X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Message-ID: <48C73751.9030304@scn.org>
Date: Tue, 09 Sep 2008 22:56:17 -0400
From: Just Me <be439 AT scn DOT org>
User-Agent: Thunderbird 2.0.0.16 (X11/20080725)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: SSH publickey problem, password works (Win 2003, 	OpenSSH_5.1p1,  Cygwin  DLL1.5.25 )
References: <48C640CF DOT 6060809 AT scn DOT org> <20080909204840 DOT GF12841 AT proxix DOT com>
In-Reply-To: <20080909204840.GF12841@proxix.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Tom Schutter wrote:
> On Tue 08-09-09 04:24, Just Me wrote:
>   
>> I've been fighting with SSH for a week now, I've read everything I can
>> google, it's finally time to ask for help.
>>
>> I can ssh to any account using a password, no problem.  It bombs with a
>> cannot seteuid error in the event log when I use a keypair.
>>     
>
> I just solved this yesterday on my box.
>
> If you get a "Connection closed by xxx.xxx.xxx.xxx" message when using
> ssh to connect to a Cygwin sshd server, and/or the event log on the
> server machine contains the error "sshd: PID XXXX: fatal: seteuid YYYYY:
> Permission denied", the user account that sshd is running under probably
> does not have the "Create a token object" right.
>
> Note that if the account does not have this right, it probably doen't
> have other important rights as well.  These rights are normally setup by
> the ssh-host-config script for the sshd_server user.
>
>   

Both the cyg_server and sshd account have these rights:
Act as part of the Operating System
Create a Token Object
Impersonate a client after authentication
Log On as a service

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/