X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-transfer-encoding
	:mime-version; q=dns; s=default; b=UmxGd7li44Tx+zGXP9rdUynCAO1J/
	RSyGRuKxu5diMFbC1cUANNFo88Moy/fVLt5iK5andg9IHjCIj7AuSsgLA/GQAO9J
	ALtVFWYWEZJuSzip2V/BftaqOfd1DJmTm/1HATp8F9HH+lJAn+xRRt8mWiZsKsFd
	h9HWg09Kyghxs0=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-transfer-encoding
	:mime-version; s=default; bh=SiWzokqiJW/k4rkLrnEoMIMaVh4=; b=U+L
	44OHJ/k8pZGG1SPD//dJtX002Hlchllpjxin4y2kSFuK5aVT8AkApp1v/bksOCyM
	Y5Rukm/QDduW78HlYc+ZN627iELWd4H557cj9sYbLIj3DVrIqrRiu7mID27EQBOw
	gC+3bLEay7JiYJBdkZQMwEC12QJ7sSK6ti3Ixp0o=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-6.9 required=5.0 tests=BAYES_00,GIT_PATCH_2,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy=Hx-languages-length:1507, worried, services
X-HELO: EUR04-DB3-obe.outbound.protection.outlook.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=clarizen.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AuAVXuYv93Peg5DubqmJ0NsjEOEpk17R3WHRUd73xGU=; b=J6alLOgOy3Di5GH6NqNtSA2G85CuGjA45sCAP4C+4yGkUSqYzcWiQaiKj/jqXQQTFdyI5RJyC5hak3/thhVHJk89pXuX07wkksWIYC8pMIQb0yl2VBTIgtUjvHgUi8QcZ9e5/kGkzB8HBPDT7K8znM1bTeo01wmtCBwxw/CRyG0=
From: Maayan Apelboim <Maayan DOT Apelboim AT clarizen DOT com>
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: RE: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
Date: Wed, 6 Mar 2019 10:09:33 +0000
Message-ID: <AM6PR07MB5334BEC016F182E1F97F817695730@AM6PR07MB5334.eurprd07.prod.outlook.com>
References: <878sxt86kp DOT fsf AT Rainer DOT invalid>
In-Reply-To: <878sxt86kp.fsf@Rainer.invalid>
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Maayan DOT Apelboim AT clarizen DOT com;
x-ms-exchange-purlcount: 1
received-spf: None (protection.outlook.com: clarizen.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id x26A9tBO014649

Well, it doesn't work OK unfortunately, but I'm not sure if I missed something in the process, or is it just not working properly.
I'm a bit worried to upgrade to 3.0.2 at the moment cause it's a major version and will probably have new bugs that I wouldn't want to find in production.

Assuming we will eventually upgrade to latest version - 
My sshd service is running with domain user cyg_server and we login with domains users via ssh - is it still OK to switch the sshd service's user to local system?
Will we still be able to login with domain users via ssh?
Will it help with my network shares problem?

Thank you for your reply

-----Original Message-----
From: Achim Gratz [mailto:Stromeko AT nexgo DOT de] 
Sent: Tuesday, March 5, 2019 9:28 PM
To: cygwin AT cygwin DOT com
Subject: Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected

Maayan Apelboim writes:
> To my understanding this feature should be working in older versions 
> as well.

If it works OK with 2.11.2, then wait a few moments for 3.0.2 to appear and it should work the same, plus you can then run the service under Local System instead of the special cyg_server user.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Samples for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldSamplesExtra

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple