DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=mvMmWljfAqZfl4Ol9QADyO4ydhxBksraAmPq2klbrG9j+mRW5nWxw
	Sae9FCiw1lfncs84DI8DQZ2k8kC8GNEMoOWR0ixiq4pU4Mi/ulblrULx0U7afenL
	xE+80nmQ4l6SNd17/vtYvmJViu9rXESyNjamdZHXRPYanaU9qkWUWk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Wed, 11 Mar 2015 12:17:29 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Non-privileged use can't logon
Message-ID: <20150311111729.GW5732@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <003601d05be4$d2574470$7705cd50$@rockliff AT bigpond DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="Ln+iIw7POnzHEEo5"
Content-Disposition: inline
In-Reply-To: <003601d05be4$d2574470$7705cd50$@rockliff@bigpond.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--Ln+iIw7POnzHEEo5
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 11 18:19, Max Rockliff wrote:
> Hi,
>=20
> I'm raising this question again, after having removed CYGWIN SSHD and
> resinstalled.
>=20
> I am unable to execute an SSH <user>@localhost.  I am prompted for the
> password and successfully logged on, only to receive an error message (see
> below) and the session closed immediately.
>=20
> Error Message:
> 1 [main] sshd 8284 C:\cygwin\usr\sbin\sshd.exe: *** fatal error - unable =
to
> load C:\Windows\system32\userenv.dll, Win32 error 1114
> Connection to localhost closed.

We saw this error on and off for a couple of years and it was never
quite clear what the underlying problem is, given that we have no way to
check what the DLLs are doing.  In some cases changing cyg_server to a
domain account fixed the problem, but that's obviously not your problem.

What's new is the fact that it affects userenv.dll.  This DLL wasn't
used by Cygwin until 1.7.34, which introduced a way to merge the user's
Windows environment after switching the user context.

> My Cygwin installation is on a Vista Home Premium (yes I know it's an old
> OS), but the version I've been running for the past 3 years worked
> perfectly.
>=20
> The most interesting observation is that the logon works *if* I make the
> user a member of the local Administrators group.
>=20
> The Win32 1114 is a failure to initialise the dll.  The observed fact that
> logging on with an administrator user account works, suggests that it is a
> Windows privilege problem.  However, I would have thought that the privil=
ege
> should rest with the SSHD service account, cyg_server, which is an
> Administrator and nothing to do with the user account trying to logon
> through the SSH command.

Not quite.  The environment merge occurs inside the user process started
from sshd, so only this process calls functions from userenv.dll.

Are you usually logging in with password or with pubkey authentication?

Is that 32 bit or 64 bit Vista?  If the latter, with 32 bit or 64 bit
Cygwin?

What does `icacls c:/Windows/System32/userenv.dll' print?


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--Ln+iIw7POnzHEEo5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=g8Ff
-----END PGP SIGNATURE-----

--Ln+iIw7POnzHEEo5--