Message-id: <511D54D3.4070300@cygwin.com>
Date: Thu, 14 Feb 2013 16:19:15 -0500
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: sshd fails to start: logon failure
References: <511D4C70 DOT 30508 AT cs DOT utoronto DOT ca> <511D4EA8 DOT 1060202 AT gmail DOT com> <511D50FA DOT 9010304 AT cs DOT utoronto DOT ca>
In-reply-to: <511D50FA.9010304@cs.utoronto.ca>
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com

On 2/14/2013 4:02 PM, Ryan Johnson wrote:
> On 14/02/2013 3:52 PM, marco atzeri wrote:
>> On 2/14/2013 9:43 PM, Ryan Johnson wrote:
>>> Hi all,
>>>
>>> I tried to ssh to my cygwin box today and was unable to connect. It
>>> seems the sshd service can no longer run, for reasons that mystify me:
>>>> # net start sshd
>>>> System error 1069 has occurred.
>>>>
>>>> The service did not start due to a logon failure.
>>>
>>> I wasn't aware of having changed anything; would it be advisable to just
>>> reinstall sshd from setup.exe and/or sshd_host_config, or is there some
>>> simple troubleshooting I might do?
>>
>> reinstall is not the way.
>> Likely something reset the cyg_server privileges.
>> Try to re-enable them with
>>
>> editrights -u cyg_server -a SeAssignPrimaryTokenPrivilege
>> editrights -u cyg_server -a SeCreateTokenPrivilege
>> editrights -u cyg_server -a SeTcbPrivilege
>> editrights -u cyg_server -a SeServiceLogonRight
>> editrights -u cyg_server -a SeIncreaseQuotaPrivilege
> No luck, the same error still occurs. However, now that you mention it, I
> did play with cygserver settings while trying to install pgsql a while back.
>
> Is there a way to view the privileges to see what I may have broken?

$ editrights -u cyg_server -l
SeAssignPrimaryTokenPrivilege
SeCreateTokenPrivilege
SeTcbPrivilege
SeServiceLogonRight
SeDenyRemoteInteractiveLogonRight


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple