X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; q=dns; s=default; b=eg
	zYj+p3k6RYChbCJBNMDXfwXgoa+VWvnsnXNO660Mltbp/x9SYtSDBjje6nWK0Mk3
	UtoqyLXmd0K34fAIhnpARlHxByqMpIBUaUZrEagPAhh6Rrf4ggl2ZcbA+VuZ1MQH
	ULCZbL2MhEV6NFr1OfToSxJAxkBnDfgbIbMfCf9sM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; s=default; bh=KjmcyYab
	kcjmwKzGFU2hr0Obj9A=; b=ljY16zrMd+7A+wSso69ffHnaBBSCoEjn+kq+oWZR
	NOSq77EUSkkZRwumAUWL+uJvxEmK6GBQAYbuMAGu38+v2zvlvdowOlPUc6ItUxj0
	B/zy1CtZIE9lQEkV/bdh4Li7oOyTP00txQZ14fGI52iQvJ/QUUmWC6M5/INvpScb
	q2I=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=2.3 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,RDNS_NONE,SPF_PASS,URIBL_BLOCKED autolearn=no version=3.3.2
X-HELO: mail-pd0-f181.google.com
MIME-Version: 1.0
X-Received: by 10.66.146.170 with SMTP id td10mr4044165pab.161.1383748319660; Wed, 06 Nov 2013 06:31:59 -0800 (PST)
In-Reply-To: <20131104120307.GE2731@calimero.vinschen.de>
References: <21110 DOT 44071 DOT 195847 DOT 904212 AT consult DOT pretender>	<20131104120307 DOT GE2731 AT calimero DOT vinschen DOT de>
Date: Wed, 6 Nov 2013 14:31:59 +0000
Message-ID: <CAFO6C=zqgtALj0pc2HnhNMAP7OPzjFHrfUBv3nri6GExJLTLSQ@mail.gmail.com>
Subject: Re: Still confused about cyg_server vs. user id when logging in via ssh
From: Anthony Geoghegan <anthony DOT geoghegan AT gmail DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=UTF-8
X-IsSubscribed: yes

>> My bottom line question is whether there is any way to login via SSH
>> and to get a shell with true ADMINISTRATOR privileges so that there is
>> no difference between a SSH log in and a local login... at a minimum
>> is there any way to get subinacl to work right.
>
> http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-logonuser

I spent ages wrestling with similar issues. I found running `mkpasswd
-c` a useful way to see which Windows user I'm logged in as. It took a
lot of experimentation to realise that I was only logged in with the
permissions of my Windows user if I disabled SSH keys and used my
account password to authenticate. After much research, I found all the
relevant answers in the documentation that Corinna linked to - though
I had to read it twice to fully understand it (I've only recently
started to learn about Windows' authentication and security
processes).

Regards,
Anthony Geoghegan

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple