X-Recipient: archive-cygwin AT delorie DOT com X-Spam-Check-By: sourceware.org Message-ID: <490A2FDB.8020601@cygwin.com> Date: Thu, 30 Oct 2008 18:06:19 -0400 From: "Larry Hall (Cygwin)" Reply-To: cygwin AT cygwin DOT com User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080723 Fedora/2.0.0.16-1.fc8 Lightning/0.9 Thunderbird/2.0.0.16 Mnenhy/0.7.5.0 MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: ssh impersonation References: In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Egerton, Jim wrote: > Hello, > > I've installed cygwin-1.25-15 on Server 2008 and seem to be > seeing issues related to sshd's impersonation of a public key > authenticated user. Google turned up a few threads on this subject: > > http://www.cygwin.com/ml/cygwin/2006-07/msg00577.html > http://cygwin.com/ml/cygwin/2007-01/msg00651.html > > In addition to the Visual Studio 2008 linker problem, I also run into > problems accessing WMI from a ssh session - things like tasklist simply > hang and the event log DCOM messages looks like an authentication issue. > As suggested in one of the threads, running sshd as the desired logon > user fixes things, but that makes it difficult for multiple users to > share a "build" box. > > It's been a while since these threads were posted; has anyone come up > with any workarounds besides using password authentication or use the > same sshd account for user logon and sshd service? Larry mentioned > some changes in Cygwin 1.7 - any chance it's a small enough change that > I can put it into sshd until Cygwin 1.7 is released? The changes are in the cygwin 1.7 package rather than the ssh package. That means you'll need 1.7 if you want to see if that solves your problem (it should). If you're willing to risk your current Cygwin installation, you can install the 1.7 version from here: This is not released software. It is not beta software. It's just available for people to try and test with. It's up to you whether or not to experiment with it. -- Larry Hall http://www.rfk.com RFK Partners, Inc. (508) 893-9779 - RFK Office 216 Dalton Rd. (508) 893-9889 - FAX Holliston, MA 01746 _____________________________________________________________________ A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting annoying in email? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/