X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 179AA3858C39
Authentication-Results: sourceware.org; dmarc=none (p=none dis=none)
 header.from=SystematicSw.ab.ca
Authentication-Results: sourceware.org;
 spf=none smtp.mailfrom=systematicsw.ab.ca
X-Authority-Analysis: v=2.4 cv=I4EG+Psg c=1 sm=1 tr=0 ts=6142344f
 a=T+ovY1NZ+FAi/xYICV7Bgg==:117 a=T+ovY1NZ+FAi/xYICV7Bgg==:17
 a=IkcTkHD0fZMA:10 a=94nOnFI1EgyDtX4ev68A:9 a=QEXdDO2ut3YA:10
To: cygwin AT cygwin DOT com
References: <f5bwnnla1qa DOT fsf AT ecclerig DOT inf DOT ed DOT ac DOT uk>
From: Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Organization: Systematic Software
Subject: Re: Can't ssh to cygwin after switching sign-in to Windows Hello PIN
Message-ID: <74a78044-5ddd-c2f0-1d1b-bdb092a8c2b2@SystematicSw.ab.ca>
Date: Wed, 15 Sep 2021 11:58:38 -0600
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.14.0
MIME-Version: 1.0
In-Reply-To: <f5bwnnla1qa.fsf@ecclerig.inf.ed.ac.uk>
Content-Language: en-CA
X-CMAE-Envelope: MS4xfAColtcMFiJgdGwhHwiyah0D89h0rfl7nRrYsetQHKKzq538uNlElP88Yw99ktE8AcWs2z0JKcIr1Q0+zgRKMpDJ/mXWOtax+LbdvLI3v57d89GlDZlr
 oI6WJhonwNVpovzuSeuiSUHJgbszFMiD5M4GXUls9Pc7aUQi26IBmmVyLDesZW3B7Sdrnx+X8ECeBXp4HfZTcG5XbiV7pNzs09w=
X-Spam-Status: No, score=-1161.7 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 KAM_LAZY_DOMAIN_SECURITY, NICE_REPLY_A, RCVD_IN_BARRACUDACENTRAL,
 RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_HELO_NONE,
 SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On 2021-09-12 16:05, Henry S. Thompson via Cygwin wrote:
> Running cygwin 3.2.0-1 on Windows 10 Pro 21H1
> Since changing my login from local User to Windows Hello PIN, I can't
> ssh in to my machine using a password:  neither the PIN nor my old
> password work:
>    1) If from my machine I do
>            ssh -o PreferredAuthentications=password localhost
>       or
>            ssh -o PreferredAuthentications=password [me]@[host]
>       or
>            ssh -o PreferredAuthentications=password U-[HOST]\\[me]@[host]
>       I get "permission denied".
>    2) If I try any of those from another machine, it hangs (but works
>       w/o the "-o PreferredAuthentications=password", i.e. using a
>       key).  By 'hangs' I mean that having typed the PIN and Enter,
>       nothing happens, including no output if I include -v -v -v.
>       Weirder still, if I try using strace, communication happens and I
>       get "permission denied"
> I have reinstalled openssh, removed the cygsshd service, re-run
> ssh-host-config and restarted the service to no avail.
> I only need password login to install new keys, and obviously there
> are workarounds for that, but if there's just something I'm missing
> I'd like to fix it.
> Are there other things I need to worry about having switched to using
> a PIN?

Checkout whatever you can find out from Microsoft about connecting to 
Windows using Windows OpenSSH and Hello.

You may have to use SSH as intended:
add your host key to remote {~/.ssh,/etc/ssh}/known_hosts;
and your public key to remote ~/.ssh/authorized_keys{,2};
locally do the equivalent of eval `ssh-agent` and ssh-add ~/.ssh/id_...; 
then use your client to connect.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple