Re: messed up user permissions from w2k terminal session
Hi,
Le mer 08 oct 2003 19:45:46 GMT, Pierre A. Humblet a tapoté sur son clavier :
On Fri, Oct 03, [EMAIL PROTECTED]:48:43PM -0400, James D Below wrote:
HI everyone,
I'm not sure how I did it but I messed up my user permissions or local
policy settings. Now whenever I run any cygwin app (bash.exe, wc.exe,
rxvt.exe) from a w2k terminal session and logged in as a user, I see the
following error:
CreateFileMapping, Win32 error 5. Terminating.
I'm running Windows 2000 SP4 and CYGWIN = binmode tty ntsec
This problem has now been explained with James' help and this message
is to close the thread.
It turns out that on some recent Windows systems a special privilege,
create global objects, is required to run Cygwin 1.5.X from
a terminal session. It can be given to users with the editrights.exe
utility.
Hmmm. I can't find such right. editrights gives me this list:
editrights version 1.01: a cygwin application to edit user rights
on a Windows NT system.
Copyright Chris Rodgers editrights-at-bulk.rodgers.org.uk, Sep, 2003.
All rights reserved. See LICENCE for further details.
Usage: editrights -u USER {-a|-l|-r|-t} [options]
-a Se... Add right to the specified user.
-h Show this help message. -hv lists available user rights.
-l List user rights. May be combined with -a or
-r to list final state.
-m MACHINE Make all changes on the specified MACHINE.
-r Se... Remove right from the specified user.
-t Se... Test if the specified right is held by user. Returns
0 for YES and 2 for NO.
-u USER/GROUPMake changes to the specified USER or GROUP.
-v Verbose mode.
Return values:
0 Success or YES.
1 Error.
2 NO.
Available user rights include:
SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeBackupPrivilege
SeBatchLogonRight
SeChangeNotifyPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeCreateTokenPrivilege
SeDebugPrivilege
SeDenyBatchLogonRight
SeDenyInteractiveLogonRight
SeDenyNetworkLogonRight
SeDenyRemoteInteractiveLogonRight
SeDenyServiceLogonRight
SeEnableDelegationPrivilege
SeIncreaseBasePriorityPrivilege
SeIncreaseQuotaPrivilege
SeInteractiveLogonRight
SeLoadDriverPrivilege
SeLockMemoryPrivilege
SeMachineAccountPrivilege
SeManageVolumePrivilege
SeNetworkLogonRight
SeProfileSingleProcessPrivilege
SeRemoteInteractiveLogonRight
SeRemoteShutdownPrivilege
SeRestorePrivilege
SeSecurityPrivilege
SeServiceLogonRight
SeShutdownPrivilege
SeSyncAgentPrivilege
SeSystemEnvironmentPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeTakeOwnershipPrivilege
SeTcbPrivilege
SeUndockPrivilege
SeUnsolicitedInputPrivilege
Which one should be set ?
Regards,
Samuel Thibault
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
Re: messed up user permissions from w2k terminal session
On Mon, Nov 17, 2003 at 04:37:48PM +0100, Samuel Thibault wrote: Le mer 08 oct 2003 19:45:46 GMT, Pierre A. Humblet a tapot? sur son clavier : It turns out that on some recent Windows systems a special privilege, create global objects, is required to run Cygwin 1.5.X from a terminal session. It can be given to users with the editrights.exe utility. Hmmm. I can't find such right. editrights gives me this list: The right only exists beginning with 2003 Server. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Developermailto:[EMAIL PROTECTED] Red Hat, Inc. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: messed up user permissions from w2k terminal session
On Fri, Oct 03, 2003 at 04:48:43PM -0400, James D Below wrote: HI everyone, I'm not sure how I did it but I messed up my user permissions or local policy settings. Now whenever I run any cygwin app (bash.exe, wc.exe, rxvt.exe) from a w2k terminal session and logged in as a user, I see the following error: CreateFileMapping, Win32 error 5. Terminating. I'm running Windows 2000 SP4 and CYGWIN = binmode tty ntsec This problem has now been explained with James' help and this message is to close the thread. It turns out that on some recent Windows systems a special privilege, create global objects, is required to run Cygwin 1.5.X from a terminal session. It can be given to users with the editrights.exe utility. Pierre -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: messed up user permissions from w2k terminal session
In further troubleshooting, I verified the w2k sp4 the policy settings with
another w2k sp4 system that works. No differences were found. I did find
that the version of cygwin that I was running was different. The version of
cygwin on the working system is 1.3.22-1.
I removed my broken installation of cygwin 1.5.5.1 and installed 1.3.22-1
and my system function correctly. No more CreateFileMapping - Win32 error 5.
