X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=WmGxgeYlvYyf5kSiuyhTW4LXMY2Y2okcxbKkNpC560g
	42QAW5ns21q3pmDe5AGUoYL+uxFYvNBNHEDlqv6Ss5Q3HmQDBSX6R/h27ZWpA3QS
	SWtzoLN4Z+Uvo9qrn7O8cC33yqD4PR7nB8ljntF7iMM/2Mf5srrWfoIqBbLlxt1Y
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type:content-transfer-encoding;
	 s=default; bh=Sgw0HX9mHvE/TjJD3v4Di55b3+U=; b=AU1Bx/EpOjhL2Wj9u
	sfkEJJLIPSxf2SS1CUhxg5Vj6gvc9a7mw8YvH/EZecjdcwSxp2LTD4sTHeNNxA3a
	43SB2UpFIZwkvIjy/dnSkQREaHqUmnx3SWzuE0N19QzzCylKk2WbS8xJJSPjuHzi
	NEWQbx8koTLLWoX+Wor+dYz7W0=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM,HTML_MESSAGE,NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 spammy=lewis, Lewis, cary, Cary
X-HELO: mail-lf1-f46.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=gmail.com; s=20161025;        h=mime-version:references:in-reply-to:from:date:message-id:subject:to;        bh=Ux63/IQANpM+5xNFmIaeNbK8gmEJHoPSLkEEeF958AY=;        b=A+yE0H91tnLNiPnq2MhtLBcRYMue9Ci4wdICpwCU5jyKCVoKfbPToMybUBxBZKOx4o         /JvEWP5HBu4BYpYHwwXawPpjetm5JjfEMakURR6AcyIkrOL88l1NPrsUlmcQ1ahZUTLM         67yvdfPTRnDBpUAVYvFcSO2CCec+PPUv56wYh59cjWM8DpbmKiy0amq7PoD2nwH+qItI         IVWbeTwkK5Lvh4tWbOectNErExn7brePvrNfZV2IUom85qWFdZ7dZptWBSO6TIiaBhkD         Y1gS4jUwHMgWIkXmfmw/Kw+Otog47jbQDrTnS7vX+tYQPySPe2PQVPPYCH5NmA9BTzXV         hbFw==
MIME-Version: 1.0
References: <19759126 DOT 568100 DOT 1550686604174 DOT ref AT mail DOT yahoo DOT com> <19759126 DOT 568100 DOT 1550686604174 AT mail DOT yahoo DOT com> <alpine DOT DEB DOT 2 DOT 21 DOT 1902201038580 DOT 32163 AT ckhb05> <47883ab06634fed3ecdaa375016dc3fb AT smtp-cloud8 DOT xs4all DOT net> <20190220202536 DOT GX4256 AT calimero DOT vinschen DOT de> <vz1pnrmnoat DOT fsf AT gmail DOT com> <cf5bae0d3d06c3bb508cc766c5c18226 AT smtp-cloud8 DOT xs4all DOT net> <20190220223629 DOT GA4256 AT calimero DOT vinschen DOT de> <20190220224340 DOT GC4256 AT calimero DOT vinschen DOT de> <20190221100911 DOT GG4256 AT calimero DOT vinschen DOT de> <350972285e798d7fdc128b034e72952e AT smtp-cloud8 DOT xs4all DOT net> <DBA38EC0-BF79-4F49-B75E-C47C2894E3FE AT gmail DOT com>
In-Reply-To: <DBA38EC0-BF79-4F49-B75E-C47C2894E3FE@gmail.com>
From: Cary Lewis <cary DOT lewis AT gmail DOT com>
Date: Sat, 23 Feb 2019 22:07:54 -0500
Message-ID: <CAEF1h+XzzKnzpeqh=pE5tsexUVHPNCXnNfAvK0PEu9OCFDvjdg@mail.gmail.com>
Subject: Re: cygwin 3.0.1-1 breaks my sshd install
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="UTF-8"
X-IsSubscribed: yes
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id x1O39HVl028640

Changing the sshd service to run as localsystem rather than cyg_server
allows me to again ssh into the machine.

Thanks for everyone on this mailing list - I spent hours trying to figure
this out - and because the list doesn't seem to get indexed by google, the
web searches I was doing were of no help.

Looking forward to a newer version of openssh...

On Sat, Feb 23, 2019 at 1:20 PM Cary Lewis <cary DOT lewis AT gmail DOT com> wrote:

> I’m seeing a similar issue. Will try using localsystem.
>
> > On Feb 21, 2019, at 6:43 AM, Houder <houder AT xs4all DOT nl> wrote:
> >
> >> On Thu, 21 Feb 2019 11:09:11, Corinna Vinschen  wrote:
> >>
> >> I managed it today already but I'm somewhat stumped.
> >>
> >> I ran ssh-host-config and let the script install a new local account
> >> "test_server" to use for the sshd service.  I started the service and
> >> tried to login with a local account and it just worked out of the box.
> >
> > This is my case: using local accounts only.
> >
> > Reminder: sshd did work w/ 2.11.2 ...
> > (and it works now in 3.0.1 after replacing cyg_server w/ SYSTEM (*) )
> >
> > Way back I started using cyg_server because "csih" forced me to create
> > this privileged account (W7!).
> >
> > I studied "csih" (cygwin-service-installation-helper.sh) again ...
> >
> > 64-@@# editrights -u cyg_server -l
> > SeAssignPrimaryTokenPrivilege
> > SeCreateTokenPrivilege
> > SeServiceLogonRight
> > SeDenyInteractiveLogonRight
> > SeDenyRemoteInteractiveLogonRight
> >
> > Compared to "csih", the SeTcbPrivilege privilege was missing. I am not
> > in the habit of messing with privileges ...
> >
> > Consequently, like you, I am stumped too :-)
> >
> > (*) after "moving" the sshd service from cyg_server to SYSTEM, I also
> > changed the ownership of /var/empty and /etc/ssh* (to SYSTEM) ...
> >
> > Next, I disabled the cyg_server and sshd accounts. ssh still works.
> >
> > Henri
> >
> >
> > --
> > Problem reports:       http://cygwin.com/problems.html
> > FAQ:                   http://cygwin.com/faq/
> > Documentation:         http://cygwin.com/docs.html
> > Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> >
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple