X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=jDrQtSl
	GBMhg7/KCphXYsuddP9cYYyff3aZveHbrfCPJ9gbXM07hxXUgNlkFlro7TeYDBnV
	tZkFCLn+yaOyechbiaPvhg67YniiBcD1I6HUeGTIm5r03JpJnm2R9PhjZAYND86/
	xtN9NwZio0Jkxb5or6Pi1vVXYmZYegjW0kjg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; s=default; bh=S4cnKwJzxbmyx
	yoPdd1406+RlVI=; b=SknuvxoCdj7jeZW5yRdZiMJCf3G5sdLR6CGwZte4PhjB/
	uIQkCSG2gIDs2ZANwigf1K2/PQ67hPJz5II92UdZIOk1KIc8KdkTNBGJicqrfxF0
	yvgTfV6EUwP4fJ6GDye/lBNRF+JIRlV2Hm/XQWpAfdzchDnIeeE7Orrf/Q7lMM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-5.2 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,GIT_PATCH_2,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.1 spammy=row, H*c:alternative
X-HELO: mout.gmx.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.com;	s=dbd5af2cbaf7; t=1553870470;	bh=p1zKXm7Pr5O8Jom4UomXXrW9O9t7AtANSL4BjPp7H+s=;	h=X-UI-Sender-Class:References:In-Reply-To:From:Date:Subject:To;	b=CdOt8IvXA/ZxYwtV2v9nEXcxhrUZaMgI/u1Xs9t8KtPOy9DuXspWX6YOwnNrhG9VK	 d39+YP4j5BJwoqTgOSzEkA3TtsKwyXFsUdiM477VxVuX8OlqRy2iOYa4O0vHggJm/U	 tDpFiBGWEn+eMmDp+gTRlztmKz2P3F0bnWG81I40=
X-UI-Sender-Class: 214d933f-fd2f-45c7-a636-f5d79ae31a79
MIME-Version: 1.0
References: <CANV9t=SKR5bnKmKeQHsjK5y956h1gT6sUQ6TiQeXxto1+h63iw AT mail DOT gmail DOT com> <31d69fd2-4906-4e32-29ca-d5bedb31088d AT SystematicSw DOT ab DOT ca> <20190329095937 DOT GD4096 AT calimero DOT vinschen DOT de>
In-Reply-To: <20190329095937.GD4096@calimero.vinschen.de>
From: Bill Stewart <bstewart AT iname DOT com>
Date: Fri, 29 Mar 2019 08:40:41 -0600
Message-ID: <CANV9t=SQwC15S2LdQs=u_HHqH3FUZ3emwrjppF8WbWb=89p=Yw@mail.gmail.com>
Subject: Re: sshd/SYSTEM account/OS version and Cygwin "bitness" limitations
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="UTF-8"
X-IsSubscribed: yes

On Fri, Mar 29, 2019 at 4:00 AM Corinna Vinschen wrote:

> > On 2019-03-28 15:36, Bill Stewart wrote:
> > I am trying to understand the limitations when running sshd using the
> > SYSTEM account.
> >
> > Is the following complete and correct?
> >
> > ==========
> >
> > OS_version*  OS_bitness  sshd_bitness  Notes
> > --------------------------------------------------
> > < 6.3        64-bit      32-bit        Note 1
> > < 6.3        64-bit      64-bit        Note 2
> > < 6.3        32-bit      32-bit        Note 2
> > > = 6.3      64-bit      64-bit        No problems
> > > = 6.3      64-bit      32-bit        No problems
> > > = 6.3      32-bit      32-bit        No problems
> >
> > * "< 6.3" = "older than Windows 8.1/Server 2012 R2"; ">= 6.3" = "at
least
> > Windows 8.1/Server 2012 R2"
> >
> > Note 1: sshd cannot authenticate local accounts, but it can authenticate
> > domain accounts.
> >
> > Note 2: sshd can't authenticate local accounts after a reboot unless
> > another logon happens first.
> >
> > Unfortunate implication of Note 1: 32-bit version of sshd running as
SYSTEM
> > account on OS < 6.3 on non-domain member computer cannot authenticate
any
> > accounts.
>
> Or https://cygwin.com/cygwin-ug-net/ntsec.html
>
> AFAIK, the only problem left are OS versions 6.0 (Vista/2008)
> and 6.1 (7/2008R2), and only 32 bit Cygwin running under WOW64,
> *not* 32 bit Cygwin running on a 32 bit Windows.

I read the documentation again (ntsec.html), and I don't see detailed
Windows version specifics. (Hence this message...)

Regarding 6.0 (Vista/Server 2008) and 6.1 (7/Server 2008 R2) 64-bit OS
running 32-bit sshd: That's covered in the first row of the table
(OS_version < 6.3).

Regarding 6.0 (Vista/Server 2008) and 6.1 (Windows 7) 32-bit OS running
32-bit sshd: Only affected by Note 2 (third row of table).

It would seem that my breakdown is complete and correct, then. (If anyone
sees an error, please reply.)

Thanks!

Bill

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple