X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org D73903987943
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1600361522;
	bh=1+eqCR0D/hZlo9wZRGDHv7CPWmxuCsm6syL0wDjGO8k=;
	h=Date:To:Subject:In-Reply-To:References:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=Mm6HlFLeHVfDEGEhZX2t++HMKeAK2eI9B9erMVwowQLwytacnOlvhW0RW8vpSpsNd
	 qVlPtibR+hv+1zgT1txG5UVRJ6STeIU31BO9VeTA4V5MwW2ouwIiIlY16ecnwL+KST
	 jKMx6cA81sPgpxGlJc/1OVsBuAIuILoP9QLoKUdE=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 2171D3987936
DKIM-Filter: OpenDKIM Filter v2.10.3 conssluserg-02.nifty.com 08HGpR4G030123
X-Nifty-SrcIP: [124.155.38.192]
Date: Fri, 18 Sep 2020 01:51:35 +0900
To: cygwin AT cygwin DOT com
Subject: Re: Cygwin 3.1.5, 3.1.6 and 3.1.7 builds reporting tty errors with
 OpenSSH Services in indows Event Logs
Message-Id: <20200918015135.af7786b602e57b5f04af6073@nifty.ne.jp>
In-Reply-To: <SLXP216MB033485D12F6EBE5E3B0541B09A200@SLXP216MB0334.KORP216.PROD.OUTLOOK.COM>
References: <PSXP216MB0326EB9E66CDF66CED3EAA609A230 AT PSXP216MB0326 DOT KORP216 DOT PROD DOT OUTLOOK DOT COM>
 <20200915162230 DOT GA14401 AT iguana DOT crashland DOT org>
 <SLXP216MB033485D12F6EBE5E3B0541B09A200 AT SLXP216MB0334 DOT KORP216 DOT PROD DOT OUTLOOK DOT COM>
X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-mingw32)
Mime-Version: 1.0
X-Spam-Status: No, score=-1.0 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, NICE_REPLY_A,
 RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Takashi Yano via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Takashi Yano <takashi DOT yano AT nifty DOT ne DOT jp>
Cc: Peter Board <p_board AT hotmail DOT com>
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>

On Tue, 15 Sep 2020 23:46:30 +0000
Peter Board via Cygwin wrote:
> Hi Stephen,
> 
> Thanks for responding. I have a standard Cygwin install on my Development server (32bit and 64bit setups) that I extract the updates from for our custom package and I tested for the fault after I saw it was occurring in our custom Cygwin install using the standard Cygwin setup. The same errors are being logged in the standard Cygwin install. I ran the Cygwin sshd installation script in the standard 64bit Cygwin install, to create the Cygwin OpenSSH service, authorised my user account to login and found that the Windows Event logs also logged the same errors as our normal package location.
> 
> I keep the standard installs on “F:\Cygwin” (32bit Cygwin) and “F:\Cygwin64” (64bit Cygwin).
> 
> Our Custom Cygwin \ OpenSSH package lives on “C:\Program Files(x86)\OpenSSH”, which is where we have kept it for 15+ odd years.
> 
> After setting up the Cygwin (64bit version) just using a out of the box Cygwin installer on F:\Cygwin64, I setup OpenSSH using the built in /bin/ssh-host-config script and then authorised my user to login to the “cygsshd” service. The standard SSH service with no modifications from me, produces these errors in the Windows Event Logs.
> 
> It accepted the password and logged the user in fine to bash shell. (I’ve removed the hostname and username from the example below)
> 
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:26 PM
> Event ID:      0
> Task Category: None
> Level:         Information
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
> 
> If the event originated on another computer, the display information had to be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1620: Accepted password for USERNAME from X.X.X.X port 56545 ssh2
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>4</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:26.000000000Z" />
>     <EventRecordID>2427841</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer>hostname</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1620: Accepted password for USERNAME from X.X.X.X port 56545 ssh2</Data>
>   </EventData>
> </Event>
> 
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:27 PM
> Event ID:      0
> Task Category: None
> Level:         Error
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
> 
> If the event originated on another computer, the display information had to be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1622: error: Failed to disconnect from controlling tty.
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>2</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:27.000000000Z" />
>     <EventRecordID>2427842</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer>hostname</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1622: error: Failed to disconnect from controlling tty.</Data>
>   </EventData>
> </Event>
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:27 PM
> Event ID:      0
> Task Category: None
> Level:         Error
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
> 
> If the event originated on another computer, the display information had to be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1622: error: ioctl(TIOCSCTTY): Operation not permitted
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>2</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:27.000000000Z" />
>     <EventRecordID>2427843</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer> hostname </Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1622: error: ioctl(TIOCSCTTY): Operation not permitted</Data>
>   </EventData>
> </Event>
> 
> -------------- End of Entries ------------------

What does the following command say?

cygrunsrv -V -L

-- 
Takashi Yano <takashi DOT yano AT nifty DOT ne DOT jp>
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple