X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=vaptzj72OcS5zGisW5wE336QOw+tBQO5GvLqfSWl2LhHNkPhfjdpJ
	o4J400ta3MEqFNzS7tzW1UHe5ejYxGMaQF7i+QL1JVmOMpll55kTV8SFDque4DmI
	/MIUjZ0CtsmjoI8CARrFWhekhoKPeTuDHLRab13skWlj85BRYDeF6o=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=sFw2EebLZ+IqowYuVObg6C0wQTs=; b=v7c/sUMkzXtlWiAk5TDZ8n99MhRR
	0Pd4R2o0r1hYW00r+8gzaWTroaH8pI8jLCre2ZaHdJ0U03M+xzkblsOzf0WY7t6D
	uFuS3FBNYRdz5Ex+UOB3JiTZwFG3Vxam3x4/odJxYG1xqcMK3ntEWzXFTiuG01hu
	DeXOYkxyeGIVn6Q=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Fri, 5 Sep 2014 13:56:48 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Windows Server 2012R2 64bit and 32bit Cygwin sshd
Message-ID: <20140905115648.GC6056@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20140902140751 DOT GD6056 AT calimero DOT vinschen DOT de> <loom DOT 20140902T171114-72 AT post DOT gmane DOT org> <20140902153757 DOT GE6056 AT calimero DOT vinschen DOT de> <loom DOT 20140903T084528-450 AT post DOT gmane DOT org> <loom DOT 20140903T145724-31 AT post DOT gmane DOT org> <20140903133728 DOT GL6056 AT calimero DOT vinschen DOT de> <loom DOT 20140904T130950-773 AT post DOT gmane DOT org> <20140904122845 DOT GU6056 AT calimero DOT vinschen DOT de> <loom DOT 20140904T152825-543 AT post DOT gmane DOT org> <20140905111640 DOT GA6056 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="SqEPCaGsKgsesFh5"
Content-Disposition: inline
In-Reply-To: <20140905111640.GA6056@calimero.vinschen.de>
User-Agent: Mutt/1.5.23 (2014-03-12)

--SqEPCaGsKgsesFh5
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sep  5 13:16, Corinna Vinschen wrote:
> On Sep  4 14:12, Achim Gratz wrote:
> > Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > > > I couldn't start cygserver as a service with (just) the built DLL i=
n place.
> > >=20
> > > No idea why.  The patch just adds debug output to strace ouptput, not=
hing=20
> > > else.
> >=20
> > Whatever.  I've installed all the binaries from that build and things w=
ork
> > normally now.
> >=20
> > > > So I started it in debug mode from the command line (which makes it=
 have
> > > > less rights than it needs) and started the sshd in debug mode also.
> > >=20
> > > In a cyg_server GUI session?  If so, you should have all rights requi=
red
> > > when starting this in an elevated shell.
> >=20
> > Not the token privileges, I don't think so.  But I'm not sure how to ch=
eck.
>=20
> Windows whoami /all
>=20
> > Here's the salient parts from the strace (attaching to the sshd running=
 as a
> > service in sandbox mode, running with no privilege separation produces a
> > slightly different trace, but the events leading up to the error are th=
e same):
> > [...]
> >    44 5026498 [main] sshd 2248 get_user_groups: Before NetUserGetGroups
> > --- Process 2248, exception 00000005 at 75511D4D
> >=20
> > The process apparently gets killed while in the NetUserGetGroups call (=
much
> > as you suspected).  I'm not sure this tells us anything new, though. :-(
>=20
> No, it just confirms it.
>=20
> Please remove the debug_printf patch and try this instead:
>=20
> Index: sec_auth.cc
> [...]

For simplicity I added this experimental patch to the snapshot I just
uploaded to https://cygwin.com/snapshots/.

Please give it a try.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--SqEPCaGsKgsesFh5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=0P5A
-----END PGP SIGNATURE-----

--SqEPCaGsKgsesFh5--