DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type:content-transfer-encoding; q=dns; s=default; b=Vre
	u8r0X25cvI2rw+iSfZPSY42t/LpC4+qt1ARV9RluP22P7TPFfR9yqnl5ZuycitH/
	3U4fiDCaZhxkYwV4FV3Pe8hRNJ3aNlRRGqLWSbZSnoFL3zymN7TAFy57/C57OvVc
	+3BuU4ztZpoiMdJbRTPjXUhfWHF8XXjqoak7IW80=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <54E7C402.80306@intersystems.com>
Date: Fri, 20 Feb 2015 18:32:18 -0500
From: Len Giambrone <Leonard DOT Giambrone AT intersystems DOT com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: <cygwin AT cygwin DOT com>
Subject: bug in csih?
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit

Running the latest version:

$ cygcheck -c cygwin openssh csih
Cygwin Package Information
Package              Version        Status
csih                 0.9.8-5        OK
cygwin               1.7.34-6       OK
openssh              6.7p1-2        OK

When I run

    ssh-host-config -y -w XXXXX


I get this:

*** Query: Create new privileged user account 'WX64LG\cyg_server' 
(Cygwin name: 'cyg_server')? (yes/no) yes
*** Info: User 'cyg_server' has been created with password 'XXXXX'.
*** Info: If you change the password, please remember also to change the
*** Info: password for the installed services which use (or will soon use)
*** Info: the 'cyg_server' account.

*** Warning: Expected privileged user 'cyg_server' does not exist.
*** Warning: Defaulting to 'SYSTEM'

Even though it successfully creates the account, it refuses to use it.  
I believe this is because of the following code in 
csih_service_should_run_as()

     if csih_privileged_account_exists "$csih_PRIVILEGED_USERNAME" 1>&2
     then
       # it already existed before this script was launched
       echo "$csih_PRIVILEGED_USERNAME"
       return
     elif /usr/bin/getent passwd "${csih_PRIVILEGED_USERNAME}" 
 >/dev/null 2>&1
     then
       # we probably just created it
       echo "$csih_PRIVILEGED_USERNAME"
       return
     else
       # a failure somewhere
       csih_warning "Expected privileged user 
'${csih_PRIVILEGED_USERNAME}' does not exist." 1>&2
       csih_warning "Defaulting to 'SYSTEM'" 1>&2
       echo "SYSTEM"
       return
     fi

I am on a machine in a domain.  /usr/bin/getent passwd cyg_server 
returns nothing:
$ getent passwd cyg_server

Even though it exists:

$ net user cyg_server
User name                    cyg_server
Full Name                    Privileged server
Comment                      <cygwin home="/var/empty" shell="/bin/false"/>
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            2/20/2015 6:18:39 PM
Password expires             Never
Password changeable          2/20/2015 6:18:39 PM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory               C:\cygwin\var\empty
Last logon                   Never

Logon hours allowed          All

Local Group Memberships      *Administrators       *Users
Global Group memberships     *None
The command completed successfully.

Running it through strace, I see it's looking for DOMAIN\cyg_server, and 
not the local account.


-- 
-Len

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple