X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=J2F/pMzJkyKtYHoBnoJXP6JlCWRp6skp7UQXBrbM1jl
	TO8bl3NICOqpEDSQsvgrTBl3T+lB305UYzzcfeb6WxoRTTdRqrsZ7g9MzBt7XY39
	Z0y7mnx/q/t+FuebwpSjMl9OMxxAoYstUWs1lyYv1pRnMplcdUln48jL9/aWjJhE
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 s=default; bh=vn6Ah67Qd7Yi1igvhjim7kHT2/s=; b=ZBB56x9/dwmlwf71o
	yf9Hor0EcmBeFwCdH6GRsOI0qDRFptobrUv+IJ/IaM0AaVY9KEuGVYWZXMKc3Puw
	i/eexktIrQMMrXMsDhbKLh90qfSIdFvcOn13eOqHnJ+a+ZQtElhTIUd7XRSxYoN9
	OOzT5WyLZI6BHdEBJdx+OYJ+NY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=AWL,BAYES_40,KHOP_THREADED,RDNS_NONE autolearn=no version=3.3.1
Message-ID: <52027450.7000906@etr-usa.com>
Date: Wed, 07 Aug 2013 10:22:40 -0600
From: Warren Young <warren AT etr-usa DOT com>
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: Cygwin-L <cygwin AT cygwin DOT com>
Subject: Re: ssh login no longer allowed by local accounts other than main administrator account after taking machine off domain
References: <CABSJGg3HywZZrXNfQHmivJOH0GrySZSBxA95XyjPmcngF6EHFA AT mail DOT gmail DOT com>
In-Reply-To: <CABSJGg3HywZZrXNfQHmivJOH0GrySZSBxA95XyjPmcngF6EHFA@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 8/6/2013 16:50, Yuki Ishibashi wrote:
>
> a) what are the standard permissions *supposed* to be on everything on
> the cygwin terminal-side (i.e. 'ls -l /etc/*', etc),

Unless you existing Cygwin installation is complex, it's probably 
simplest to just rename c:\cygwin to c:\oldcygwin, reinstall, copy /home 
over [*], and manually merge any configuration files in /etc.  The copy 
would fix the permissions on the user data, and the reinstall will fix 
everything else.

I know "reinstall" is a way of giving up, but reinstalling Cygwin isn't 
nearly as bad as reinstalling a complete OS.  It should actually be 
easier than reinstalling some *applications*, since everything's nice 
and collected under c:\cygwin.  You don't have to go digging under 
%USER%\AppData and in the registry to find things, as when attempting a 
clean reinstall of some other apps.

[*] Do a pure file-data-only copy.  Don't use cp -p, or tar/cpio, or 
rsync -a.  You want the copied files to end up owned by the one who did 
the copy.  If multiple users own files under /home, do each section of 
/home separately, as that user.

> d) Do i need to re-sync the mkpasswd -l with /etc/passwd and mkgroup
> -l with /etc/group ? I had previously appended the newly created local
> accounts (with associated SSIDs) to /etc/passwd using something like
> "mkpasswd -l | grep newusername >> etc/passwd" (and something similar
> for the /etc/group)

I would think that when switching between domains and local users -- or 
vice versa for that matter -- you'd want to completely regenerate this 
file.  Then, *maybe*, copy some entries over selectively by hand.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple