Re: SSH login to cygwin sshd (6.7p1-1) fails with error seteuid1000: Operation not permitted when ~/.ssh/id_rsa keys available on client

2015-01-05 Thread Ilya Dogolazky
Read the thread Never ending SSHD story: offering public key terminates 
connection, you'll find explanation and the solution there.


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



SSH login to cygwin sshd (6.7p1-1) fails with error seteuid1000: Operation not permitted when ~/.ssh/id_rsa keys available on client

2015-01-04 Thread The Sec Maestro
SSH Login, using 'tester' account (in Adminstrators group) to the Cygwin
sshd server fails from a client machine which has ~/.ssh/id_rsa keys
available.

Login from the same client, without the id_rsa keys is successful. SSH
locally (on cygwin box) is also successful.

Comparison of the sshd logs (debugging enabled) of a good vs failure login
shows that when id_rsa is enabled on the client, the following in the
failure case:  

debug1: temporarily_use_uid: 1000/513 (e=18/544)
seteuid 1000: Operation not permitted

This seem to be related to a permission related problem, but cygcheck_output
though shows the 'tester' user is member of Administrators group.

What I am I missing?

Thanks,

Novice Cygwin user


Cygwin Configuration Diagnostics
Current System Time: Mon Jan 05 04:34:58 2015

Windows 7 Professional Ver 6.1 Build 7601 Service Pack 1

Path:   C:\Windows\system32
C:\Windows
C:\Windows\System32\Wbem
C:\Windows\System32\WindowsPowerShell\v1.0\

Output from C:\cygwin\bin\id.exe
UID: 1000(tester)   GID: 513(None)
513(None)   0(root) 544(Administrators) 545(Users)

SysDir: C:\Windows\system32
WinDir: C:\Windows

Here's some environment variables that may affect cygwin:
Path = 
'C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\'

Here's the rest of your environment variables:
ALLUSERSPROFILE = 'C:\ProgramData'
APPDATA = 'C:\Users\tester\AppData\Roaming'
CommonProgramFiles = 'C:\Program Files\Common Files'
COMPUTERNAME = 'TESTVM181'
ComSpec = 'C:\Windows\system32\cmd.exe'
FP_NO_HOST_CHECK = 'NO'
HOMEDRIVE = 'C:'
HOMEPATH = '\Users\tester'
LOCALAPPDATA = 'C:\Users\tester\AppData\Local'
LOGONSERVER = '\\TESTVM181'
NUMBER_OF_PROCESSORS = '1'
OS = 'Windows_NT'
PATHEXT = '.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC'
PROCESSOR_ARCHITECTURE = 'x86'
PROCESSOR_IDENTIFIER = 'x86 Family 6 Model 42 Stepping 7, GenuineIntel'
PROCESSOR_LEVEL = '6'
PROCESSOR_REVISION = '2a07'
ProgramData = 'C:\ProgramData'
ProgramFiles = 'C:\Program Files'
PROMPT = '$P$G'
PSModulePath = 'C:\Windows\system32\WindowsPowerShell\v1.0\Modules\'
PUBLIC = 'C:\Users\Public'
SESSIONNAME = 'Console'
SystemDrive = 'C:'
SystemRoot = 'C:\Windows'
TEMP = 'C:\Users\tester\AppData\Local\Temp'
TMP = 'C:\Users\tester\AppData\Local\Temp'
USERDOMAIN = 'TESTVM181'
USERNAME = 'tester'
USERPROFILE = 'C:\Users\tester'
windir = 'C:\Windows'
windows_tracing_flags = '3'
windows_tracing_logfile = 'C:\BVTBin\Tests\installpackage\csilogfile.log'

Scanning registry for keys with 'Cygwin' in them...
HKEY_CURRENT_USER\Software\Cygwin
HKEY_CURRENT_USER\Software\Cygwin\Program Options
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\Installations
  (default) = '\??\C:\cygwin'
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\Program Options
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\setup
  (default) = 'C:\cygwin'

obcaseinsensitive set to 1

Cygwin installations found in the registry:
  System: Key: c5e39b7a9d22bafb Path: C:\cygwin

Listing available drives...
Drv Type  Size   Used Flags  Name
a:  fd N/AN/A
c:  hd  NTFS 39897Mb  18% CP CS UN PA FC WindowsPartition
d:  cd N/AN/A

fd = floppy,  hd = hard drive,   cd = CD-ROM
net= Network Share,   ram= RAM drive,unk= Unknown
CP = Case Preserving, CS = Case Sensitive,   UN = Unicode
PA = Persistent ACLS, FC = File Compression, VC = Volume Compression

Mount entries: these map POSIX directories to your NT drives.
-NT- -POSIX--Type-  -Flags-
C:\cygwin/  system  binary,auto
C:\cygwin\bin/usr/bin   system  binary,auto
C:\cygwin\lib/usr/lib   system  binary,auto
cygdrive prefix  /cygdrive  userbinary,posix=0,auto

Looking to see where common programs can be found, if at all...
Not Found: awk
Not Found: bash
Not Found: cat
Not Found: cp
Not Found: cpp (good!)
Not Found: crontab
Found: C:\Windows\system32\find.exe
Not Found: gcc
Not Found: gdb
Not Found: grep
Not Found: kill
Not Found: ld
Not Found: ls
Not Found: make
Not Found: mv
Not Found: patch
Not Found: perl
Not Found: rm
Not Found: sed
Not Found: ssh
Not Found: sh
Not Found: tar
Not Found: test
Not Found: vi
Not Found: vim

Looking for various Cygwin DLLs...  (-v gives version info)
Warning: cygwin1.dll not found on your path

Checking for any Cygwin services... 

Service : sshd
Display name: CYGWIN sshd
Current State   : Running
Controls Accepted   : Stop
Command : /usr/sbin/sshd -D
stdin path  : /dev/null
stdout path : /var/log/sshd.log
stderr path : /var/log/sshd.log
Process Type: Own Process
Startup : Automatic
Dependencies: tcpip
Account : LocalSystem

Service : sshd2   
Display name: CYGWIN sshd_debug
Current State   : Stopped
Command : 

Re: SSH login to cygwin sshd (6.7p1-1) fails with error seteuid1000: Operation not permitted when ~/.ssh/id_rsa keys available on client

2015-01-04 Thread Andrey Repin
Greetings, The Sec Maestro!

 SSH Login, using 'tester' account (in Adminstrators group) to the Cygwin
 sshd server fails from a client machine which has ~/.ssh/id_rsa keys
 available.

Check permissions on the ~/.ssh directory and subsequent files. ssh is VERY
picky about them.
Both standard POSIX and ACL permissions.
Use setfacl -b option if necessary to strip unwanted extra ACE's.

 Login from the same client, without the id_rsa keys is successful. SSH
 locally (on cygwin box) is also successful.

 Comparison of the sshd logs (debugging enabled) of a good vs failure login
 shows that when id_rsa is enabled on the client, the following in the
 failure case:  

 debug1: temporarily_use_uid: 1000/513 (e=18/544)
 seteuid 1000: Operation not permitted

 This seem to be related to a permission related problem, but cygcheck_output
 though shows the 'tester' user is member of Administrators group.

 What am I missing?


--
WBR,
Andrey Repin (anrdae...@yandex.ru) 05.01.2015, 08:23

Sorry for my terrible english...


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple