X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.1 required=5.0 	tests=AWL,BAYES_00,J_CHICKENPOX_83
X-Spam-Check-By: sourceware.org
Message-ID: <4A6404C4.2030003@tigroup-usa.com>
Date: Mon, 20 Jul 2009 00:46:44 -0500
From: Doug Lim <doug DOT lim AT tigroup-usa DOT com>
User-Agent: Thunderbird 2.0.0.22 (Windows/20090605)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: OpenSSH - sftp not working for non-Administrator users
References: <4A6388BB DOT 1050904 AT tigroup-usa DOT com>  <4A63CD77 DOT 5090700 AT tigroup-usa DOT com>  <20090720023742 DOT GC15540 AT ednor DOT casa DOT cgf DOT cx>  <4A63E12B DOT 4020205 AT tigroup-usa DOT com> <20090720050320 DOT GD15540 AT ednor DOT casa DOT cgf DOT cx>
In-Reply-To: <20090720050320.GD15540@ednor.casa.cgf.cx>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Christopher Faylor wrote:
> On Sun, Jul 19, 2009 at 10:14:51PM -0500, Doug Lim wrote:
>   
>> On Sun, Jul 19, 2009 at 10:37:42PM -0400, Christopher Faylor wrote:
>>     
>>> On Sun, Jul 19, 2009 at 08:50:47PM -0500, Doug Lim wrote:
>>>       
>>>> After a bit more research on the problem, I found a discussion thread
>>>> on the web discussing a similar problem from 2006.  The difference is
>>>> that the thread discusses scp connections dropping immediately after
>>>> non-administrator authentication.
>>>>
>>>> http://winscp.net/forum/viewtopic.php?t=3782
>>>>
>>>> A response to a thread from March of this year indicates that copying
>>>> all of the DLL files from cygwin\usr\bin to cygwin\usr\sbin as a
>>>> workaround.  I've copied the DLL files on my server per the workaround
>>>> and now non-administrator users are able to use sftp.
>>>>
>>>> I've attached a copy of cygcheck.out from the server where this is
>>>> happening.
>>>>         
>>> That sounds like a pretty <insert negative adjective here> workaround.
>>>
>>> Just setting the PATH to include cygwin's bin directory is likely to
>>> work better.  I know that someone in that thread said that they did
>>> that already but I'm not convinced that they really knew what they were
>>> doing.
>>>       
>> Except, cygwin\bin was already in the path as indicated in the
>> cygcheck.out I attached.
>>     
>
> The cygcheck.out file shows that the cygwin directory was in the PATH
> when you ran the cygcheck program.  It doesn't necessarily mean that it
> is the path that a service sees.
>   
I added D:\cygwin\bin to the PATH via the Environment Variables button on the Advanced tab in the System Properties control panel applet followed by a system reboot after cygwin and openssh were installed. If you're suggesting that's not sufficient for a running service to see the updated path, then what would you suggest should be done differently?

>> It doesn't explain why users belonging to the Local Administrators
>> group would be able to maintain an SFTP connection while
>> non-Administrators would get dropped immediately following
>> authentication.
>>     
>
> Copying a bunch of DLLs to /usr/sbin doesn't explain this either.
>
>   
I don't understand and can't offer an explanation of why the workaround 
works. I can't speak to the fact that it doesn't make sense that the 
workaround should work. I only know that this isn't just theoretical. 
This is actual testing and documentation of what has and hasn't worked.
> cgf
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>
>
>   



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple