X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; q=dns; s=default; b=kY+Zv 6IFmeSBEtJBA6k80Q9PGv12GbNCWMSCumFa/B7MNKWW+MpakOA1EHOLm0hZDXv3T VSqQMvtYdB+OsCn+PVHnvUj8OIWuRVUIGtOwpmpo9NVWGz+IFa2IXs0VWiU4VNLV muDij4i2zj1pV5qVK7p8Wo6GecaZT1EJqD2Wt8= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; s=default; bh=iIxbMiBasJt lKEQQXcDl+4kR4ts=; b=yS6l3nyIMxqppa4aHI1EOVFRIZHOaAwU+GHRMvPjJY2 +kJsH+CQJM6igW7kQqmIrCufign5pUWlhMG1MkCIeSqV7s6qKZaurmu+IKTQGRqu 96C7+TAftF+Jvft2ZNHTrVYxNtc/b9pPoXza4XMNNknAeLwTlNExdcBcX1Quy+1g = Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-6.0 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 X-HELO: mail-in-01.arcor-online.net X-DKIM: Sendmail DKIM Filter v2.8.2 mail-in-13.arcor-online.net 7A915212368 From: Achim Gratz To: cygwin AT cygwin DOT com Subject: Re: Windows Server 2012R2 64bit and 32bit Cygwin sshd References: <8761hphfps DOT fsf AT Rainer DOT invalid> <20140902140751 DOT GD6056 AT calimero DOT vinschen DOT de> <20140902153757 DOT GE6056 AT calimero DOT vinschen DOT de> Date: Tue, 02 Sep 2014 19:32:19 +0200 In-Reply-To: <20140902153757.GE6056@calimero.vinschen.de> (Corinna Vinschen's message of "Tue, 2 Sep 2014 17:37:57 +0200") Message-ID: <87iol6q670.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.93 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain Corinna Vinschen writes: > Don't use privilege separation, then the non-privileged sshd user won't > matter at all. Privsep on Cygwin is only half-useful on Cygwin anyway, > if at all. As for the local cyg_server account, I'm not sure. Usually, > a local machine account has no or only limited access to AD information. > As an account which needs AD to get user information it's a bit > unfortunate if it doesn't have access. Unless it's possible to set these rights depending on whether a 32bit or a 64bit process is run by the user I don't see how this would come into play. As I said, it's the exact same user and the exact same setup for both 64bit and 32bit. >> Did the strace I sent you give any clue (I can make >> one again if that helps) because it seems that everything just works out as >> it should until the fork that should start the command given to ssh. > > The strace shows that it doesn't even *try* to start bash, but it's > entirely unclear why. See my other mail, not that it elucidates the reason, but I think I've pinpointed where it happens now. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Factory and User Sound Singles for Waldorf rackAttack: http://Synth.Stromeko.net/Downloads.html#WaldorfSounds -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple