X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:to:subject:message-id:reply-to :references:mime-version:content-type:in-reply-to; q=dns; s= default; b=mvMmWljfAqZfl4Ol9QADyO4ydhxBksraAmPq2klbrG9j+mRW5nWxw Sae9FCiw1lfncs84DI8DQZ2k8kC8GNEMoOWR0ixiq4pU4Mi/ulblrULx0U7afenL xE+80nmQ4l6SNd17/vtYvmJViu9rXESyNjamdZHXRPYanaU9qkWUWk= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:to:subject:message-id:reply-to :references:mime-version:content-type:in-reply-to; s=default; bh=Ozz/85L2P4myWhRgmZ2AUMQq+JM=; b=G0BvsqYxMYRu9pWrOQs7mWOCqWI9 Rmy67vzM406/sfmexAW3qIRFW9dogciTnItWDwfgvDgic8inPKlCWotS5t7wM24x wDRB3O5EzkjgflYqwIkE4th4hQXMbedpbHaQNoU8Cw4CLzfWlzHScQezxEvCzuBH lC2fshNpBfgNxjE= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.0 required=5.0 tests=AWL,BAYES_20 autolearn=ham version=3.3.2 X-HELO: calimero.vinschen.de Date: Wed, 11 Mar 2015 12:17:29 +0100 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: Non-privileged use can't logon Message-ID: <20150311111729.GW5732@calimero.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: <003601d05be4$d2574470$7705cd50$@rockliff AT bigpond DOT com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Ln+iIw7POnzHEEo5" Content-Disposition: inline In-Reply-To: <003601d05be4$d2574470$7705cd50$@rockliff@bigpond.com> User-Agent: Mutt/1.5.23 (2014-03-12) --Ln+iIw7POnzHEEo5 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mar 11 18:19, Max Rockliff wrote: > Hi, >=20 > I'm raising this question again, after having removed CYGWIN SSHD and > resinstalled. >=20 > I am unable to execute an SSH @localhost. I am prompted for the > password and successfully logged on, only to receive an error message (see > below) and the session closed immediately. >=20 > Error Message: > 1 [main] sshd 8284 C:\cygwin\usr\sbin\sshd.exe: *** fatal error - unable = to > load C:\Windows\system32\userenv.dll, Win32 error 1114 > Connection to localhost closed. We saw this error on and off for a couple of years and it was never quite clear what the underlying problem is, given that we have no way to check what the DLLs are doing. In some cases changing cyg_server to a domain account fixed the problem, but that's obviously not your problem. What's new is the fact that it affects userenv.dll. This DLL wasn't used by Cygwin until 1.7.34, which introduced a way to merge the user's Windows environment after switching the user context. > My Cygwin installation is on a Vista Home Premium (yes I know it's an old > OS), but the version I've been running for the past 3 years worked > perfectly. >=20 > The most interesting observation is that the logon works *if* I make the > user a member of the local Administrators group. >=20 > The Win32 1114 is a failure to initialise the dll. The observed fact that > logging on with an administrator user account works, suggests that it is a > Windows privilege problem. However, I would have thought that the privil= ege > should rest with the SSHD service account, cyg_server, which is an > Administrator and nothing to do with the user account trying to logon > through the SSH command. Not quite. The environment merge occurs inside the user process started from sshd, so only this process calls functions from userenv.dll. Are you usually logging in with password or with pubkey authentication? Is that 32 bit or 64 bit Vista? If the latter, with 32 bit or 64 bit Cygwin? What does `icacls c:/Windows/System32/userenv.dll' print? Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --Ln+iIw7POnzHEEo5 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJVACRJAAoJEPU2Bp2uRE+gfeMQAJX5Pnyv6uq5wryGFjVQoPoc 3NdObKD/ghPTMUNFouYYxlx0f7kQOtF425tIrwIPjeg+1oonYOXSaTCYGVJ5E+gA DK7s57Qf4buquIcDJUovqeFvwm34mg9CcS+Q3bCMSh1ZAvVZ1Q4C6EkxeEDes4SZ VqYD0p3/zaxmYitGwhCdmTK6SIl8Ri42Hnfxiajap7CtFm+Wnhx3OwadK/MPagqc 0EmhQcsHAvYA2eKiOaFiL0ALm5KzA9eRw4rOij5ljm6yJXZtOwzBGoG8HQ8nEtKo E8s3Z7Hr9de96HOJ6uVNONJLhYzjvH6l0rTr+sjLd4qrUcDZjLSZix34B0i2OuSg 6jMx8gDgQQNf4sVuU9nylBO2qorPkJ6x9J3Q+wrmHjfe79+iSTRxkF51kzbNiiUw Dh5+jFraPPmOxrnaOaDt3sPkP2X27igywvePtID+HBrHuwe523lxbQu7ADWoVz0V +fw/YpRqQpb7mwozfVyCiVfJHU2a6aZU/5U5ZCApQtxTfmp5WXq68251QoBtrxXa pIDFlNgZoMVU7u+L1JYidTM+z+n1vs+5Gz4vy7k/HLYsVe4xNIDV4ZRzStJHaMOu zAHQQzB2wEFSK5IhhnNVXNBOJULVAvdkhKhrkUYU5VeCkTrPxCAV24TbrQuYee3N 9aeXKoolKHZBVVZpar5c =g8Ff -----END PGP SIGNATURE----- --Ln+iIw7POnzHEEo5--