X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=j7toMBK5xb3HhhQVntvizJ63SgHTF9GoQ2MrP2pbU3y1sLF4ZxBYm
	WjnsGV3OJpNSA2ZIs+qaZEK70uW2czZKd8Hbjb/1wfRru3dk1cSctEM3DQ0ofWc0
	S49cYVQjH/baXROnlo2KROZxxIBHAJ1ZeXcapdyKD6HOkaQgVdo8MM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=fFYnQTVHQfz6OmyjP3Rb+3pqhl0=; b=MHJXq+crbDKgVQsyrWGgWWvI4zDn
	kNW7V2yjDDnQ2jSGIVTEMJsIXHQAZMpt6EPZIgEnVzaWR5ZZgmFPmDDX6UuIvNP1
	/sWqLu5Q7DoQU+bB4IpPrJScEyLLxusJuXhWLVXhiv0NtrVeakVVgXE9sN5kBG/V
	qp8Nh0dAFeEQDGc=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00,EXCEL_ATTACHED autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Fri, 22 Aug 2014 22:44:02 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Windows 7 sshd can only login as cyg_server
Message-ID: <20140822204402.GP32314@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <53F6459F DOT 5060203 AT prager DOT ws> <20140822130626 DOT GK32314 AT calimero DOT vinschen DOT de> <53F77CAB DOT 4000800 AT cygwin DOT com> <20140822201933 DOT GN32314 AT calimero DOT vinschen DOT de> <53F7A865 DOT 6030801 AT cygwin DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="XLsjFikA86nwwlhe"
Content-Disposition: inline
In-Reply-To: <53F7A865.6030801@cygwin.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--XLsjFikA86nwwlhe
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug 22 16:30, Larry Hall (Cygwin) wrote:
> On 08/22/2014 04:19 PM, Corinna Vinschen wrote:
> >On Aug 22 13:23, Larry Hall (Cygwin) wrote:
> >>On 08/22/2014 09:06 AM, Corinna Vinschen wrote:
> >>>On Aug 21 15:16, Bernd Prager wrote:
> >>>>sshd: PID 2968: fatal: chown(/dev/pty1, 124683, 10513) failed: Permis=
sion
> >>>>denied
> >>>>
> >>>>Can anybody help?
> >>>
> >>>I'll have to test this, but as a start, can you try to setup
> >>>cyg_server as a domain account?  See
> >>>https://cygwin.com/faq/faq.html#faq.using.sshd-in-domain
> >>
> >>I know this is a contradictory report but logging in (pubkey) with my d=
omain
> >>user account and local cyg_server actually works fine.  I know. I'm
> >>surprised too. ;-)  This is W7 Enterprise and Cygwin 64-bit.
> >
> >Is your domain account an admin or a non-admin account?
>=20
> It is a member of local Administrators.

That's what I meant.  Do you have a non-admin account for testing
a login?

> >Today I confused myself a lot by trying it (I'm using a domain cyg_server
> >account for years so it was a bit of hacking) and I was able to login
> >with a domain admin account but not with a normal domain account.
>=20
> That's with a local cyg_server running the service?

Yes, sorry for not being clearer.  That was the hacky part.  It required
to change the domain policy and stuff like that.

> >I didn't manage to debug this further.  However, what I never encounter =
is
> >a "chown(/dev/ptyX,...) Permission denied" message.
>=20
> Yeah, me neither.  That's... special. ;-)

...and a bit incomprehensible :(


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--XLsjFikA86nwwlhe
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=rI3C
-----END PGP SIGNATURE-----

--XLsjFikA86nwwlhe--