DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=lDRQZxB
	akXTJLiRQbGGRo4Fw5VgmweFJgW8KH8pG/TrwTqjmQfvlBYc7RxDPyW/2l23PVXv
	Q2rXAKOh0cm+vZmS2lAeNX5A6rixFmAGBMdXtbTJnZFVtM/HH0NwdnLi8LkeK6kU
	KtVQ5Vq1ZFCi7zLzmY063LrOEVUwmcxcPs9U=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
In-Reply-To: <6d6087eef8f444edbe659c278f63ab43@AUSX13MPC128.AMER.DELL.COM>
References: <6d6087eef8f444edbe659c278f63ab43 AT AUSX13MPC128 DOT AMER DOT DELL DOT COM>
From: Erik Soderquist <ErikSoderquist AT gmail DOT com>
Date: Fri, 19 May 2017 17:30:23 -0400
Message-ID: <CACoZoo2BkF1PuEuto-V7=0MV8ZqsFQ1tu39B8vScmFOfoGG8Wg@mail.gmail.com>
Subject: Re: SSH Keys breaking symlink access?
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="UTF-8"

On Fri, May 19, 2017 at 3:26 PM,  Dave Pierce wrote:
> Hello!
>
> I am running Cygwin-64, 2.8.0(0.309/5/3) on a Windows 2016 Server. This
> system is intended for use by a fairly wide audience of devs. We have this
> working correctly on an old Windows 2008 box running Cygwin
> 1.7.9(0.237/5/3).
> The new system is intended to replace the old one. I've mimicked the
> configuration as much possible on the new system, but am running
> into an issue with passwordless (key-auth) ssh.

Did you set up the daemon and use "passwd -R"?

> I have created a windows symlink ("mklink /d /sharename [unc_path]") in
> the c:\cygwin64 directory that points to an NFS share. (This is the same
> as the old system.)
>
> I have OpenSSH configured and working.
>
> I can access "/sharename" within explorer (c:\cygwin64\sharename\)
> and locally from within the Cygwin prompt (/sharename), when
> logged in as either the service account or my own domain account.
>
> If I ssh into the system using password authentication, I am able to
> "ls /sharename" regardless of which account I use, in either
> interactive mode or not.
>
> If I copy ~/.ssh/ to the server for the service account, I can get into
> /sharename.
>
> But if I copy ~/.ssh/ for my own domain account, I cannot. I get a
> "permission denied" error when attempting to cd to /sharename or
> do an ls of it. Th= is is true whether I ssh into the system
> interactively, or execute the command remotely / non-interactively.

This is expected behavior if you have not used "password -R" to
provide the network password.

-- Erik

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple