X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Date: Mon, 20 Jul 2009 01:03:20 -0400
From: Christopher Faylor <cgf-use-the-mailinglist-please AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: OpenSSH - sftp not working for non-Administrator users
Message-ID: <20090720050320.GD15540@ednor.casa.cgf.cx>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <4A6388BB DOT 1050904 AT tigroup-usa DOT com>  <4A63CD77 DOT 5090700 AT tigroup-usa DOT com>  <20090720023742 DOT GC15540 AT ednor DOT casa DOT cgf DOT cx>  <4A63E12B DOT 4020205 AT tigroup-usa DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4A63E12B.4020205@tigroup-usa.com>
User-Agent: Mutt/1.5.20 (2009-06-14)
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Sun, Jul 19, 2009 at 10:14:51PM -0500, Doug Lim wrote:
>On Sun, Jul 19, 2009 at 10:37:42PM -0400, Christopher Faylor wrote:
>>On Sun, Jul 19, 2009 at 08:50:47PM -0500, Doug Lim wrote:
>>>After a bit more research on the problem, I found a discussion thread
>>>on the web discussing a similar problem from 2006.  The difference is
>>>that the thread discusses scp connections dropping immediately after
>>>non-administrator authentication.
>>>
>>>http://winscp.net/forum/viewtopic.php?t=3782
>>>
>>>A response to a thread from March of this year indicates that copying
>>>all of the DLL files from cygwin\usr\bin to cygwin\usr\sbin as a
>>>workaround.  I've copied the DLL files on my server per the workaround
>>>and now non-administrator users are able to use sftp.
>>>
>>>I've attached a copy of cygcheck.out from the server where this is
>>>happening.
>>
>>That sounds like a pretty <insert negative adjective here> workaround.
>>
>>Just setting the PATH to include cygwin's bin directory is likely to
>>work better.  I know that someone in that thread said that they did
>>that already but I'm not convinced that they really knew what they were
>>doing.
>
>Except, cygwin\bin was already in the path as indicated in the
>cygcheck.out I attached.

The cygcheck.out file shows that the cygwin directory was in the PATH
when you ran the cygcheck program.  It doesn't necessarily mean that it
is the path that a service sees.

>It doesn't explain why users belonging to the Local Administrators
>group would be able to maintain an SFTP connection while
>non-Administrators would get dropped immediately following
>authentication.

Copying a bunch of DLLs to /usr/sbin doesn't explain this either.

cgf

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple