X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=3.4 required=5.0 tests=AWL,BAYES_00,BOTNET,RCVD_IN_DNSWL_NONE X-Spam-Check-By: sourceware.org Message-id: <4C06DC4D.7040005@cygwin.com> Date: Wed, 02 Jun 2010 18:33:49 -0400 From: "Larry Hall (Cygwin)" Reply-to: cygwin AT cygwin DOT com User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.21) Gecko/20090320 Remi/2.0.0.21-1.fc8.remi Lightning/0.9 Thunderbird/2.0.0.21 Mnenhy/0.7.5.0 MIME-version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: Different user environment for key vs password authentication References: In-reply-to: Content-type: text/plain; charset=UTF-8; format=flowed Content-transfer-encoding: 7bit Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On 6/2/2010 6:13 PM, Jaynna Sims wrote: > > Hi, > We are having problems doing registry updates and installing software via ssh > using key authentication but it works using password authentication. We > noticed that some of the environment variables have different values > depending on the authentication type, for example TMP, TEMP, USERNAME. With > key authentication, these values are for the user that the sshd service is > running as. With password authentication, these values are for the user that > is connecting as. Can someone explain in a bit of detail what happens at > login for key and password authentication? It seems we need to get the same > environment loaded for password authentication to load for key authentication > so we are trying to figure out how to make this happen by understanding what > is actually happening. Turning on debug for our ssh server did not yield any > useful information. And sorry but right now I don't have access to the > server so I'm hoping that someone can give insight into how the different > authentication load their respective environments without needing more > detail. I can say that the privilege separation is turned on. -- Larry Hall http://www.rfk.com RFK Partners, Inc. (508) 893-9779 - RFK Office 216 Dalton Rd. (508) 893-9889 - FAX Holliston, MA 01746 _____________________________________________________________________ A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting annoying in email? -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple