DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=JcBDjD3hPZMqzlq137co2LUQkLLhcMZI5gYVURyogcqiMnMbdIvy6
	2rqWAqq9OYt7UabFajO+xxSAOJXedUEkj3gE6p9JPxIx4c1gJdQmN8v7vxRVv6s9
	+LX1ou5LcjYAk68EKkOQ3L58RztsALdKg+3b0TMCpiEAneaOnnogI4=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
To: cygwin AT cygwin DOT com
From: Andrew Schulman <schulman DOT andrew AT epa DOT gov>
Subject: Re: ssh keys not working after server crash
Date: Fri, 20 Oct 2017 13:36:17 -0400
Lines: 31
Message-ID: <rgckucl0pfgpldap242pc5u2b7pfnt1cq7@4ax.com>
References: <035e01d34806$45ab1540$d1013fc0$@gmail.com> <036601d34806$a6164f80$f242ee80$@gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit

> Attached are the instructions I used about a year ago to install and it’s been working fine until about 3 weeks ago.  The server crashed (due to MS patches I believe) and when it came up the system didn’t look right..  I installed syslog-ng to see if it would help me get some logging.
> 
> Prior to the crash, users were restricted to their home directories..  Now I see dev in the folder list even though it was hidden before and fstab was not changed.
> According to the instructions I used to install, /home was to be owned by cyg_server, but it shows as owned by Administrator now.  I suspect a permission problem I am having with ssh keys not working..
> 
> 2017-10-11 19:30:04, 00001: Session(0AC80001): SENT : USERAUTH_REQUEST [none]
> 2017-10-11 19:30:04, 00001: Session(0AC80001): RECV : USERAUTH_FAILURE, continuations [publickey,password,keyboard-interactive]
> 2017-10-11 19:30:05, 00001: Session(0AC80001): SENT : USERAUTH_REQUEST [publickey (ssh-rsa) - unsigned,fingerprint (SHA-2 hash): 57:ed:24:74:ce:88:71:a8:15:ae:72:8a:dd:42:be:b6:76:8c:f2:65:f8:1b:41:29:92:95:63:1d:24:b4:d5:85]
> 2017-10-11 19:30:05, 00001: Session(0AC80001): SENT : USERAUTH_REQUEST [publickey (ssh-rsa) - unsigned,fingerprint (SHA-1 hash): 33:f2:36:9c:2f:45:7e:87:74:fb:d5:6e:ca:44:e6:99:03:53:80:c6]
> 2017-10-11 19:30:05, 00001: Session(0AC80001): SENT : USERAUTH_REQUEST [publickey (ssh-rsa) - unsigned,fingerprint (MD5 hash): ba:b7:6c:0b:88:87:74:c6:a0:eb:e5:bd:06:bb:53:10]
> 2017-10-11 19:30:05, 00001: Session(0AC80001): RECV : USERAUTH_FAILURE, continuations [publickey,password,keyboard-interactive]
> 2017-10-11 19:30:05, 00001: Session(0AC80001): SEND: Disconnect packet: The user canceled authentication.
> 
> Cygcheck attached.

Not sure what your trouble is. The client's output of ssh -vv when the
authentication fails might help to debug it.

If sshd can't read the client's public key, then for sure that would cause
the authentication to fail. I don't have sshd installed on any of the hosts
I can get to right now, but maybe someone who does could post their output
of 

ls -ld ~ ~/.ssh ~/.ssh/authorized_keys

so you could compare your permissions to theirs.

One thing to try is to rerun ssh-host-config (from an admin shell I
believe).

Andrew


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple