X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Message-ID: <96c450350712231217o456e04c4ofb65e23ef14485c9@mail.gmail.com>
Date: Sun, 23 Dec 2007 14:17:56 -0600
From: "Kevin Hilton" <kevhilton AT gmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Struggling to setup sshd with Windows Vista
In-Reply-To: <96c450350712231207g36bcc392w38c92bf52a52802c@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <96c450350712230222s3549d224m75974cd082bf71a3 AT mail DOT gmail DOT com> 	 <96c450350712230448q14dc0ac3s34e85de08d9b6e9f AT mail DOT gmail DOT com> 	 <96c450350712231207g36bcc392w38c92bf52a52802c AT mail DOT gmail DOT com>
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

> QUOTE:
>
> You've got some indeterminate state of brokenness here. Delete the sshd
> user, delete the service, delete /var/empty, delete the sshd config
> files, recreate known good passwd and group files, and then just run
> "ssh-host-config -y" and let it create everything correctly. That is
> all you should ever need to do. Messing with things manually just leads
> to trouble unless you understand what's going on.
>
> ENDQUOTE
>
> Let me just make sure I know what you are telling me to do, since I
> already did this and it didnt make a difference.  As an administrator,
> I:
> 1. Delete the sshd user -- Ok I manually edited the /etc/passwd file
> and deleted this user
> 2. Delete the service - Ok cygrunsrv -R sshd
> 3. Delete the sshd config files - rm /etc/ssh*config, rm /etc/ssh*pub
> rm /etc/ssh*key
> 4. Recreate known good passwd and group files - I never modified the
> /etc/group file.  I recreated the /etc/passwd file I had prior by just
> removing the sshd user.  Is there something else I should be doing?
> 5. ssh-host-config -y  -- End result is the same. When I do a
> net start sshd
> $ net start sshd
> System error 1069 has occurred.
>
> The service did not start due to a logon failure.
>
> /var/log/sshd.log reveals:
> $ more sshd.log
> Privilege separation user sshd does not exist
>
>
> So how do I create the sshd user? Is there anything I am missing??
> This is my first time running into problems.  Ive repeated this
> process on XP boxes like 20 times without incidence.  Its even easier
> on Ubuntu.  However getting this up and running on Vista is a fiasco.
>


I stand corrected.  I am finding a few differences with the described
setup above (but the service fails to start):
I know have sshd and sshd_server users.  The /etc/group file is unchanged:

$ more /etc/passwd
SYSTEM:*:18:544:,S-1-5-18::
Administrators:*:544:544:,S-1-5-32-544::
Administrator:unused_by_nt/2000/xp:500:513:U-Darien\Administrator,S-1-5-21-22494
56148-3830241392-4138796912-500:/home/Administrator:/bin/bash
Guest:unused_by_nt/2000/xp:501:513:U-Darien\Guest,S-1-5-21-2249456148-3830241392
-4138796912-501:/home/Guest:/bin/bash
IUSR_NMPR:unused_by_nt/2000/xp:1000:513:IUSR_NMPR,U-Darien\IUSR_NMPR,S-1-5-21-22
49456148-3830241392-4138796912-1000:/home/IUSR_NMPR:/bin/bash
klal:unused_by_nt/2000/xp:1001:513:U-Darien\klal,S-1-5-21-2249456148-3830241392-
4138796912-500:/home/klal:/bin/bash
sshd:unused_by_nt/2000/xp:1002:513:sshd privsep,U-Darien\sshd,S-1-5-21-224945614
8-3830241392-4138796912-1002:/var/empty:/bin/false
sshd_server:unused_by_nt/2000/xp:1003:513:sshd server account,U-Darien\sshd_serv
er,S-1-5-21-2249456148-3830241392-4138796912-1003:/var/empty:/bin/false

Also the ownership of the /var/empty directory has changed:
drwxr-xr-x+  2 sshd_server Administrators    0 Dec 23 14:02 .

Should either the sshd or sshd_server user be part of the Administrator group?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/