X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=2.0 required=5.0 tests=AWL,BAYES_00,BOTNET,KHOP_THREADED,RCVD_IN_DNSWL_NONE,RCVD_IN_HOSTKARMA_NO,RCVD_IN_HOSTKARMA_YE,TW_PG X-Spam-Check-By: sourceware.org Message-id: <511D7885.8080401@cygwin.com> Date: Thu, 14 Feb 2013 18:51:33 -0500 From: "Larry Hall (Cygwin)" Reply-to: cygwin AT cygwin DOT com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: sshd fails to start: logon failure References: <511D4C70 DOT 30508 AT cs DOT utoronto DOT ca> <511D4EA8 DOT 1060202 AT gmail DOT com> <511D50FA DOT 9010304 AT cs DOT utoronto DOT ca> <511D54D3 DOT 4070300 AT cygwin DOT com> <511D602E DOT 805 AT cs DOT utoronto DOT ca> In-reply-to: <511D602E.805@cs.utoronto.ca> Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Note-from-DJ: This may be spam On 2/14/2013 5:07 PM, Ryan Johnson wrote: > On 14/02/2013 4:19 PM, Larry Hall (Cygwin) wrote: >> On 2/14/2013 4:02 PM, Ryan Johnson wrote: >>> On 14/02/2013 3:52 PM, marco atzeri wrote: >>>> On 2/14/2013 9:43 PM, Ryan Johnson wrote: >>>>> Hi all, >>>>> >>>>> I tried to ssh to my cygwin box today and was unable to connect. It >>>>> seems the sshd service can no longer run, for reasons that mystify me: >>>>>> # net start sshd >>>>>> System error 1069 has occurred. >>>>>> >>>>>> The service did not start due to a logon failure. >>>>> >>>>> I wasn't aware of having changed anything; would it be advisable to just >>>>> reinstall sshd from setup.exe and/or sshd_host_config, or is there some >>>>> simple troubleshooting I might do? >>>> >>>> reinstall is not the way. >>>> Likely something reset the cyg_server privileges. >>>> Try to re-enable them with >>>> >>>> editrights -u cyg_server -a SeAssignPrimaryTokenPrivilege >>>> editrights -u cyg_server -a SeCreateTokenPrivilege >>>> editrights -u cyg_server -a SeTcbPrivilege >>>> editrights -u cyg_server -a SeServiceLogonRight >>>> editrights -u cyg_server -a SeIncreaseQuotaPrivilege >>> No luck, the same error still occurs. However, now that you mention it, I >>> did play with cygserver settings while trying to install pgsql a while back. >>> >>> Is there a way to view the privileges to see what I may have broken? >> >> $ editrights -u cyg_server -l >> SeAssignPrimaryTokenPrivilege >> SeCreateTokenPrivilege >> SeTcbPrivilege >> SeServiceLogonRight >> SeDenyRemoteInteractiveLogonRight > Mine has all those, plus SeIncreaseQuotaPrivilege (possibly thanks to the > above from Marco). > > It seems that I managed to de-configure sshd somehow. There's no sshd_config > in /etc/ (just the skeleton in /etc/defaults/), and sshd-host-config doesn't > seem to exist, either. So, I blew away the sshd and cygrunsrv services and > their associated users and re-ran ssh-host-config. All is well now... except > that now an enormous ascii art hippo greets me at login. Ick. Just be glad the hippo isn't flying! ;-) Or you could change/remove /etc/motd. -- Larry _____________________________________________________________________ A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting annoying in email? -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple