X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.8 required=5.0	tests=AWL,BAYES_00,RP_MATCHES_RCVD,SPF_HELO_PASS
X-Spam-Check-By: sourceware.org
To: cygwin AT cygwin DOT com
From: Andrew Schulman <schulman DOT andrew AT epamail DOT epa DOT gov>
Subject: Re: admin privileges when logging in by ssh?
Date: Sun, 11 Sep 2011 21:07:12 -0400
Lines: 27
Message-ID: <a3mq67l0qniptng808d8perkarqpeupduc@4ax.com>
References: <rg0q679hpajl00ujv34jtmavsanhpb6n2t AT 4ax DOT com> <jcbq67lml6l3qfvm5ukb6fbtcliq0kb7ee AT 4ax DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Archive: encrypt
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

> > When a user with administrative privileges logs in to sshd, it seems that the user is only granted
> > standard user privileges for that session.  Is there a way around that?  How can I get the admin
> > privileges for that session?
> 
> Nevermind.  I found the answer from Corinna way back in 2004:
> http://cygwin.com/ml/cygwin/2004-09/msg00087.html.  "The bottom line is, if you need all the user's
> access rights use password authentication.  If that doesn't help, you're out of luck."

Continuing my conversation with myself...

The above is half right.  It seems that I have to log in by password
authentication, and then authenticate again to UAC, before I get my admin
rights.  

At the console that's how it works:  I log in as the backup user, ask for admin
rights, authenticate again to UAC, and then, finally, can read or write any file
on the system.

In sshd, I log in by password authentication, but now I'm stuck because I don't
know a command-line program to authenticate to UAC.  Without that, I don't have
any admin rights.

So:  Is there a command-line program that will allow me to authenticate to UAC?
And do I have this right?

Thanks,
Andrew.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple