X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:content-type:content-transfer-encoding :mime-version:date:subject:message-id:references:in-reply-to:to; q=dns; s=default; b=v7bTDsI1YD9e1E0vHUVs/WY93oHdj8JpqDgf9FrVOhb WzOsGup0tBSCu+Dddtzx10HO3BDhF9GuoS3UVw1a0znP3iPiicifrzMUUW0kc8ww qWV6U7L3SWUye/ViszdQRmd1ogP4Z2h8K0n8HXyoLBlPz5VtRP15iVnOwBdgc+Cc = DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:content-type:content-transfer-encoding :mime-version:date:subject:message-id:references:in-reply-to:to; s=default; bh=qJaSh9GvzfSS+c30Gd5e0TSYjFc=; b=tNCF5bPAPhgU/Hvt1 YQFop6wyjCvrV5ze0bYcoWe4E73mtvH+t+GqBRkE+LkKq/Uls/17Ytp4rCr6t4DG a1hrAj3ro0upEfO44r/R1onPr1/O5rWvQ2PRfNXxYGoMFBFaJTY5jsq2ddMKcKUS 5oHSt2xHSjL6t4Wb0ZV4hmmJwM= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM,NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 spammy=Way, ownership, studied, UD:problems.html X-HELO: mail-it1-f170.google.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :references:in-reply-to:to; bh=0aXqbbNYnnNIq940hdnc1StipyuOFAXJHIzdhscBHw0=; b=WsXmsBc89j1yaoG7ddBzsBTx1FeRI4M0KIdHdrGMk5wQhKAbA97jHjBd8Quu3+1Idw 23Ym75KbGDsiAcfYtYdYa7qyB5qEkQ88ClXfLvAsZt3DRh+2A9WgfpEOPhofm5Xq9e4r 7RtekhkOqHFlDqeiDsM1PD4q9cL/6T8zYPrAwSA1Al3Tffews2zdpFn4YDT66ksCxe08 Uz4z4Y5fwPl1oSQMfg4E9ACdPvoCL+7LvkoyIcp6C86m4XVr/4P8CYI8dvCWtTuYrhoK Kbvtg9lSd19E7RmYfn1ijOrzBT9NqdanRsUm2+S+KtEGClKDsrY8HeS2phUu93OV6cUP dRNQ== From: Cary Lewis Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) Date: Sat, 23 Feb 2019 13:20:38 -0500 Subject: Re: cygwin 3.0.1-1 breaks my sshd install Message-Id: References: <19759126 DOT 568100 DOT 1550686604174 DOT ref AT mail DOT yahoo DOT com> <19759126 DOT 568100 DOT 1550686604174 AT mail DOT yahoo DOT com> <47883ab06634fed3ecdaa375016dc3fb AT smtp-cloud8 DOT xs4all DOT net> <20190220202536 DOT GX4256 AT calimero DOT vinschen DOT de> <20190220223629 DOT GA4256 AT calimero DOT vinschen DOT de> <20190220224340 DOT GC4256 AT calimero DOT vinschen DOT de> <20190221100911 DOT GG4256 AT calimero DOT vinschen DOT de> <350972285e798d7fdc128b034e72952e AT smtp-cloud8 DOT xs4all DOT net> In-Reply-To: <350972285e798d7fdc128b034e72952e@smtp-cloud8.xs4all.net> To: cygwin AT cygwin DOT com X-IsSubscribed: yes Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id x1NILPJ4014578 I’m seeing a similar issue. Will try using localsystem. > On Feb 21, 2019, at 6:43 AM, Houder wrote: > >> On Thu, 21 Feb 2019 11:09:11, Corinna Vinschen wrote: >> >> I managed it today already but I'm somewhat stumped. >> >> I ran ssh-host-config and let the script install a new local account >> "test_server" to use for the sshd service. I started the service and >> tried to login with a local account and it just worked out of the box. > > This is my case: using local accounts only. > > Reminder: sshd did work w/ 2.11.2 ... > (and it works now in 3.0.1 after replacing cyg_server w/ SYSTEM (*) ) > > Way back I started using cyg_server because "csih" forced me to create > this privileged account (W7!). > > I studied "csih" (cygwin-service-installation-helper.sh) again ... > > 64-@@# editrights -u cyg_server -l > SeAssignPrimaryTokenPrivilege > SeCreateTokenPrivilege > SeServiceLogonRight > SeDenyInteractiveLogonRight > SeDenyRemoteInteractiveLogonRight > > Compared to "csih", the SeTcbPrivilege privilege was missing. I am not > in the habit of messing with privileges ... > > Consequently, like you, I am stumped too :-) > > (*) after "moving" the sshd service from cyg_server to SYSTEM, I also > changed the ownership of /var/empty and /etc/ssh* (to SYSTEM) ... > > Next, I disabled the cyg_server and sshd accounts. ssh still works. > > Henri > > > -- > Problem reports: http://cygwin.com/problems.html > FAQ: http://cygwin.com/faq/ > Documentation: http://cygwin.com/docs.html > Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple > -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple