X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Message-ID: <b85eaed70811201617w4277b4cbhf13cecda5e1d947f@mail.gmail.com>
Date: Thu, 20 Nov 2008 16:17:53 -0800
From: "William Zhang" <espzzh AT gmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Run OpenSSH service with Local System Account
In-Reply-To: <4925F75A.2090805@cygwin.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <b85eaed70811201537w76b76afbmab523c28c07182ab AT mail DOT gmail DOT com> 	 <4925F75A DOT 2090805 AT cygwin DOT com>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Thank you Larry! Please see my comment below.

On Thu, Nov 20, 2008 at 3:48 PM, Larry Hall (Cygwin)
<reply-to-list-only-lh AT cygwin DOT com> wrote:
> Why do you believe that you can set this Local System Account to interact
> with the desktop but not cyg_server?

In the Windows Services property Log On page, we have two option for
the service to run as:
One is to use Local System Account.  When this option is selected, you
have the "allow service to interact with desktop" enabled.
The second option is to use an account you specified but "allow
service to interact with desktop" option is disabled when it is
selected.

> By this you mean specifically what?  Perhaps you should provide the
> output you get and/or you should run 'ssh -v -v -v' to get some insight
> as to where it chokes.

When the ssh-host-config script ask if i want to create a cyg_server
user, I answer no so it defaults to use the system local account.
Below are the debug output and it failed at
ssh_exchange_identification. I guess the cyg_server account is used to
handle ssh_exchange_identification on windows 2003. Can I work around
this with the local system account?

$ ssh -v -v -v localhost
OpenSSH_5.1p1, OpenSSL 0.9.8h 28 May 2008
debug1: Reading configuration data /etc/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to localhost [127.0.0.1] port 22.
debug1: Connection established.
debug1: identity file /home/root/.ssh/identity type -1
debug1: identity file /home/root/.ssh/id_rsa type -1
debug1: identity file /home/root/.ssh/id_dsa type -1
ssh_exchange_identification: Connection closed by remote host

> If you don't care about using pubkey authetication and are fine with
> typing in your Windows password each time you invoke 'ssh', you should
> be able to use the Local System Account.

I don't want any user interaction during the automation test. Can the
password be provided automatically?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/