X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:to:subject:message-id:reply-to :references:mime-version:content-type:in-reply-to; q=dns; s= default; b=s3rrcC+ioBc0Aq5P+7/ZT+9qnlEgB5qimBfA3m0WRwvJplsOP6gYW uFY8PBcdyak+80Ar37+ZHcBKiBcRSI0BmEBosEvdV9lxUXfd/ImEivRFGoWj+Igc vN9lg6SRBO/TlQvR6ZHcSm33DrzGePIpD7o7cLRHrmgewSGB6Su8Ds= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:to:subject:message-id:reply-to :references:mime-version:content-type:in-reply-to; s=default; bh=3hiwhChQZrt5Uzp/82Rcnfn+oZE=; b=Q/9Io2rqy2IlXKzg/Z7Roasz7Z0X nAn1n0GoPTAF65CthUWXqi/AVvZCb6PJ7dkfg1ZCpJmP4r3SVtyjj+h9kjUlub1x FHFRaDiepNdKNWqdZ+JkPfINVbbKVQcMqHiGPtb7/3Ofa9GL2vJB2urfpLxm0+nU GUR8iERRoXEXE8U= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-99.2 required=5.0 tests=AWL,BAYES_50,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy=username, unrecoverable, U*test, 1265 X-HELO: drew.franken.de Date: Wed, 31 Aug 2016 12:16:38 +0200 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: passwd unrecoverable error 1265 Message-ID: <20160831101638.GD5955@calimero.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: <0da61897-6270-e20a-6d86-eae87a9f66f8 AT gmail DOT com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="IpbVkmxF4tDyP/Kb" Content-Disposition: inline In-Reply-To: <0da61897-6270-e20a-6d86-eae87a9f66f8@gmail.com> User-Agent: Mutt/1.6.2 (2016-07-01) --IpbVkmxF4tDyP/Kb Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Aug 30 20:20, Vlado wrote: > Hello. >=20 > I have few users with sshd-only access to server. They use passwd when > changing passwords. >=20 > passwd is not working anymore for regular user (remote connection with > PuTTy): >=20 > test AT server ~ > $ passwd > Old password: > New password: > Re-enter new password: > passwd: unrecoverable error 1265 That's a windows error code. 1265 means ERROR_DOWNGRADE_DETECTED, the officiale error message being: The system cannot contact a domain controller to service the authentication request. Please try again later. I can reproduce this problem, but not on all machines. It occurs on W10, on 2012R2, on W8.1, but it does not occur on W7 or 2008R2. I found a workaround: The Windows call for changing the password used by the passwd tool is ret =3D NetUserChangePassowrd (server, username, old_pwd, new_pwd); The server is usually the logon server, prepended by double backslash, as in the variable $LOGONSERVER, and this is how passwd uses the function. However, while this still works fine on W7 and 2008R2, it fails on the newer systems with error 1265, ERROR_DOWNGRADE_DETECTED. The workaround puzzles me slightly, but it seems to do the trick: If I use the domain name (as in $USERDOMAIN) instead of the server name when calling this function, it works as expected, also on W7 or 2008R2. I applied the workaround which will be in passwd of the soon to be released Cygwin 2.6.0. Thanks, Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --IpbVkmxF4tDyP/Kb Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXxq6GAAoJEPU2Bp2uRE+grcYP/2ra5ArsRLwRnDC8Twr/b6Ii P8uWtfzgAbVBEYJ4vsImjEga4Y6IgvFkgTzwD7T9B7Z3bXNji/HlVs+GRQjQCUJT kpcJ/LI+OjPKtFqh9OUs9p6PFbc8TgCSea2gGT9DDiNmCVI5Cdxn4K1c49YT8wbi OSceNr9AjfqxDzuv0I4oVAYHXQm/cEeYCEluJ+1Dr1KA/+o04mfHg41qkEbOX9o8 sjrtngvQOjHjPwRW6IqHohlUyxz1L8o2S35k5ixB0uwk46b4HNxcCnSFKSytTF3n phixC+G6/KB+zAZxmoiIEx3yeaG5E0uG7wsbvYDZ+3FIzksnyrbSHbY0vZUfGofP MoPSjrIJt01RdWvKrJjpKa/mbBY1pucx1htOODVqbWpnqyX3r0LVWUVEDdxjW1wo awhsznRDWno7nCE6RKFpohF5XPtn2RCQEBXZOJnLJTR5PcGy3ATUJZHAgIdlf6VK a/klvgHGdNS4zQeVAz0FzxHkpE2smM15C/sxXirASId/q4fbFgXgmN/W38669/q7 fHII77OZuCQkzKh6KfBKYB27hwhEwcy9IWcNN4zayIaINckfKC6GEwfcfqy9oTBd JrAraZrDhRb0VuKf/GIQe9HP1LZ0y01M5WuRRqJVb0dC6AdUBbj3Y9zfh0uOT2gn 3ukeWZOF4tk7GVPv828B =UeGF -----END PGP SIGNATURE----- --IpbVkmxF4tDyP/Kb--