X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.8 required=5.0 	tests=AWL,BAYES_00,J_CHICKENPOX_27
X-Spam-Check-By: sourceware.org
Message-ID: <411082.71951.qm@web33504.mail.mud.yahoo.com>
References: <1253654636 DOT 345 DOT ezmlm AT cygwin DOT com> <583331 DOT 35165 DOT qm AT web33505 DOT mail DOT mud DOT yahoo DOT com> <4AB96384 DOT 3080802 AT gmail DOT com> <361230 DOT 45413 DOT qm AT web33508 DOT mail DOT mud DOT yahoo DOT com> <4ABA3EB8 DOT 40505 AT cygwin DOT com> <59370 DOT 4900 DOT qm AT web33501 DOT mail DOT mud DOT yahoo DOT com> <4ABA5A09 DOT 4020400 AT cygwin DOT com> <143229 DOT 30134 DOT qm AT web33507 DOT mail DOT mud DOT yahoo DOT com> <4ABA6F68 DOT 7050301 AT cygwin DOT com> <408909 DOT 13887 DOT qm AT web33503 DOT mail DOT mud DOT yahoo DOT com> <4ABA7B65 DOT 2030207 AT cygwin DOT com>
Date: Wed, 23 Sep 2009 13:47:03 -0700 (PDT)
From: Dave M <dindenver AT yahoo DOT com>
Subject: Re: sftp on a Windows 2003 server
To: cygwin AT cygwin DOT com
In-Reply-To: <4ABA7B65.2030207@cygwin.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Here is what happened when I tried to run the script:
$ ssh-host-config
*** Query: Overwrite existing /etc/ssh_config file? (yes/no) yes
*** Info: Creating default /etc/ssh_config file
*** Query: Overwrite existing /etc/sshd_config file? (yes/no) yes
*** Info: Creating default /etc/sshd_config file
*** Info: Privilege separation is set to yes by default since OpenSSH 3.3.
*** Info: However, this requires a non-privileged account called 'sshd'.
*** Info: For more info on privilege separation read /usr/share/doc/openssh/READ
ME.privsep.
*** Query: Should privilege separation be used? (yes/no) yes
*** Warning: The permissions on the directory /var are not correct.
*** Warning: They must match the regexp d..x..x..[xt]
*** ERROR: Problem with /var directory. Exiting.

Also:
$ ls -l /etc/group /etc/passwd
-rwxr-xr--+ 1 je28004 Users  752 Sep 23 13:59 /etc/group
-rwxr-xr--+ 1 je28004 Users 1140 Sep 23 13:59 /etc/passwd

$ ls -l /
total 9
-r-xr-x---+  1 je28004 Users      57 Sep 23 12:59 Cygwin.bat
-r-xr-x---+  1 je28004 Users    7022 Sep 23 12:59 Cygwin.ico
drwxrwx---+  2 je28004 Users       0 Sep 23 12:58 bin
dr-xr-xr-x   1       0        0    0 Dec 31  1969 cygdrive
drwxrwx---+  2 je28004 Users       0 Sep 23 12:58 dev
drwxrwxr-x+ 15 je28004 Users       0 Sep 23 14:24 etc
drwxrwx---+ 22 je28004 Users       0 Sep 23 12:58 lib
dr-xr-xr-x   1 je28004 mkpasswd    0 Nov 30  2006 proc
drwxrwxrwt+  2 je28004 Users       0 Sep 23 13:57 tmp
drwxrwx---+ 13 je28004 Users       0 Sep 23 12:57 usr
drwxrwx---+  9 je28004 Users       0 Sep 23 13:58 var

$ ls -l /var
total 0
drwxrwx---+ 3 je28004 Users    0 Sep 23 12:57 cache
drwxr-xr-x+ 3 je28004 Users    0 Sep 23 12:58 cron
drwxr-xr-x+ 2 SYSTEM  mkpasswd 0 Sep 23 13:58 empty
drwxrwx---+ 3 je28004 Users    0 Sep 23 12:56 lib
drwxrwxr-x+ 2 je28004 Users    0 Sep 23 13:58 log
drwxrwx---+ 2 je28004 Users    0 Sep 23 12:56 run
drwxrwx---+ 2 je28004 Users    0 Sep 23 12:56 tmp

  Did I mention you are awesome.
Dave M


----- Original Message ----
From: Larry Hall (Cygwin) <reply-to-list-only-lh AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Sent: Wednesday, September 23, 2009 1:47:49 PM
Subject: Re: sftp on a Windows 2003 server

On 09/23/2009 03:25 PM, Dave M wrote:
>    Two questions:
> 1) Should I run the ssh-host-config now or wait until the mkgroup issue is resolved?

Since you plan to use a local user for ssh/sftp, you can skip the mkgroup issue for now.

> 2) Do I need to resolve the mkgroup issue, and if so, how?

I'd like to see your 'cygcheck -srv' output and what 'ls -l /etc/group /etc/passwd' says.
*Attach* the former to your reply when you're ready to look at this issue.

>    Again, thank you so much for your help!

You're welcome.

-- Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple