DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=U/YMpb4JwGr8+BKS
	GKjL07PF0+c9Ymg5Zl+ojVi0Nu7rZXULmuxlcaUZPbp/QvyW9UFRFTXBjQrgLhoQ
	W2KjDKE/Qy4r2rmdxKG+CnSiBwJlXBtdYUX7QryKOr7PcTBVm1lnaeCaEKObODNT
	0f9JIc6jhtDw5S6sGzzVIaQQ540=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-id: <53F7A865.6030801@cygwin.com>
Date: Fri, 22 Aug 2014 16:30:29 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Thunderbird/24.7.0
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Windows 7 sshd can only login as cyg_server
References: <53F6459F DOT 5060203 AT prager DOT ws> <20140822130626 DOT GK32314 AT calimero DOT vinschen DOT de> <53F77CAB DOT 4000800 AT cygwin DOT com> <20140822201933 DOT GN32314 AT calimero DOT vinschen DOT de>
In-reply-to: <20140822201933.GN32314@calimero.vinschen.de>
Content-type: text/plain; charset=UTF-8; format=flowed
Content-transfer-encoding: 7bit

On 08/22/2014 04:19 PM, Corinna Vinschen wrote:
> On Aug 22 13:23, Larry Hall (Cygwin) wrote:
>> On 08/22/2014 09:06 AM, Corinna Vinschen wrote:
>>> On Aug 21 15:16, Bernd Prager wrote:
>>>> I just installed cygwin on Windows 7 and configured sshd with
>>>> ssh-host-config.
>>>> I checked all the permission and everything seems to be fine.
>>>>
>>>> I can connect as local user "cyg_server" but not as myself (a standard
>>>> Windows 7 domain user).
>>>> I am asked for a password and then I get:
>>>>
>>>> debug3: packet_send2: adding 48 (len 61 padlen 19 extra_pad 64)
>>>> debug2: we sent a password packet, wait for reply
>>>> debug1: Authentication succeeded (password).
>>>> Authenticated to localhost ([127.0.0.1]:22).
>>>> debug1: channel 0: new [client-session]
>>>> debug3: ssh_session2_open: channel_new: 0
>>>> debug2: channel 0: send open
>>>> debug1: Requesting no-more-sessions AT openssh DOT com
>>>> debug1: Entering interactive session.
>>>> debug2: callback start
>>>> debug2: fd 3 setting TCP_NODELAY
>>>> debug3: packet_set_tos: set IP_TOS 0x10
>>>> debug2: client_session2_setup: id 0
>>>> debug2: channel 0: request pty-req confirm 1
>>>> debug2: channel 0: request shell confirm 1
>>>> debug2: callback done
>>>> debug2: channel 0: open confirm rwindow 0 rmax 32768
>>>> debug1: channel 0: free: client-session, nchannels 1
>>>> debug3: channel 0: status: The following connections are open:
>>>>    #0 client-session (t4 r0 i0/0 o0/0 fd 4/5 cc -1)
>>>>
>>>> Connection to localhost closed by remote host.
>>>>
>>>> In the Windows I see the error event:
>>>>
>>>> sshd: PID 2968: fatal: chown(/dev/pty1, 124683, 10513) failed: Permission
>>>> denied
>>>>
>>>> Can anybody help?
>>>
>>> I'll have to test this, but as a start, can you try to setup
>>> cyg_server as a domain account?  See
>>> https://cygwin.com/faq/faq.html#faq.using.sshd-in-domain
>>
>> I know this is a contradictory report but logging in (pubkey) with my domain
>> user account and local cyg_server actually works fine.  I know. I'm
>> surprised too. ;-)  This is W7 Enterprise and Cygwin 64-bit.
>
> Is your domain account an admin or a non-admin account?

It is a member of local Administrators.

> Today I confused myself a lot by trying it (I'm using a domain cyg_server
> account for years so it was a bit of hacking) and I was able to login
> with a domain admin account but not with a normal domain account.

That's with a local cyg_server running the service?

> I didn't manage to debug this further.  However, what I never encounter is
> a "chown(/dev/ptyX,...) Permission denied" message.

Yeah, me neither.  That's... special. ;-)


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple