Re: sshd permits logon using disabled user?

2019-01-24 Thread matthew patton via cygwin
> I think refusing an account manually and deliberately disabled by an > admin makes lots of sense. Why is this even a discussion? You *ALWAYS* refuse a login to an account that is disabled, locked out, or has an expired password or failed any of the other criteria that might be in effect (day

[ANNOUNCEMENT] Updated: libcerf-1.11-1

2019-01-24 Thread Achim Gratz
This is an update to the latest upstream version. Libcerf is a self-contained numeric library that provides an efficient and accurate implementation of complex error functions, along with Dawson, Faddeeva, and Voigt functions. -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you w

Re: find_fast_cwd error

2019-01-24 Thread Marco Atzeri
Am 24.01.2019 um 19:48 schrieb Pudingos Stand: Hello, i got this error several times with the Joh the ripper program and i couldn't seem to find a fix online. 2 [main] john 8388 find_fast_cwd: WARNING: Couldn't compute FAST_CWD pointer. Please report this problem to the public mailing list cy

Flask app no longer working from cygwin when set to developer mode

2019-01-24 Thread Maxim Kupfer
This problem occurred immediately after attempting to run my python flask app in the backround (i.e $python app.py &) It gave me the following error: 2 [main] python3.6m 11340 child_info_fork::abort: unable to remap _lbfgsb.cpython-36m-x86_64-cygwin.dll to same address as parent (0x493) - t

Re: sshd permits logon using disabled user?

2019-01-24 Thread Bill Stewart
On Thu, Jan 24, 2019 at 1:23 PM Corinna Vinschen wrote: > I should have tested pubkey auth as well but as it was I just tested > with pathword auth. These methods take slightly different paths in > Cygwin when trying to switch the user account. > > I pushed another patch and created new snapshot

Re: sshd permits logon using disabled user?

2019-01-24 Thread Corinna Vinschen
On Jan 24 09:48, Bill Stewart wrote: > Hello Corinna, > > I performed the following steps: > > 1. Downloaded cygwin-20190124.tar.xz > 2. Extracted it > 3. Stopped sshd > 4. Renamed existing /bin/cygwin1.dll to cygwin1-20181108.dll > 5. Copied cygwin1.dll from downloa

Re: sshd permits logon using disabled user?

2019-01-24 Thread Stefan Baur
Am 24.01.19 um 20:17 schrieb Wayne Davison: >> I don't think Windows natively supports password-free logons using only key >> files (but I might be wrong about that). > Don't forget that sshd_config fully supports disabling passwords. You > can turn a password off for a single user via: > > Match

Re: sshd permits logon using disabled user?

2019-01-24 Thread Wayne Davison
On Thu, Jan 24, 2019 at 10:13 AM Bill Stewart wrote: > I don't think Windows natively supports password-free logons using only key > files (but I might be wrong about that). Don't forget that sshd_config fully supports disabling passwords. You can turn a password off for a single user via: Match

Re: iperf 2.0.13 available

2019-01-24 Thread Achim Gratz
Bob McMahon writes: > We've done a lot of work to make iperf 2.0.13 work well on cygwin. There > are also a lot of new features relevant to the WiFi testing community. Is > there a contact on how to get this distributed via cgywin apps? Either the current maintainer does an update or, if that do

find_fast_cwd error

2019-01-24 Thread Pudingos Stand
Hello, i got this error several times with the Joh the ripper program and i couldn't seem to find a fix online. 2 [main] john 8388 find_fast_cwd: WARNING: Couldn't compute FAST_CWD pointer. Please report this problem to the public mailing list cygwin@cygwin.com 0 password hashes cracked, 0 left

Re: sshd permits logon using disabled user?

2019-01-24 Thread Bill Stewart
On Thu, Jan 24, 2019 at 10:58 AM Stefan Baur wrote: That sounds like the total opposite - allowing login without a password. > > Now, if there was a flag PASSWD_NOTPERMITTED or something like that, > then we'd be able to emulate what can be done on Linux with "passwd -l > username" and an ssh key

Re: sshd permits logon using disabled user?

2019-01-24 Thread Stefan Baur
Am 24.01.19 um 18:52 schrieb Bill Stewart: > If you want to have an account that does not require a password, there is a > separate flag for that - PASSWD_NOTREQD - although setting this may be > prohibited by policy. That sounds like the total opposite - allowing login without a password. Now, i

Re: sshd permits logon using disabled user?

2019-01-24 Thread Bill Stewart
Corinna Vinschen wrote: > This description sounds extremly artificial to me. We should work under the > assumption that the admin is the good guy. Usually a user locks itself out, > or is locked out by a malicious login attempt. The admin can only define > rules for locking out, other than that

Re: CYGWIN slow when accessing network share

2019-01-24 Thread J. David Boyd
db...@attentigroup.com (J. David Boyd) writes: > Brian Inglis writes: > >> >> Network access may be slowed down by accessing AD. >> Install and run cygserver at system startup to cache and share Cygwin AD info >> across processes. > > I don't see any cygserver options in the config file that rela

Re: sshd permits logon using disabled user?

2019-01-24 Thread Stefan Baur
Am 24.01.19 um 17:36 schrieb Corinna Vinschen: >> If an admin can lock out an account (separately from disabling it >> entirely), say, by setting an initial password, checking the "user must >> change password on first login", and also checking "user is not allowed >> to change password" simultaneo

Re: sshd permits logon using disabled user?

2019-01-24 Thread Bill Stewart
Hello Corinna, I performed the following steps: 1. Downloaded cygwin-20190124.tar.xz 2. Extracted it 3. Stopped sshd 4. Renamed existing /bin/cygwin1.dll to cygwin1-20181108.dll 5. Copied cygwin1.dll from download to /bin 6. Started sshd Did I miss anything? It still allows logon with disabled

RE: script.exe is missing from util-linux 2.32.1-1

2019-01-24 Thread Buchbinder, Barry (NIH/NIAID) [E]
Rusty Lemur sent the following at Thursday, January 24, 2019 11:30 AM > >I noticed that script.exe is not included in util-linux 2.32.1-1. I had >to downgrade to util-linux 2.25.2-2 before it was installed. This is >a tool that I use heavily, so if it is being migrated to a different >package (not

Re: sshd permits logon using disabled user?

2019-01-24 Thread Corinna Vinschen
On Jan 24 17:16, Stefan Baur wrote: > Am 24.01.19 um 16:59 schrieb Corinna Vinschen: > > I think refusing an account manually and deliberately disabled by an > > admin makes lots of sense. > > > > I'm not so sure about locked out accounts. THis might need some > > discussion. > > It's been a whi

script.exe is missing from util-linux 2.32.1-1

2019-01-24 Thread Rusty Lemur
To whom it may concern: I noticed that script.exe is not included in util-linux 2.32.1-1. I had to downgrade to util-linux 2.25.2-2 before it was installed. This is a tool that I use heavily, so if it is being migrated to a different package (not util-linux), please let me know what I should ins

Re: sshd permits logon using disabled user?

2019-01-24 Thread Stefan Baur
Am 24.01.19 um 16:59 schrieb Corinna Vinschen: > I think refusing an account manually and deliberately disabled by an > admin makes lots of sense. > > I'm not so sure about locked out accounts. THis might need some > discussion. It's been a while since I did Windows administration, so I can't re

Re: sshd permits logon using disabled user?

2019-01-24 Thread Corinna Vinschen
On Jan 24 16:51, Stefan Baur wrote: > Am 24.01.19 um 16:45 schrieb Corinna Vinschen: > >> In the shell, logged on as the disabled user, the 'whoami' command returns > >> the name of the disabled user. > >> > >> This seems unexpected and not good. > >> > >> Why does sshd allow logon for a disabled u

Re: sshd permits logon using disabled user?

2019-01-24 Thread Stefan Baur
Am 24.01.19 um 16:45 schrieb Corinna Vinschen: >> In the shell, logged on as the disabled user, the 'whoami' command returns >> the name of the disabled user. >> >> This seems unexpected and not good. >> >> Why does sshd allow logon for a disabled user? > Because the underlying Cygwin function resp

Re: sshd permits logon using disabled user?

2019-01-24 Thread Corinna Vinschen
On Jan 24 06:28, Bill Stewart wrote: > I am running Windows 10 (1803) and experimenting with sshd installed as a > Windows service. > > The computer is a domain member. I created a local computer account for > testing. > > I created host keys and a public/private key pair to use to log on the use

Re: iperf 2.0.13 available

2019-01-24 Thread Richard Campbell
While iperf may have a maintainer listed (Joel Johnson), I only see one release from him and no mailing list posts since that 2015 upload, so iperf may be orphaned again. At the time Joel noted that 2.0.5 was the last version prior to a fork, but that he deliberately didn't pick that version due t

sshd permits logon using disabled user?

2019-01-24 Thread Bill Stewart
I am running Windows 10 (1803) and experimenting with sshd installed as a Windows service. The computer is a domain member. I created a local computer account for testing. I created host keys and a public/private key pair to use to log on the user. This works, except I notice that if I disable t

Re: CYGWIN slow when accessing network share

2019-01-24 Thread J. David Boyd
Brian Inglis writes: > > Network access may be slowed down by accessing AD. > Install and run cygserver at system startup to cache and share Cygwin AD info > across processes. I don't see any cygserver options in the config file that relate to AD. What am I missing? Thanks for the info! Dave