I have attached the cygcheck from the working installation as cygcheck.good
I have attached the cygcheck from the broken installation as cygcheck.bad
Just to verify that 1.5.5.1 still didn't work, I updated the working
1.3.22-1 installation and sure enough the CreateFileMapping error
occurred. I also tried the 1.5.4.1 version and that also had this same error.
Here is a getfacl and a ls of ls.exe
getfacl /bin/ls.exe
# file: /bin/ls.exe
# owner: Administrator
# group: Users
user::---
group::---
mask:rwx
other:rwx
/bin/ls -l /bin/ls
-rwxrwxrwx1 Administ Users 68608 Jun 15 2001 /bin/ls
I have never installed/built cygwin from snapshot. I'll give it a try and
get back with you.
thanks.
At 05:12 PM 10/3/2003 -0400, Igor Pechtchanski wrote:
On Fri, 3 Oct 2003, James D Below wrote:
HI everyone,
I'm not sure how I did it but I messed up my user permissions or local
policy settings. Now whenever I run any cygwin app (bash.exe, wc.exe,
rxvt.exe) from a w2k terminal session and logged in as a user, I see the
following error:
CreateFileMapping, Win32 error 5. Terminating.
I'm running Windows 2000 SP4 and CYGWIN = binmode tty ntsec
More specific details
If I am logged into the console I can run any cygwin apps. When I log in
remotely to the server through ssh, everything is fine. The only time a
problem occurs is when I login through a terminal server client using an
account other than Administrator. The administrator account doesn't
experience problem. A user account belonging in the Administrators
group does.
I am at a loss trying to figure out which policy/permission was changed to
cause this problem.
I've been google'ing for a few days trying to track down what might have
changed but to no avail.
Any hints on troubleshooting errors like this or an idea as to what
permission/policy is needed for CreateFileMapping, would be appreciated.
If a cygcheck would be helpful let me know and I will send one.
thanks
James
A cygcheck output wouldn't hurt in any case (please attach it, though,
rather than including it inline), but another piece of information that
might help is the output of ls -l /bin/ls.exe; getfacl /bin/ls.exe.
BTW, net helpmsg 5 results in Access is denied.
Igor
--
http://cs.nyu.edu/~pechtcha/
|\ _,,,---,,_[EMAIL PROTECTED]
ZZZzz /,`.-'`'-. ;-;;,_[EMAIL PROTECTED]
|,4- ) )-,_. ,\ ( `'-' Igor Pechtchanski, Ph.D.
'---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow!
I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster. -- Patrick Naughton
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
cygcheck.good
Description: Binary data
Cygwin Win95/NT Configuration Diagnostics
Current System Time: Mon Oct 06 09:59:59 2003
Windows 2000 Server Ver 5.0 Build 2195 Service Pack 4
Path: H:\cygwin\usr\local\bin
H:\cygwin\bin
H:\cygwin\bin
H:\cygwin\usr\X11R6\bin
h:\Program Files\Common Files\VERITAS Shared
h:\PROGRA~1\VERITAS\NetBackup\bin
h:\Program Files\Microsoft Visual Studio\Common\Tools
h:\Program Files\Microsoft Visual Studio\Common\Msdev98\BIN
h:\Program Files\Microsoft Visual Studio\DF98\BIN
h:\Program Files\Microsoft Visual Studio\VC98\BIN
h:\WINNT\system32
h:\WINNT
h:\WINNT\System32\Wbem
h:\Program Files\Rational\ClearCase\bin
h:\Program Files\Common Files\Adaptec Shared\System
h:\Program Files\Microsoft Visual Studio\Common\Msdev98\Bin
x:\dev\bin
h:\mico\win32-bin
Output from H:\cygwin\bin\id.exe (nontsec)
UID: 500(Administrator) GID: 1105(ncp)
512(Domain Admins)
513(Domain Users) 519(Enterprise Admins)
520(Group Policy Creator Owners)
1105(ncp) 518(Schema Admins)
Output from H:\cygwin\bin\id.exe (ntsec)
UID: 500(Administrator) GID: 1105(ncp)
512(Domain Admins)
513(Domain Users) 519(Enterprise Admins)
520(Group Policy Creator Owners)
1105(ncp) 518(Schema Admins)
SysDir: H:\WINNT\system32
WinDir: H:\Documents and Settings\administrator.NPSS\WINDOWS
HOME = `H:\cygwin\u\Administrator'
MAKE_MODE = `unix'
PWD = `/u/Administrator'
USER
Re: messed up user permissions from w2k terminal session
Hi Pierre, I forgot to clarify the user account differences. Ignore my first post regarding the Administrators group. I thought I had put my id in the admin group but I must have hit cancel because when I checked today it wasn't there. If the user account is in an admin group (Domain admins or Administrators ) then everything is fine. In your initial post you wrote The administrator account doesn't experience problem. A user account belonging in the Administrators group does. Is the most recent experiment, is the user in question in the Administrators group? Also, prior to launching H:\cygwin\cywin.bat, is there any other Cygwin process running under that user name on the machine? nope, no other processes. Could you try again when there is absolutely no Cygwin process running? When I walk up to the console and login, cywin 1.5.5.1 runs just fine. The problem does *not* occur in version cygwin version 1.3.22-1 Yep, a security hole was fixed in recent versions, but somehow now there is too much security. I have a theory but I don't have easy access to a terminal server to experiment. So here are two more questions; 1) When you run 1.3.22 and you do ps -a from a Terminal Server session, do you see all Cygwin processes on the machine or only yours? Only mine, only the ones that I have launched from my window/login session. I don't see my process in my other terminal windows. 2) With 1.5.5, can you run simple Cygwin processes, such as ps or cat, from the cmd prompt window? nope, only from an account with admin privileges It appears the privilege that is assigned to a user from a terminal session is different than that of the same user logging in directly at the console. I hope this helps. thanks. james -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
messed up user permissions from w2k terminal session
HI everyone, I'm not sure how I did it but I messed up my user permissions or local policy settings. Now whenever I run any cygwin app (bash.exe, wc.exe, rxvt.exe) from a w2k terminal session and logged in as a user, I see the following error: CreateFileMapping, Win32 error 5. Terminating. I'm running Windows 2000 SP4 and CYGWIN = binmode tty ntsec More specific details If I am logged into the console I can run any cygwin apps. When I log in remotely to the server through ssh, everything is fine. The only time a problem occurs is when I login through a terminal server client using an account other than Administrator. The administrator account doesn't experience problem. A user account belonging in the Administrators group does. I am at a loss trying to figure out which policy/permission was changed to cause this problem. I've been google'ing for a few days trying to track down what might have changed but to no avail. Any hints on troubleshooting errors like this or an idea as to what permission/policy is needed for CreateFileMapping, would be appreciated. If a cygcheck would be helpful let me know and I will send one. thanks James -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: messed up user permissions from w2k terminal session
On Fri, 3 Oct 2003, James D Below wrote:
HI everyone,
I'm not sure how I did it but I messed up my user permissions or local
policy settings. Now whenever I run any cygwin app (bash.exe, wc.exe,
rxvt.exe) from a w2k terminal session and logged in as a user, I see the
following error:
CreateFileMapping, Win32 error 5. Terminating.
I'm running Windows 2000 SP4 and CYGWIN = binmode tty ntsec
More specific details
If I am logged into the console I can run any cygwin apps. When I log in
remotely to the server through ssh, everything is fine. The only time a
problem occurs is when I login through a terminal server client using an
account other than Administrator. The administrator account doesn't
experience problem. A user account belonging in the Administrators group does.
I am at a loss trying to figure out which policy/permission was changed to
cause this problem.
I've been google'ing for a few days trying to track down what might have
changed but to no avail.
Any hints on troubleshooting errors like this or an idea as to what
permission/policy is needed for CreateFileMapping, would be appreciated.
If a cygcheck would be helpful let me know and I will send one.
thanks
James
A cygcheck output wouldn't hurt in any case (please attach it, though,
rather than including it inline), but another piece of information that
might help is the output of ls -l /bin/ls.exe; getfacl /bin/ls.exe.
BTW, net helpmsg 5 results in Access is denied.
Igor
--
http://cs.nyu.edu/~pechtcha/
|\ _,,,---,,_[EMAIL PROTECTED]
ZZZzz /,`.-'`'-. ;-;;,_[EMAIL PROTECTED]
|,4- ) )-,_. ,\ ( `'-' Igor Pechtchanski, Ph.D.
'---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow!
I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster. -- Patrick Naughton
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
Re: messed up user permissions from w2k terminal session
On Fri, Oct 03, 2003 at 04:48:43PM -0400, James D Below wrote: HI everyone, I'm not sure how I did it but I messed up my user permissions or local policy settings. Now whenever I run any cygwin app (bash.exe, wc.exe, rxvt.exe) from a w2k terminal session and logged in as a user, I see the following error: CreateFileMapping, Win32 error 5. Terminating. I'm running Windows 2000 SP4 and CYGWIN = binmode tty ntsec More specific details If I am logged into the console I can run any cygwin apps. When I log in remotely to the server through ssh, everything is fine. The only time a problem occurs is when I login through a terminal server client using an account other than Administrator. The administrator account doesn't experience problem. A user account belonging in the Administrators group does. You don't say what version of Cygwin you are using. If it's a recent one, could you try a snapshot? The problem may be fixed since 9/26. Pierre -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
