X-Recipient: archive-cygwin AT delorie DOT com X-Spam-Check-By: sourceware.org Date: Fri, 25 May 2012 11:39:20 +0200 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: Seteuid "operation not permitted" error when using LSA for sshd Message-ID: <20120525093920.GC4225@calimero.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On May 25 10:15, Mark Pattie wrote: > Hi all, > > I have installed Cygwin and am running sshd successfully. The > permission required for the sshd service account "create a token > object" is not permitted to be granted to any accounts in my > organization. As such I have decided to use LSA based on Method 2 on > the following page: http://cygwin.com/cygwin-ug-net/ntsec.html. > > I had succesfully tested ssh authentication with a public/private > certificate pair prior to running /usr/bin/cyglsa-config to install > LSA. I ran the script, removed the "create a token object" permission > and rebooted the server. Now I cannot authenticate using the > public/private keys. I receive the following error in the Windows > event log: > > sshd: PID 2780: fatal: seteuid 1003: Operation not permitted > > When I add the permission back to the service account and restart sshd > the public/private key authentication works again > > Any help would be great Does the account have TCB rights? That's required to run LSA auth. Same for method 3, btw. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple