X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-1.9 required=5.0 tests=BAYES_00 X-Spam-Check-By: sourceware.org Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Subject: RE: cyglsa lsaauth failure Date: Tue, 20 Apr 2010 16:58:54 -0400 Message-ID: In-Reply-To: <20100420205242.GA26489@proxix.com> References: <20100420205242 DOT GA26489 AT proxix DOT com> From: "Garber, Dave (GE Infra, Energy, Non-GE)" To: X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com http://cygwin.com/ml/cygwin-announce/2010-04/msg00021.html In particular, =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE NOTE Cygwin 1.7.1 or earlier users of LSA authentication using the cyglsa.dll or cyglsa64.dll files *must* replace the old cyglsa DLL with the new one from this package, otherwise LSA authentication will fail with the new 1.7.3 Cygwin DLL. This is unfortunately necessary, but it should be the last time for quite some time. DON'T FORGET TO REBOOT after replacing cyglsa.dll. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=20 Dave=20 -----Original Message----- From: cygwin-owner AT cygwin DOT com [mailto:cygwin-owner AT cygwin DOT com] On Behalf Of Tom Schutter Sent: Tuesday, April 20, 2010 4:53 PM To: cygwin AT cygwin DOT com Subject: cyglsa lsaauth failure I have a machine where cron worked in 1.7.1, but now fails after an upgrade to 1.7.5. Using strace, I have determined that lsaauth succeeded before, but it now fails. This is the strace output from the Cygwin 1.7.1 cron: 50 43500986 [main] cron 2092 cygsidlist::debug_print: -- ende sidlist --- 8503 43509489 [main] cron 2092 lsaauth: 0x67C =3D lsaauth () 251 43509740 [main] cron 2092 load_registry_hive: User registry hive for S-1-5-21-2555220796-769361577-1294736918-8718 already exists This is the strace output from the Cygwin 1.7.5 cron: 38 38536506 [main] cron 2612 cygsidlist::debug_print: -- ende sidlist --- 3901 38540407 [main] cron 2612 lsaauth: LsaLogonUser: 0xC00000F1 47 38540454 [main] cron 2612 seterrno_from_win_error: /ext/build/netrel/src/cygwin-1.7.5-1/winsup/cygwin/sec_auth.cc:1143 windows error 87 42 38540496 [main] cron 2612 geterrno_from_win_error: windows error 87 =3D=3D errno 22 38 38540534 [main] cron 2612 __set_errno: void seterrno_from_win_error(const char*, int, DWORD):319 val 22 276 38540810 [main] cron 2612 lsaauth: 0x0 =3D lsaauth () 70 38540880 [main] cron 2612 seteuid32: lsaauth failed, try create_token. Is there anything else that I can do to diagnose the problem? Is there any way to enable more verbosity/logging in cyglsa? It would be helpful to know when login attempts are being made, if they are successful, what the LsaLoginUser parameters are, and most importantly any information as to why they fail. -- Tom Schutter First American Spatial Solutions 303-440-7272 x6822 512-977-6822 -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple