X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.3 required=5.0 	tests=AWL,BAYES_00
X-Spam-Check-By: sourceware.org
To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Subject: Additional information: Cygwin/OpenSSH authentication without applying  group policies...
X-KeepSent: C3D8DE63:89D05670-C1257656:0024C5D5;  type=4; name=$KeepSent
Message-ID: <412_1256107411_4ADEAD93_412_120_1_OFC3D8DE63.89D05670-ONC1257656.0024C5D5-C1257656.0024EFCD@nbg.sdv.spb.de>
From: Carsten DOT Porzler AT spb DOT de
Date: Wed, 21 Oct 2009 08:43:42 +0200
X-SafeGuard_MailGateway: Version: 5.60.3.9732 SGMG Date: 20091021064331Z
Content-Type: text/plain; charset="US-ASCII"
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

cygwin-owner AT cygwin DOT com schrieb am 21.10.2009 08:39:40:

> [Bild entfernt] 
> 
> Cygwin/OpenSSH authentication without applying group policies...
> 
> Carsten.Porzler 
> 
> an:
> 
> cygwin
> 
> 21.10.2009 08:40
> 
> Gesendet von:
> 
> cygwin-owner AT cygwin DOT com
> 
> Dear Cygwin community,
> 
> we are just having problems with some locations connect over WAN lines 
> with only little bandwith.
> 
> The logon process against a Win2003 AD domain controller takes much time 

> (>50s). After some analysis we found out that there is much traffic 
> between the SSH server and the domain controller over ip port 1026 (CAP, 

> used for applying/downloading the Win2003 group policies).
> 
> During a SSH logon it is not necessary to apply all group policies. 
> Instead it would be OK, if the user would just be authenticated and get 
> his group memberships.
> 
> Is it possible to deactivate applying the group policies during the SSH 
> logon process or to reconfigure the SSH service so that we can use LDAP 
> authentication instead of standard Win2003 authentication.
> 
> Thanks in advance for some hints and 
> 
> best regards
> 
> Carsten Porzler
> 

We are using 

Cygwin V.1.7.0(0.200/5/3) 2009-02-20 17:20

and OpenSSH

OpenSSH_5.1p1, OpenSSL 0.9.8j 07 Jan 2009

Best regards

Carsten Porzler


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple