X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
To: cygwin AT cygwin DOT com
From: Herb Maeder <maeder-cygml AT maeder DOT org>
Subject: sshd on vista error "initgroups: Permission denied" (cygwin-1.7)
Date: Sat, 08 Nov 2008 07:44:51 -0800
Message-ID: <38971.1226159091@maeder.org>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Running sshd (openssh 5.1p1-d57 or 5.1p1-7) on cygwin-1.7 and vista
results in the following error:

        % ssh localhost pwd
        herb AT localhost's password:
        initgroups: Permission denied

I think this should be easily reproducible with a fresh installation of
just cygwin 1.7 base + openssh running on a generic vista confiuration
with UAC enabled.  

Can anyone confirm this?  If it is specific to my setup, I'll dig deeper
and provide more information.

For more details on reproducing this see this message (specifically item 7):

    http://www.cygwin.com/ml/cygwin/2008-10/msg00370.html

BTW, the following issues in that message also still exist in the 5.1p1-7
release.  But they can be worked around more easily.

  3. "ssh-host-config -y" still prompts for user input
  4. Missing warning if cyg_server exists in /etc/passwd but not in SAM
  5. "ssh localhost pwd" gives 'ssh_exchange_identification' error (only if
      tcp_wrapper package is installed)
  6. error in setting cyg_server passwd expiry

Herb.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/