X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=0.8 required=5.0 tests=BAYES_40,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SARE_MSGID_LONG45,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: sourceware.org MIME-Version: 1.0 Date: Thu, 15 Apr 2010 21:09:26 +1000 Message-ID: Subject: Cygwin 1.7 Windows 7/2008 Public key intermittent problem From: shane fenton To: cygwin AT cygwin DOT com Content-Type: text/plain; charset=ISO-8859-1 X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Note-from-DJ: This may be spam Hi, I have about 8 machines experiencing problems while trying to use passwordless public key authentication, via passwd -R. Happening on W7, w2k8, x86 & x64 sshd running on all as a domain user, with the correct local security policy changes made, and /var/empty owner by sshd user etc. pub key auth always works for the user sshd is been run as, but not any other user - connection closed by... error - windows event log does show sshd pid xxx fatal initgroups permission denied error If I reboot any of the above, generally passwordless pub key auth doesn't work - if I then rdp to windows machine, login as another user, log out - I can then ssh using keys to that machine as the user I RDP'd as - until it gets rebooted again. And then - after several more reboots - without any changes been made on the machines - I can use keys to login to the machine as any user successfully - until it gets rebooted and reverts to the usual problem I have tried installing cyglsa - but after installing and rebooting - I don't notice any difference - although I'm unsure if there is something else needed for cyglsa to function or is adding the users to the passwd/groups sufficient? Thanks for any suggestions - the fact that it intermittently works is baffling me.... Cheers Shane -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple