DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=h4d4ngpLHod9d030MFC+hD2YE5Pv4ioCAwz5nZ6mTCcWD+npYzSoQ
	HGvemwTNwVDQZ8mnCtEFkANA5jKcSc1sxrn5LBvyYBYsqMyP9rZbyiUyBjK+B1Ro
	+p5OIAAoNu0QaTM51qMI7ogOuEp0in5Jn0rFr5B9f2ViuNPD5uWw6k=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Fri, 18 Dec 2015 17:12:55 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: With nsswitch db_home of /cygdrive/c/%U ssh can't seem to use .ssh folder
Message-ID: <20151218161255.GM3507@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20151218100208 DOT 68ac88d4 AT byron-fed23 DOT brc DOT local>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="k1G2Bc0EDIhoSmEt"
Content-Disposition: inline
In-Reply-To: <20151218100208.68ac88d4@byron-fed23.brc.local>
User-Agent: Mutt/1.5.23 (2014-03-12)

--k1G2Bc0EDIhoSmEt
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Dec 18 10:02, Byron wrote:
> Every time I use ssh to a machine I get the fingerprint warnings like
> it's the first time I've ssh-ed to that machine. I've narrowed it down
> to have something to do with my `db_home` being set to `/cygdrive/c/%U`
> in `nsswitch.conf`. I have it set to this value because I want my
> Cygwin home folder to be the home folder of my computer. Since I'm on
> an Active Directory network if I set `db_home` to `windows` then my
> home folder is on a network file server rather than my desktop.
>=20
> I can't see any reason that ssh isn't able to properly use my `.ssh`
> folder. Am I missing something, or is this a bug?

I have no idea.  Usually it works.

> Below is sample output of ssh, the permissions of my `.ssh/` folder and
> files, and the contents of my `/etc/nsswitch.conf`.
>=20
> ```
> $ ssh destination
> Could not create directory '/cygdrive/c/bkboulton/.ssh'.

It's weird that ssh apparently tries to create the directory as if it's
missing.  You didn't change the cygdrive prefix in /etc/fstab by any
chance?

Also, usually your Windows home folder is not /cygdrive/c/$USERNAME but
/cygdrive/c/Users/$USERNAME.  Are you sure that's not the problem here?

> The authenticity of host 'destination (192.168.11.7)' can't be
> established. RSA key fingerprint is
> SHA256:WKewPf3j9Vljltmsnr/cwZmr0XBy8L5E6Chwp1gWK4g. Are you sure you
> want to continue connecting (yes/no)?
> ```
>=20
> Permissions of my `/cygdrive/c/bkboulton/.ssh` folder ar `drwx------+`.

The '+' is suspicious.  What does icacls print for .ssh?

> Permissions on all file in that folder are `-rw-r--r--`.

All files?  Even the private keys?  The permissions for private
keys should be 0600.

What does `getent passwd <your cygwin username>' print?  Does
the homedir differ from the value of $HOME?

Can you run ssh under strace as in

  $ strace -o ssh.trace ssh destination

and provide the trace output?  It might contain a hint why ssh
thinks it has to create the folder.

What you could also try is this:  Disable the db_home entry in
nsswitch.conf and create a mount point instead, e.g.:

  $ cat > /etc/fstab.d/$USER <<EOF
  C:/Users/$USER /home/$USER ntfs binary 0 0
  EOF

That makes your home dir /home/<username> in Cygwin.  Just start a new
shell for testing.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--k1G2Bc0EDIhoSmEt
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=pbxV
-----END PGP SIGNATURE-----

--k1G2Bc0EDIhoSmEt--