X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:message-id:from:reply-to:to:subject
	:references:in-reply-to:content-type; q=dns; s=default; b=wm9Vhc
	4UDa/EssHBx1iC1mfxNCe1dVn/gZLaWfNFZ4q/kmP7eVC98UtWh3MuwYJhygiZPi
	5kp0XXPqaKy/D9ITqgmG128HDBkiYkBXdbgeupghyFO4DU+x4m7hFV75yZfDkhuX
	z0p6qa8WzR9nwTYzUAUST+T667aayu0Ukg+3Q=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:message-id:from:reply-to:to:subject
	:references:in-reply-to:content-type; s=default; bh=+6EtZuW4mjHa
	e2SdyTTgzLVQKQY=; b=dl8G5CuR8Y7dExlZoO8mrsRo4FK8KEhH1lz2Wn5ZSE7T
	rdD7DSE2RVjfT0kAosNjHHPGq1Vc+zUqu56UW/1qJewSaAU/eoE56enCZxLlKuUK
	Sfss8D9NWHLMQC3ZNeC7gV4uRIn6SLoJO2RrkK312PvWgY5vA4rhvCT/mQcxENs=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-2.6 required=5.0 tests=BAYES_00,NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=studied, privilege, reminder, habit
X-HELO: lb1-smtp-cloud8.xs4all.net
Date: Thu, 21 Feb 2019 12:43:23 +0100
Message-ID: <350972285e798d7fdc128b034e72952e@smtp-cloud8.xs4all.net>
From: Houder <houder AT xs4all DOT nl>
Reply-To: cygwin AT cygwin DOT com
To: cygwin AT cygwin DOT com
Subject: Re: cygwin 3.0.1-1 breaks my sshd install
References: <19759126 DOT 568100 DOT 1550686604174 DOT ref AT mail DOT yahoo DOT com> <19759126 DOT 568100 DOT 1550686604174 AT mail DOT yahoo DOT com> <alpine DOT DEB DOT 2 DOT 21 DOT 1902201038580 DOT 32163 AT ckhb05> <47883ab06634fed3ecdaa375016dc3fb AT smtp-cloud8 DOT xs4all DOT net> <20190220202536 DOT GX4256 AT calimero DOT vinschen DOT de> <vz1pnrmnoat DOT fsf AT gmail DOT com> <cf5bae0d3d06c3bb508cc766c5c18226 AT smtp-cloud8 DOT xs4all DOT net> <20190220223629 DOT GA4256 AT calimero DOT vinschen DOT de> <20190220224340 DOT GC4256 AT calimero DOT vinschen DOT de> <20190221100911 DOT GG4256 AT calimero DOT vinschen DOT de>
In-Reply-to: <20190221100911.GG4256@calimero.vinschen.de>
Content-Type: text/plain; charset=UTF-8; format=fixed
User-Agent: mua.awk 0.99

On Thu, 21 Feb 2019 11:09:11, Corinna Vinschen  wrote:

> I managed it today already but I'm somewhat stumped.
> 
> I ran ssh-host-config and let the script install a new local account
> "test_server" to use for the sshd service.  I started the service and
> tried to login with a local account and it just worked out of the box.

This is my case: using local accounts only.

Reminder: sshd did work w/ 2.11.2 ...
(and it works now in 3.0.1 after replacing cyg_server w/ SYSTEM (*) )

Way back I started using cyg_server because "csih" forced me to create
this privileged account (W7!).

I studied "csih" (cygwin-service-installation-helper.sh) again ...

64-@@# editrights -u cyg_server -l
SeAssignPrimaryTokenPrivilege
SeCreateTokenPrivilege
SeServiceLogonRight
SeDenyInteractiveLogonRight
SeDenyRemoteInteractiveLogonRight

Compared to "csih", the SeTcbPrivilege privilege was missing. I am not
in the habit of messing with privileges ...

Consequently, like you, I am stumped too :-)

(*) after "moving" the sshd service from cyg_server to SYSTEM, I also
changed the ownership of /var/empty and /etc/ssh* (to SYSTEM) ...

Next, I disabled the cyg_server and sshd accounts. ssh still works.

Henri


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple