.  I used ssh-host-config to=20
>> create an account named sshd_server.  I have ssh running fine.
>>
>> If I try to use the same account, I get the error
>
> How did you setup proftpd as service?

cygrunsrv --install proftpd --path /usr/sbin/proftpd.exe --args "nodaemon"=
=20
--type auto --disp "Cygwin proftpd" --desc "ProFTP FTP daemon" --user=20
sshd_server -e CYGWIN=3D"ntsec"


"cygrunsrv --start proftpd" after that fails.


>>   Error starting a service: QueryServiceStatus:  win32 error 1062:
>>   The service has not been started.
>>
>> Looking in the logs, I have:
>>
>>   unable to set uid to 18, current uid: 1006
>
> And 1006 is sshd_server?  We know 18 is SYSTEM, whoever is 1006 has no=20
> privileges to change users... and it probably shouldn't (I have in my=20
> /etc/proftpd.conf User SYSTEM and Group None, it works fine in Win XP),=
=20
> if set as service the default is being run as SYSTEM, you must have=20
> changed that but not the proftpd configuration.

If I run without specifying --user, proftpd runs as SYSTEM.  It does not=20
change users at all.  If I log in with other users and upload files, the=20
files all end up owned by the SYSTEM user.

1006 is sshd_server, which does have permissions to change users,=20
otherwise  sshd wouldn't work under 2003.

http://www.cygwin.com/cygwin-ug-net/ntsec.html#ntsec-switch explains that=
=20
the SYSTEM user does not have the "Create a token object" right under=20
win2k3, which is required for set*id functions to work.  ssh-host-config=20
creates a user (sshd_server) which has those rights for running the ssh=20
daemon.  I am trying to re-use that user (which I have verified works with=
=20
ssh) with proftpd



>> Running /usr/sbin/proftpd from the command line gives me the same=20
>> error, except the current uid is 500.
>>
>> The system is windows 2003 server.  cygwin is 1.5.24.
>>
>> Any ideas?
>
> ProFtpd can be started from inetd... your choice; but there are=20
> advantages like using tcp_wrappers.

I don't have inetd installed.  It's a stripped down installation.  In any=
=20
event, it's not clear to me that running from inetd would help.  The=20
problem seems to be related changing users, which proftpd would still have=
=20
to do running under inetd.



-Chris

--1635799168-1837389130-1185489056=:27722
Content-Type: text/plain; charset=us-ascii

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/
--1635799168-1837389130-1185489056=:27722--