Message-id: <4B8411E4.6040400@cygwin.com>
Date: Tue, 23 Feb 2010 12:35:32 -0500
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.21) Gecko/20090320  Remi/2.0.0.21-1.fc8.remi Lightning/0.9 Thunderbird/2.0.0.21 Mnenhy/0.7.5.0
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: ssh problem using publickey in domain environment
References: <096385baeda76b4b83f591937a5e50b1f5f81434 AT localhost>
In-reply-to: <096385baeda76b4b83f591937a5e50b1f5f81434@localhost>
Content-type: text/plain; charset=UTF-8; format=flowed
Content-transfer-encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com

On 02/23/2010 12:01 PM, Jukka Inkeri wrote:
> If your server is member of domain, howto make users, sshd, (which
> order) ... without setuid problem when using publickey auth ? cyg_server
> and sshd - domain user or local or both, ???

In order for the SSH server to switch user context to a domain user,
the service's user (cyg_server) must be a domain user with the rights
outlined in 'ssh-host-config'.  I'm not sure if it's a requirement that
the 'sshd' user also be a domain user.  I've never played with that.

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple