X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=pUSfjYUJOmV5E5VzmpLzzHNviZZf1pYHHMrWcoYoXzACclnrgmi0Z
	yBJrvBvvQUrKGWIf8+2Etpljg9LErkz2qJxEFX4p7JBUC5+XO4GHA206j0C/9h70
	gB6+7iOXvtMGjJpKO8CzOleMgi/E5TVaBXd9Rc3k4Ckk8pjqREYQ48=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=+taCA1uXeiJhi+kz/KTI5Qk4S7Q=; b=nN2Ah8I2bunLWxhIZSv6ftVMr+5G
	MbEdh+AedkM8i++aUDDjOxib8avYwxhHEAfF09K87l9Zedo1FAQGkVnCRQtBWdUh
	p7qJfBbSPKdG4224dUvOhOyu6rf3Nm/diTA5VlbtyicefevJoDRxaiK0fS954lFt
	IrWevetE7K7+fMM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-100.9 required=5.0 tests=BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=uploaded, states, tomorrow
X-HELO: mout.kundenserver.de
Date: Tue, 29 Jan 2019 18:05:29 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: sshd permits logon using disabled user?
Message-ID: <20190129170529.GX3912@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CANV9t=Q2ZRqVD99a+qdVTet1hn_aM6RY5B2Cm1oc0E4Lf9x2ig AT mail DOT gmail DOT com> <20190128095947 DOT GN3912 AT calimero DOT vinschen DOT de> <CANV9t=Tk=k5ohYw5TcvYy7TrWUBOTA4JXqE=75H+6n_-o53ZSQ AT mail DOT gmail DOT com> <20190128165227 DOT GQ3912 AT calimero DOT vinschen DOT de> <CANV9t=QMcDWWKY=Qqe-1jdbE1SNJ+uwGuV02uoqAYwMj85Ts8w AT mail DOT gmail DOT com> <20190128183856 DOT GT3912 AT calimero DOT vinschen DOT de> <CANV9t=Te2mE-Hnz6oD_dxArTtDQ3xTyk1+pxNvY6qQG++ULHaw AT mail DOT gmail DOT com> <CANV9t=ReTRydfVV=u-9fTLz-ftt6u_Z-z=bR7ywcBYO2z9JsUw AT mail DOT gmail DOT com> <20190129115656 DOT GV3912 AT calimero DOT vinschen DOT de> <20190129121200 DOT GW3912 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="qnK4RqISe3HuYx1/"
Content-Disposition: inline
In-Reply-To: <20190129121200.GW3912@calimero.vinschen.de>
User-Agent: Mutt/1.10.1 (2018-07-13)

--qnK4RqISe3HuYx1/
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan 29 13:12, Corinna Vinschen wrote:
> On Jan 29 12:56, Corinna Vinschen wrote:
> > On Jan 28 14:49, Bill Stewart wrote:
> > > On Mon, Jan 28, 2019 at 1:14 PM Bill Stewart <bstewart AT iname DOT com> wro=
te:
> > >=20
> > > > Thank you. I wanted to point out that I have not had a chance to te=
st
> > > > using a non-domain computer yet. I will try that scenario as well.
> > >=20
> > > Hi Corinna,
> > >=20
> > > I unjoined a Windows 7 machine from the domain and tested as follows:
> > >=20
> > > 1. Ran setup and installed cygwin
> > >=20
> > > 2. Ran sshd-host-config and answered "no" to install as service
> > >=20
> > > 3. Installed service using this command line:
> > >=20
> > > cygrunsrv -I cygsshd -d "Cygwin SSH Service" -p "/usr/sbin/sshd" -a
> > > "-D" -y "tcpip"
> > >=20
> > > 4. Renamed cygwin1.dll to a backup name and replaced with copy from
> > > latest snapshot
> > >=20
> > > When I try to start the service, I get error 1067 ("the process
> > > terminated unexpectedly"). Event log states:
> > >=20
> > > cygsshd: PID nnnn: starting service `cygsshd' failed: fork: 11,
> > > Resource temporarily available
> > >=20
> > > If I start bash elevated and run this:
> > >=20
> > > /usr/sbin/sshd -d
> > >=20
> > > It starts and listens on port 22 and I can connect.
> > >=20
> > > Thoughts?
> >=20
> > I can reproduce this on W7, while it works fine on W10.  Unfortunately I
> > haven't much time today and tomorrow but I'll try to get around to it
> > Thursday or Friday.
> >=20
> > In the meantime, can you try the snapshots which one started to
> > introduce this issue?
>=20
> Never mind, I found the culprit.

Please try the snapshots I just uploaded to https://cygwin.com/snapshots/
They should fix the problem.  It turned out that I restricted the
permissions of processes too much for Windows 7.  The same code works
fine since Windows 8.


Thanks,
Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--qnK4RqISe3HuYx1/
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEoVYPmneWZnwT6kwF9TYGna5ET6AFAlxQh9gACgkQ9TYGna5E
T6C4Vg/8C0L9+bRZoU/UP9L0raaqejCuXkqMD1EemLjliZjnFMB6sNV9DHJMYHP8
HalZWuVfA6xwMEklYuSd7er058iUlxx4me60W3zJdteaJKtpEXHCh+OU8CJwFwhc
5gV6By9ttPYwg8kNPXZntcQacm8IzzTRUjvwQ4e82BJnzJNbqv1GJO7C4eTH6E7D
vyHwO+0R7pwmcF2s0ihc5VzxdTtQWEWqTECpBH/pLbkMl8VOMgZ1WecIQYGT0EmD
GrdlRwdMLuozLcqzpcBCTUclisW2l3GBbLWlB+BGqN76Gt3tayeLpfNlUB7c85XU
iNeY00IV42NDNN4r2jw4Km7uGe8b62KstTtWYzd5Je2LqVvC9klxWE3tgGBlAoXg
5juHtWknL28PdphOUC3Hu7i8klz7CrKAfWtJ4Qu7hEqkH0pbodtV52NwBL0xT037
xn0bZSfBjvLp4zNS4qJMjFZF/VQB+EOezrsrXLzGSCNTaQOullRdaifRiSfKFmqi
QdcuDZacQqT4D9lmhBpsjdRNoKtIpnxRsCNqz8lgQoZSAAN8XL4IVMNlHxK6rQLw
1kuZNUOVEHhg3f5ruwXzdOAwonMO6MQzgJT6pIQFPeJNLkUaHGA2N8ClBnoqhYPZ
+Lrh28icsOcEXe0i4R3SrfV43TSz3ARzGIKiTZVCZeOYr0eub0w=
=Wx1O
-----END PGP SIGNATURE-----

--qnK4RqISe3HuYx1/--