DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=ESInTo7kTvGpQFFKU5ytcBnfCPMgjucW8UgZ7oIJVMrz0JokJAX2x
	eMLdE0H5cNW5/pGt+1mG5PPCgFmjm9JINGuHjG5zJdCGMBOoTHneVTPPCCLXlENl
	QlEPuEhZOyxQKUKw6igSh0s3tn8IENLXAhp4bvPjUBgpmpg0gwTJoE=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Tue, 16 Jun 2015 17:58:43 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Group Permissions on root folders problem (Windows 10 TP build 10061)
Message-ID: <20150616155843.GE31537@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CAMH9mcFEL3mao+m-DEYM84kC1HOPeSBpZXD+mDf0USobF9oY7g AT mail DOT gmail DOT com> <CAMH9mcFOKjvjiFvvk1ju0ZxBDK28MaktdnYwj5_CjvbgnpVO4A AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="O7hm+SMpb/lu0d4d"
Content-Disposition: inline
In-Reply-To: <CAMH9mcFOKjvjiFvvk1ju0ZxBDK28MaktdnYwj5_CjvbgnpVO4A@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--O7hm+SMpb/lu0d4d
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jun 16 09:23, Brian Buchanan wrote:
> On Thu, 30 Apr 2015 at 10:24:50, Corinna Vinschen <corinna-cygwin at
> cygwin dot com> wrote:
> >[...]
> > Hmm, the permission test in the csih helper script is apparently not up
> > to the task in your situation.  As a workaround, you may want to change
> > the group ownership of /var/empty to "Users" and chmod it to 755, then
> > run the ssh-host-config script again.
> >
>=20
> (I'm now on a fresh install of Build 10130)
>=20
> I had to do that to /var (not just /var/empty) to get past that
> message, but I've run into another snag with ssh-host-config
>=20
> I'm getting an errors saying unknown user win-g71n7drq4r6+cyg_server
> at the point of setting the password, the password expiry and
> assigning permissions.

This is a domain member machine, yes?

> *** Info: This script plans to use 'cyg_server'.
> *** Info: 'cyg_server' will only be used by registered services.
> *** Query: Create new privileged user account
> 'WIN-G71N7DRQ4R6\cyg_server' (Cygwin name:
> 'win-g71n7drq4r6+cyg_server')? (yes/no) yes
> *** Info: Please enter a password for new user
> win-g71n7drq4r6+cyg_server.  Please be sure
> *** Info: that this password matches the password rules given on your sys=
tem.
> *** Info: Entering no password will exit the configuration.
> *** Query: Please enter the password:
> *** Query: Reenter:
>=20
> *** Info: User 'win-g71n7drq4r6+cyg_server' has been created with
> password 'Su3per$ecr3t'.
> *** Info: If you change the password, please remember also to change the
> *** Info: password for the installed services which use (or will soon use)
> *** Info: the 'win-g71n7drq4r6+cyg_server' account.
>=20
> passwd: unknown user win-g71n7drq4r6+cyg_server
> *** Warning: Setting password expiry for user
> 'win-g71n7drq4r6+cyg_server' failed!

This is weird.  The same works for me:

  *** Query: Do you want to use a different name? (yes/no) yes
  *** Query: Enter the new user name: blubber
  *** Query: Reenter: blubber

  *** Query: Create new privileged user account 'my_machine\blubber' (Cygwi=
n name: 'my_machine+blubber')? (yes/no) yes
  *** Info: Please enter a password for new user my_machine+blubber.  Pleas=
e be sure
  *** Info: that this password matches the password rules given on your sys=
tem.
  *** Info: Entering no password will exit the configuration.
  *** Query: Please enter the password:
  *** Query: Reenter:

  *** Info: User 'my_machine+blubber' has been created with password 'blubb=
er'.
  *** Info: If you change the password, please remember also to change the
  *** Info: password for the installed services which use (or will soon use)
  *** Info: the 'my_machine+blubber' account.


  *** Info: The sshd service has been installed under the 'my_machine+blubb=
er'
  *** Info: account.  To start the service now, call `net start sshd' or
  *** Info: `cygrunsrv -S sshd'.  Otherwise, it will start automatically
  *** Info: after the next reboot.

  *** Info: Host configuration finished. Have fun!

Is there a chance you have a non-Cygwin passwd tool in $PATH?

> [...]
> At this point sshd and a cyg_server accounts exist and the service got
> created, however it's using the Local System account.

You can change that in the Services GUI to the local cyg_server user.

> I'm guessing this is just because the Local System account doesn't
> have the required privileges.

Yes.

> What do those processes (passwd, set password expiry and assigning
> appropriate privileges) need to succeed?

I don't know why this occurs.  As you can see above, it works for me.

This is a completely new setup with the Cygwin distro updated to the
latest?  csih 0.9.8-6?  cygwin-2.0.4-1?


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--O7hm+SMpb/lu0d4d
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=gyub
-----END PGP SIGNATURE-----

--O7hm+SMpb/lu0d4d--