X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=j4BADOg5apyaNRxptfolz3GSvABdjH4+8ycH0GLIOWisjLfLGBuUq
	p8KItC1TImvFi5f3AbsJXkz3NetfOz1GB9MTwIKrsX2II2ejn2FytqihrPFMDtlN
	EErdjCc0WX2f2t0U4BwI+Umu0XAP9bBnf6Bl0rRJtUAeGq/CNuej8w=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=TW30fwjOi2LSDN9ME5sYQxyVnf4=; b=nW5/H99e8Mr+wquNgW8v9WRKTK4+
	EyLK8Q3AglwEVWCrh0j03uSw52iRaDl4/td52B5pZnzkTCP8RYPf1qFebqd1rRPy
	v4pOG4hk++/A12mXdyWjEnfd2uRgBBWOFZnYI2WaGTB7ZeerJ/KtDZmhySI24Epr
	8jJAXXJJjRDy+oM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Wed, 7 Jan 2015 18:25:31 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: SSHd configuration problems (System error 1376)
Message-ID: <20150107172531.GA4190@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <1418434328946-113637 DOT post AT n5 DOT nabble DOT com> <548C3162 DOT 6040500 AT cornell DOT edu> <5499711C DOT 6060500 AT nokia DOT com> <54998980 DOT 4080801 AT cornell DOT edu> <54A10DBF DOT 6010507 AT nokia DOT com> <54A1517B DOT 4080802 AT cornell DOT edu> <54A1600F DOT 7060700 AT nokia DOT com> <54A1819B DOT 9090204 AT cornell DOT edu>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="VbJkn9YxBvnuCH5J"
Content-Disposition: inline
In-Reply-To: <54A1819B.9090204@cornell.edu>
User-Agent: Mutt/1.5.23 (2014-03-12)

--VbJkn9YxBvnuCH5J
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Dec 29 11:30, Ken Brown wrote:
> On 12/29/2014 9:07 AM, Ilya Dogolazky wrote:
> > Hi Ken!
> >=20
> > I followed your advise:
> > 1) Reinstalled windows again
> > 2) Started setup_x86-64.exe from cygwin web site
> > 3) Changed two things in the package list:
> >   a) Changed version of package cygwin to 1.7.34.003
> >   b) Marked package "ssh" to be installed
> > 4) After installation started terminal (icon right click -> run as admi=
n)
> > 5) Typed "ssh-host-config -y"
> > 6) Copied the output and attached to this e-mail
> >=20
> > The same problem as before:
> >    System error 1376 has occurred.
> >    The specified local group does not exist.
> >    Adding user 'cyg_server' to local group 'root' failed!
> >=20
> > :-(
> >=20
> > By the way, very first message is quite funny: "it seems your account d=
oes not=20
> > have these privileges". According to windows UI my account (the only on=
e on this=20
> > fresh installed machine) is an administrative one.
>=20
> > $ ssh-host-config -y
> >=20
> > *** Warning: Running this script typically requires administrator privi=
leges!
> > *** Warning: However, it seems your account does not have these privile=
ges.
> > *** Warning: Here's the list of groups in your user token:
> >=20
> >     None
> >     root
> >     Users
>=20
> This output comes from the following code, starting at line 619:
>=20
> # Make sure the user is running in an administrative context
> admin=3D$(/usr/bin/id -G | /usr/bin/grep -Eq '\<544\>' && echo yes || ech=
o no)

You shouldn't discuss stuff like that when I'm on vacation :)

The aforementioned message is a result of a change in how the function
underlying `id' works.

For a start, the "root" group is created and added to the default
/etc/group file by the base-cygwin package.  I don't remember why we did
that in the first place, but given that /etc/group goes away, so will
the faked "root" group.  The next base-cygwin package will not generate
/etc/passwd or /etc/group file anymore anyway.

Assuming you have a "root" group in /etc/group (usually if you never
regenerated /etc/group), then `id' under 1.7.33 and earlier prints
*both* gids, 0 and 544.  Starting with 1.7.34 it only prints the first
group matching the S-1-5-32-544 SID, which is "0" with the default
/etc/group.

The old getgroups iterated through the groups from /etc/groups, and then
checked for each group if its SID is available in the user's token.

This behaviour only makes sense if there is a self-contained list of
groups in memory.  But the new code doesn't read all of /etc/group, or,
worse, all groups from the Windows account DB.  So the new, more logical
behaviour is to iterate over the groups in the user's token and then
checking for (or generating) a group entry for the SID.  So, in contrast
to the old code, the new code only generates a single group entry per
SID.

I hope we can get over that without having to tweak the ssh-host-config
script to explicitely check for a 0 gid...


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--VbJkn9YxBvnuCH5J
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=tqZj
-----END PGP SIGNATURE-----

--VbJkn9YxBvnuCH5J--