On Tue, 15 Sep 2020 23:46:30 +0000
Peter Board via Cygwin wrote:
> Hi Stephen,
> 
> Thanks for responding. I have a standard Cygwin install on my Development 
> server (32bit and 64bit setups) that I extract the updates from for our 
> custom package and I tested for the fault after I saw it was occurring in our 
> custom Cygwin install using the standard Cygwin setup. The same errors are 
> being logged in the standard Cygwin install. I ran the Cygwin sshd 
> installation script in the standard 64bit Cygwin install, to create the 
> Cygwin OpenSSH service, authorised my user account to login and found that 
> the Windows Event logs also logged the same errors as our normal package 
> location.
> 
> I keep the standard installs on “F:\Cygwin” (32bit Cygwin) and “F:\Cygwin64” 
> (64bit Cygwin).
> 
> Our Custom Cygwin \ OpenSSH package lives on “C:\Program Files(x86)\OpenSSH”, 
> which is where we have kept it for 15+ odd years.
> 
> After setting up the Cygwin (64bit version) just using a out of the box 
> Cygwin installer on F:\Cygwin64, I setup OpenSSH using the built in 
> /bin/ssh-host-config script and then authorised my user to login to the 
> “cygsshd” service. The standard SSH service with no modifications from me, 
> produces these errors in the Windows Event Logs.
> 
> It accepted the password and logged the user in fine to bash shell. (I’ve 
> removed the hostname and username from the example below)
> 
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:26 PM
> Event ID:      0
> Task Category: None
> Level:         Information
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the 
> component that raises this event is not installed on your local computer or 
> the installation is corrupted. You can install or repair the component on the 
> local computer.
> 
> If the event originated on another computer, the display information had to 
> be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1620: Accepted password for USERNAME from X.X.X.X port 56545 ssh2
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>4</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:26.000000000Z" />
>     <EventRecordID>2427841</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer>hostname</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1620: Accepted password for USERNAME from X.X.X.X port 
> 56545 ssh2</Data>
>   </EventData>
> </Event>
> 
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:27 PM
> Event ID:      0
> Task Category: None
> Level:         Error
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the 
> component that raises this event is not installed on your local computer or 
> the installation is corrupted. You can install or repair the component on the 
> local computer.
> 
> If the event originated on another computer, the display information had to 
> be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1622: error: Failed to disconnect from controlling tty.
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>2</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:27.000000000Z" />
>     <EventRecordID>2427842</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer>hostname</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1622: error: Failed to disconnect from controlling 
> tty.</Data>
>   </EventData>
> </Event>
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:27 PM
> Event ID:      0
> Task Category: None
> Level:         Error
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the 
> component that raises this event is not installed on your local computer or 
> the installation is corrupted. You can install or repair the component on the 
> local computer.
> 
> If the event originated on another computer, the display information had to 
> be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1622: error: ioctl(TIOCSCTTY): Operation not permitted
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>2</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:27.000000000Z" />
>     <EventRecordID>2427843</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer> hostname </Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1622: error: ioctl(TIOCSCTTY): Operation not 
> permitted</Data>
>   </EventData>
> </Event>
> 
> -------------- End of Entries ------------------

What does the following command say?

cygrunsrv -V -L

-- 
Takashi Yano <takashi.y...@nifty.ne.jp>
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

Reply via email to