Message-id: <4E5E777B.6060700@cygwin.com>
Date: Wed, 31 Aug 2011 14:03:39 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: sshd win2003 CYGWIN_NT-5.2 1.7.7(0.230/5/3)
References: <0087189622C8E440B0568619CF342A0B29A8C7 AT x2008mb2 DOT infoblox DOT com>
In-reply-to: <0087189622C8E440B0568619CF342A0B29A8C7@x2008mb2.infoblox.com>
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com

On 8/26/2011 11:08 AM, Drew Patten wrote:
> # ls -ld /var/empty
> drwxr-xr-x+ 1 cyg_server root 0 Mar  9 14:39 /var/empty
>
> # ls -ld /etc/ssh*
> -rw-r--r-- 1 ????????   root 1555 Aug 26 07:56 /etc/ssh_config
> -rw------- 1 cyg_server None  668 Mar  9 14:39 /etc/ssh_host_dsa_key
> -rw-r--r-- 1 cyg_server None  613 Mar  9 14:39 /etc/ssh_host_dsa_key.pub
> -rw------- 1 frtest     root  227 Aug 25 14:48 /etc/ssh_host_ecdsa_key
> -rw-r--r-- 1 frtest     root  178 Aug 25 14:48 /etc/ssh_host_ecdsa_key.pub
> -rw------- 1 cyg_server None  988 Mar  9 14:39 /etc/ssh_host_key
> -rw-r--r-- 1 cyg_server None  653 Mar  9 14:39 /etc/ssh_host_key.pub
> -rw------- 1 cyg_server None 1675 Mar  9 14:39 /etc/ssh_host_rsa_key
> -rw-r--r-- 1 cyg_server None  405 Mar  9 14:39 /etc/ssh_host_rsa_key.pub
> -rw-r--r-- 1 ????????   root 3185 Aug 26 07:56 /etc/sshd_config
>
> # cat /var/log/sshd.log
> /var/empty must be owned by root and not group or world-writable.

Have you compared ownerships between working and non-working machines?
Absent that (or assuming that doesn't yield results for some reason),
I'd recommend changing the owners of '/etc/ssh_config' and
'/etc/sshd_config' to 'cyg_server' (my group for these files is 'None'
but I doubt that's of any significance.)  Check '/var/empty' with
'getfacl'.  Mine reads this way:

$ getfacl /var/empty
# file: /var/empty
# owner: cyg_server
# group: root
user::rwx
group::r-x
group:SYSTEM:rwx
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple