X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; q=dns; s=default; b=yJ9OV tdb3eXNsk1Vt7gGHYCTA1HNiExFz6Z/iNEqXPQVnG1OWoG62iiuq8xVZYjV+duW8 hCNZ/hDOPRRMWkqqMVKiJ+dNFxYcDXfk1kWbyM5XT5/+mGNYlQB7PuhoD7iQYJV7 ymVFYcyyjG2dY0dLyJt0B6VHU7cFOSUb5HTtE4= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; s=default; bh=70Juk0BQA26 Mmlg5Q6pqRGbCmnE=; b=Z1yklCOXv5ZVths/BuvhkrCjqoJx0b9M2pEF5XNoC3E e60WMpLvAEB98gzFUjdokwg1mDGrVA1TOrmWmHYXTzJJaMcaLz9oQ6wa2OL+XV7L MTgnfq57pwgT6S8eQW0hThqXamSjw92nH2+qSZ+c5iJD8JoYDZRadFWOnhus++D0 = Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-2.4 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.1 spammy=password, device, locked, HX-Spam-Relays-External:ESMTPA X-HELO: vsmx009.vodafonemail.xion.oxcs.net From: Achim Gratz To: cygwin AT cygwin DOT com Subject: Re: sshd error "seteuid: No such device or address" References: <20190312213051 DOT GR3785 AT calimero DOT vinschen DOT de> Date: Wed, 13 Mar 2019 19:32:09 +0100 In-Reply-To: (David Dombrowsky's message of "Tue, 12 Mar 2019 20:18:42 -0400") Message-ID: <87lg1ik4ly.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain David Dombrowsky writes: > If I'm reading this correctly, using the SYSTEM account will deny access > to user-level shares. Using the cyg_server account (or another service > account) will allow access, but requires a password stored in the > registry. That was already the case if you logged in any way other than via password, either a stored one (when using pubkey auth) or explicitly at logon. At the moment there seems to be no way around that requirement. Don't forget that you will have to change the stored password each time you change your password in the domain. Forgetting that and trying to log in a few times usually gets your account locked. Btw, unless you completely lock down password logins on the SSH server, you can still tell ssh not to use your pubkey and it will fall back to asking for a password. You don't need an admin shell if you want to store your own password in the registry (and admin can also change or remove one for a different user). Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Factory and User Sound Singles for Waldorf Blofeld: http://Synth.Stromeko.net/Downloads.html#WaldorfSounds -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple