X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-2.1 required=5.0	tests=AWL,BAYES_00,KHOP_RCVD_UNTRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD,SPF_NEUTRAL,TW_PG
X-Spam-Check-By: sourceware.org
Message-ID: <511D602E.805@cs.utoronto.ca>
Date: Thu, 14 Feb 2013 17:07:42 -0500
From: Ryan Johnson <ryan DOT johnson AT cs DOT utoronto DOT ca>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: sshd fails to start: logon failure
References: <511D4C70 DOT 30508 AT cs DOT utoronto DOT ca> <511D4EA8 DOT 1060202 AT gmail DOT com> <511D50FA DOT 9010304 AT cs DOT utoronto DOT ca> <511D54D3 DOT 4070300 AT cygwin DOT com>
In-Reply-To: <511D54D3.4070300@cygwin.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 14/02/2013 4:19 PM, Larry Hall (Cygwin) wrote:
> On 2/14/2013 4:02 PM, Ryan Johnson wrote:
>> On 14/02/2013 3:52 PM, marco atzeri wrote:
>>> On 2/14/2013 9:43 PM, Ryan Johnson wrote:
>>>> Hi all,
>>>>
>>>> I tried to ssh to my cygwin box today and was unable to connect. It
>>>> seems the sshd service can no longer run, for reasons that mystify me:
>>>>> # net start sshd
>>>>> System error 1069 has occurred.
>>>>>
>>>>> The service did not start due to a logon failure.
>>>>
>>>> I wasn't aware of having changed anything; would it be advisable to 
>>>> just
>>>> reinstall sshd from setup.exe and/or sshd_host_config, or is there 
>>>> some
>>>> simple troubleshooting I might do?
>>>
>>> reinstall is not the way.
>>> Likely something reset the cyg_server privileges.
>>> Try to re-enable them with
>>>
>>> editrights -u cyg_server -a SeAssignPrimaryTokenPrivilege
>>> editrights -u cyg_server -a SeCreateTokenPrivilege
>>> editrights -u cyg_server -a SeTcbPrivilege
>>> editrights -u cyg_server -a SeServiceLogonRight
>>> editrights -u cyg_server -a SeIncreaseQuotaPrivilege
>> No luck, the same error still occurs. However, now that you mention 
>> it, I
>> did play with cygserver settings while trying to install pgsql a 
>> while back.
>>
>> Is there a way to view the privileges to see what I may have broken?
>
> $ editrights -u cyg_server -l
> SeAssignPrimaryTokenPrivilege
> SeCreateTokenPrivilege
> SeTcbPrivilege
> SeServiceLogonRight
> SeDenyRemoteInteractiveLogonRight
Mine has all those, plus SeIncreaseQuotaPrivilege (possibly thanks to 
the above from Marco).

It seems that I managed to de-configure sshd somehow. There's no 
sshd_config in /etc/ (just the skeleton in /etc/defaults/), and 
sshd-host-config doesn't seem to exist, either. So, I blew away the sshd 
and cygrunsrv services and their associated users and re-ran 
ssh-host-config. All is well now... except that now an enormous ascii 
art hippo greets me at login. Ick.

Thanks,
Ryan


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple