DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org C28AA385701F
From: Leroy Tennison <leroy AT datavoiceint DOT com>
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: Did I mess up my mailing list subscription?
Thread-Index: AQHWgursvCDwiHDo90CDeiP5IjDbew==
Date: Fri, 4 Sep 2020 19:10:57 +0000
Message-ID: <QB1PR01MB3875AF83AE5688B60CF1252DCD2D0@QB1PR01MB3875.CANPRD01.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
fromharriso3652onprem: md943nf9843nhJNJIHJd83je98d843
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 2db27f6f-8da9-4e37-6ba7-08d8510640da
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Sep 2020 19:10:57.1175 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d0748657-f5a8-4d8b-8a16-b848c23ea8cb
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: hYj8V9mbq+/s1rPMqIRe++mMzcFb1gNegXbvKvBB+PQW0NXD4lkUJBKbkdWQRUUkU5TbGmuhCIDY2TotEqcLOw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: QB1PR01MB2739
X-C2ProcessedOrg: 69d0ae80-6330-48c3-b4f4-ab835ad9a684
X-OriginatorOrg: datavoiceint.com
X-Barracuda-Connect: UNKNOWN[10.101.210.20]
X-Barracuda-Start-Time: 1599246759
X-Barracuda-Encrypted: ECDHE-RSA-AES256-SHA384
X-Barracuda-URL: https://10.101.210.16:443/cgi-mod/mark.cgi
X-Virus-Scanned: by bsmtpd at harriscomputer.com
X-Barracuda-Scan-Msg-Size: 3368
X-Barracuda-BRTS-Status: 1
X-Spam-Status: No, score=-0.6 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 084JBTPR004432

I subscribed to this list two days ago, didn't get any response.  I posted a message titled "ssh server immediately closing connection" on Sep 2 19:49:26 GMT 2020 which received questions as a response but I never got an email so I'm having to reply with a new post - I'm sorry, I don't know what else to do.  If I need to re-submit a subscription request please let me know.

I was asked:

1) Please detail the windows service configuration.

   $ cygrunsrv -V -Q cygsshd
      Service             : cygsshd
      Display name        : CYGWIN cygsshd
      Current State       : Running
      Controls Accepted   : Stop
      Command             : /usr/sbin/sshd -D
      stdin path          : /dev/null
      stdout path         : /var/log/cygsshd.log 
      stderr path         : /var/log/cygsshd.log
      Process Type        : Own Process
      Startup             : Automatic
      Dependencies        : tcpip
      Account             : LocalSystem

     Note: /var/log/cygsshd.log is zero length

      C:\Windows\system32>sc qc cygsshd
      [SC] QueryServiceConfig SUCCESS

      SERVICE_NAME: cygsshd
              TYPE               : 10  WIN32_OWN_PROCESS
              START_TYPE         : 2   AUTO_START
              ERROR_CONTROL      : 1   NORMAL
              BINARY_PATH_NAME   : D:\cygwin\bin\cygrunsrv.exe
              LOAD_ORDER_GROUP   :
              TAG                : 0
              DISPLAY_NAME       : CYGWIN cygsshd
              DEPENDENCIES       : tcpip
              SERVICE_START_NAME : LocalSystem

2) I see that you are running as cyg_server account. Please try as SYSTEM.
      I got the same result running as system (note LocalSystem above)

3) Please confirm the issue is the same in the windows event log

Checking the log for a service with both a Local System and cyg_server, the entries were identical in detail (abbreviated)

      The description for Event ID 0 from source sshd cannot be found.
      
Running as LocalSystem:
     [ UserID]  S-1-5-18
      sshd: PID 3103: fatal: seteuid 1050745: No such device or address
Running as cyg_server:
     [ UserID]  S-1-5-21-286763150-81293845-2154422431-1017
      sshd: PID 3122: fatal: seteuid 1050745: No such device or address

I even tried running in "single instance mode" (or whatever it's called when you run sshd directly from the terminal as I did previously) and launched strace in an administrative command prompt (after determining the Windows pid with ps -W).  The result was a few zero return codes.
Leroy Tennison
Network Information/Cyber Security Specialist
E: leroy AT datavoiceint DOT com
2220 Bush Dr
McKinney, Texas
75070
www.datavoiceint.com
This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc.If you prefer not to be contacted by Harris Operating Group please notify us.
This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or 
confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message.
 
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple