sshd w/o admin?

2009-02-17 Thread Aaron Davies
is it possible to get sshd working w/o admin privs? i've run ssh-host-config (without creating a new user) and started sshd manually from the shell. when i try to connect, i get Connection closed by 127.0.0.1 and an error sshd: PID 6520: fatal: seteuid 45758: Permission denied shows up

cygwin-1.7, sshd, tcpd, and IPv6/Vista

2008-12-30 Thread Charles Wilson
Noticed an odd behavior when setting up cygwin-1.7 and sshd. Because cygwin-1.7 (and the cygwin-1.7 flavors of openssh and tcp_wrappers) support IPv6 when the underlying host OS supports it...the default /etc/hosts.allow paranoid setting matches for localhost. That is, 'ssh localhost' is denied

Re: cygwin-1.7, sshd, tcpd, and IPv6/Vista

2008-12-30 Thread Antonio Querubin
of an alternate explanation (perhaps this is a bug in cygwin-1.7's resolver code, or a bug I haven't spotted in tcpd?) Am I being too blase' about modifying hosts.allow as ALL : 127.0.0.1/32 : allow ALL : [::1]/128 : allow ALL : PARANOID : deny sshd: all or, am I right that doing so is perfectly

sshd can not be stopped

2008-12-13 Thread Matthias Meyer
Hi, I've installed a sshd service by: cygrunsrv -I sshd -t auto -y tcpip -O -p /bin/sshd and it work. But I can not stopp the service. cygrunsrv -E sshd seems to work but sshd stay in the Windows process list (Task Manager). In adition I can not start the service again. If I kill the sshd process

Re: Help needed: first time tried sshd and got stuck not far from the beginning...

2008-12-01 Thread stevench2000
: stevench2000 wrote: Thanks to both of you for the tips. After adding the -ddd option in invoking sshd in the ssh-host-config, I was able to see this error message from the log: 17 [main] sshd 42180 child_copy: linked dll data write copy failed, 0x24500 0..0x2452E0, done 0, windows pid 42200

Re: Help needed: first time tried sshd and got stuck not far from the beginning...

2008-11-30 Thread stevench2000
Thanks to both of you for the tips. After adding the -ddd option in invoking sshd in the ssh-host-config, I was able to see this error message from the log: 17 [main] sshd 42180 child_copy: linked dll data write copy failed, 0x24500 0..0x2452E0, done 0, windows pid 42200, Win32 error 487

Re: Help needed: first time tried sshd and got stuck not far from the beginning...

2008-11-30 Thread Larry Hall (Cygwin)
stevench2000 wrote: Thanks to both of you for the tips. After adding the -ddd option in invoking sshd in the ssh-host-config, I was able to see this error message from the log: 17 [main] sshd 42180 child_copy: linked dll data write copy failed, 0x24500 0..0x2452E0, done 0, windows pid

Help needed: first time tried sshd and got stuck not far from the beginning...

2008-11-29 Thread stevench2000
Hi, good day. my systme is vista 32bit as Admin, I downloaded the sshd packages and installed them - opened cygwin bash as administrator - ran ssh-host-config -y and accepted overwriting to /etc/sshd_config and /etc/inetd.d/sshd-inetd when asked - ran ssh-user-config -y and used empty passphrase

Re: Help needed: first time tried sshd and got stuck not far from the beginning...

2008-11-29 Thread Matthias Meyer
stevench2000 wrote: Hi, good day. my systme is vista 32bit as Admin, I downloaded the sshd packages and installed them - opened cygwin bash as administrator - ran ssh-host-config -y and accepted overwriting to /etc/sshd_config and /etc/inetd.d/sshd-inetd when asked - ran ssh-user

Re: Help needed: first time tried sshd and got stuck not far from the beginning...

2008-11-29 Thread Larry Hall (Cygwin)
On 11/29/2008, Matthias Meyer wrote: Please go to your server and run /usr/sbin/sshd -ddd -D Maybee your ssh-server say something about the reason. This won't work. You'll need to set up a new service which invokes 'sshd' with the above debug flags and start that service instead. See 'ssh

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-20 Thread Corinna Vinschen
On Nov 19 17:38, Herb Maeder wrote: On 14 Nov 2008 10:53:12 +0100, Corinna Vinschen wrote: Actually this isn't a ssh-host-config problem, but a generic problem for all admin tasks. Installing any service requires elevation, or running in a Admin shell. I'm not really convinced that we

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-20 Thread Herb Maeder
On 20 Nov 2008 11:37:23 +0100, Corinna Vinschen wrote: Note, I'm not requesting any changes. I'm just trying to understand if we could/should establish guidelines for admin tasks requiring elevation. All nice points but I don't think that you have to convince anybody that better

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-20 Thread Matthew Woehlke
Herb Maeder wrote: Any code requiring elevation is obviously already cygwin specific. How so? There are tools on Linux that are only useful if run as root; how is that significantly different? (Especially on SELinux systems where rights are much more complicated than in the traditional UNIX

Re: Cygwin sshd key auth doesn't work (seteuid 500: Permission denied)

2008-11-19 Thread Tomàs Núñez
sshd: PID 8272: fatal: seteuid 500: Permission denied. Did you configure your SSH installation with ssh-host-config? How about your user with ssh-user-config? I did indeed. When I run ssh daemon as a user, in order to debug, I get that: [EMAIL PROTECTED] ~/$ /usr/sbin/sshd.exe

Re: Cygwin sshd key auth doesn't work (seteuid 500: Permission denied) [SOLVED]

2008-11-19 Thread Tomàs Núñez
Hi I've found this doc http://ist.uwaterloo.ca/~kscully/CygwinSSHD_W2K3.html and followed the part of privilege separation. After that, everything worked fine with key auth. Thanks anyway!! Tomàs En/na Tomàs Núñez ha escrit: sshd: PID 8272: fatal: seteuid 500: Permission denied. Did

Re: Cygwin sshd key auth doesn't work (seteuid 500: Permission denied) [SOLVED]

2008-11-19 Thread Larry Hall (Cygwin)
On 11/19/2008, Tomàs Núñez wrote: I've found this doc http://ist.uwaterloo.ca/~kscully/CygwinSSHD_W2K3.html and followed the part of privilege separation. After that, everything worked fine with key auth. It's always recommended that you stick with the defaults of the configuration scripts

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-19 Thread Herb Maeder
On 13 Nov 2008 11:35:43 +0100, Corinna Vinschen wrote: Looking ahead, I suspect that this combo (sshd + 1.7 + vista + domain user) will be pretty common. Is there a plan for steering users in the right direction during the setup of sshd, or maybe giving a more descriptive error message

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-19 Thread Herb Maeder
On 14 Nov 2008 10:53:12 +0100, Corinna Vinschen wrote: Actually this isn't a ssh-host-config problem, but a generic problem for all admin tasks. Installing any service requires elevation, or running in a Admin shell. I'm not really convinced that we need it. Admins running admin tasks should

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-14 Thread Corinna Vinschen
On Nov 13 15:48, Herb Maeder wrote: Still, even with these drawbacks, something like this might be useful for us in ssh-host-config. If the invoking shell is already elevated, things will pretty much work the way they do now. But if it is invoked from a normal shell, the user would get

Cygwin sshd key auth doesn't work (seteuid 500: Permission denied)

2008-11-14 Thread Tomàs Núñez
Hi I am trying to connect to a Cygwin sshd server using key authentication, but I can't. When I use password authentication, it works great, but I need to run some unattended processes, so key auth is mandatory. When I try to connect, I get that: [EMAIL PROTECTED]:~/.ssh$ ssh [EMAIL

Re: Cygwin sshd key auth doesn't work (seteuid 500: Permission denied)

2008-11-14 Thread Larry Hall (Cygwin)
Tomàs Núñez wrote: Hi I am trying to connect to a Cygwin sshd server using key authentication, but I can't. When I use password authentication, it works great, but I need to run some unattended processes, so key auth is mandatory. When I try to connect, I get that: [EMAIL PROTECTED]:~/.ssh

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-13 Thread Corinna Vinschen
On Nov 13 11:35, Corinna Vinschen wrote: On Nov 12 16:57, Herb Maeder wrote: Bum deal. But thanks for the explanation. That clarifies what I was seeing. Actually there is a way to elevate a console application which is the manifest file. Unfortunately this only works for executables,

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-13 Thread Corinna Vinschen
. And if you don't have access to such an account, the best you can do is fire up sshd as yourself (or perhaps one sshd per user on different ports)? I'm guessing that will allow you and local users to ssh in (assuming your domain account has local administrator access). Looking ahead, I

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-13 Thread Herb Maeder
On 13 Nov 2008 14:57:20 +0100, Corinna Vinschen wrote: On Nov 13 11:35, Corinna Vinschen wrote: On Nov 12 16:57, Herb Maeder wrote: Bum deal. But thanks for the explanation. That clarifies what I was seeing. Actually there is a way to elevate a console application which is the

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-12 Thread Herb Maeder
On 10 Nov 2008 15:48:15 +0100, Corinna Vinschen wrote: On Nov 8 07:44, Herb Maeder wrote: Running sshd (openssh 5.1p1-d57 or 5.1p1-7) on cygwin-1.7 and vista results in the following error: % ssh localhost pwd [EMAIL PROTECTED]'s password: initgroups

Re: sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-10 Thread Corinna Vinschen
[Chuck? This affects csih and tcp_wrappers] On Nov 8 07:44, Herb Maeder wrote: Running sshd (openssh 5.1p1-d57 or 5.1p1-7) on cygwin-1.7 and vista results in the following error: % ssh localhost pwd [EMAIL PROTECTED]'s password: initgroups: Permission denied I

sshd on vista error initgroups: Permission denied (cygwin-1.7)

2008-11-08 Thread Herb Maeder
Running sshd (openssh 5.1p1-d57 or 5.1p1-7) on cygwin-1.7 and vista results in the following error: % ssh localhost pwd [EMAIL PROTECTED]'s password: initgroups: Permission denied I think this should be easily reproducible with a fresh installation of just cygwin 1.7 base

Re: cygwin-1.7 sshd/ssh-host-config install issues on Vista

2008-10-20 Thread Corinna Vinschen
On Oct 17 17:38, Herb Maeder wrote: On 17 Oct 2008 20:06:35 EDT, Christopher Faylor wrote: On Fri, Oct 17, 2008 at 12:50:48PM -0700, Herb Maeder wrote: But the tcp_wrappers package is not listed as a dependency in the openssh setup.hint file. libwrap0 is listed as an openssh dependency

cygwin-1.7 sshd/ssh-host-config install issues on Vista

2008-10-17 Thread Herb Maeder
On a fresh install of the cygwin-1.7 base package + openssh, I believe we should expect the following to work for installing and testing sshd: ssh-host-config -y cygrunsrv --start sshd ssh localhost pwd If sshd had been previously installed on the system, the following cleanup

Re: cygwin-1.7 sshd/ssh-host-config install issues on Vista

2008-10-17 Thread Christopher Faylor
On Fri, Oct 17, 2008 at 12:50:48PM -0700, Herb Maeder wrote: 2. (Vista/XP) The tcp_wrappers dependency is missing in openssh/setup.hint Sincd sshd.exe depends on cygwrap-0.dll, the tcp_wrappers package must be installed in order to avoid this error when starting up the sshd service

Re: cygwin-1.7 sshd/ssh-host-config install issues on Vista

2008-10-17 Thread Herb Maeder
this error when starting up the sshd service: $ cygrunsrv --start sshd cygrunsrv: Error starting a service: QueryServiceStatus: Win32 error 1062: The service has not been started. But the tcp_wrappers package is not listed as a dependency in the openssh setup.hint file. libwrap0

Re: sshd - again

2008-10-05 Thread Adem
Christian Schneider [EMAIL PROTECTED] wrote: i want to setup a lightweight opportunity to access the data on my pc. After installing the most recent version of cygwin I configured sshd via ssh-host-config. Access from local pc (localhost) with putty / WinSCP works fine. Nevertheless

1.5.25: XP SP3 / cygrunsrv sshd can't start

2008-09-30 Thread jk
On my cygwin installation, cygrunsrv fails when trying to start sshd. Fresh windows and cygwin install. The computer was working fine with a similar set-up until I had a non-cygwin related system issue which forced a reinstall. If I installed Windows XP SP3 directly and then tried to get sshd

Re: 1.5.25: XP SP3 / cygrunsrv sshd can't start

2008-09-30 Thread jk
- Original Message Sent: Tuesday, September 30, 2008 2:41:44 PM Subject: 1.5.25: XP SP3 / cygrunsrv sshd can't start On my cygwin installation, cygrunsrv fails when trying to start sshd. ... Answering my own post - after more googling and flipping through this mailing list, I

Re: sshd is too slow

2008-09-18 Thread Tom Schutter
2008 from th143127.ip.tsinghua.edu.cn //here costs me nearly 3 seconds. [EMAIL PROTECTED]:~$ why is my sshd too slow? Try adding this line to /etc/sshd_config: UseDNS no Does that help? -- Tom Schutter First American - Proxix Solutions 303-440-7272 x6822 -- Unsubscribe info: http

sshd - again

2008-09-18 Thread Christian Schneider
Hi, i want to setup a lightweight opportunity to access the data on my pc. After installing the most recent version of cygwin I configured sshd via ssh-host-config. Access from local pc (localhost) with putty / WinSCP works fine. Nevertheless access from another machine is not possible: plink

Re: sshd - again

2008-09-18 Thread Larry Hall (Cygwin)
Christian Schneider wrote: Hi, i want to setup a lightweight opportunity to access the data on my pc. After installing the most recent version of cygwin I configured sshd via ssh-host-config. Access from local pc (localhost) with putty / WinSCP works fine. Nevertheless access from another

sshd is too slow

2008-09-17 Thread Menghan Zheng
me nearly 3 seconds. [EMAIL PROTECTED]:~$ why is my sshd too slow? -- Keep In Touch! Electronics Engineering Department, Tsinghua University Dorm Tel: 8610 5153 4319 Mobile: 86 13401088180 MSN: [EMAIL PROTECTED] Email: [EMAIL PROTECTED], [EMAIL PROTECTED] -- Unsubscribe info: http

Re: 1.5.21-1: sshd: child_copy: linked dll data write copy failed after computer reboot (Windows 2000 SP4)

2008-09-17 Thread Dan Harkless
anything that looked like a version number). Is it feasible it could be causing sshd to misbehave after reboot until it's restarted? Perhaps I should try making a safety copy of it, reboot, and see if sshd allows connections without being restarted. Delete all cyg*.dlls you have

RE: 1.5.21-1: sshd: child_copy: linked dll data write copy failed after computer reboot (Windows 2000 SP4)

2008-09-17 Thread Dave Korn
McAfee take pride of place[*]. merely being installed caused the problem When it comes to Norton/McAfee/Symantec, us sysadmins have a saying: Merely being installed IS the problem! Uninstalling VSE 8.0i fixed the problem. VSE 8.5i was subsequently installed on the system and sshd works

Re: 1.5.21-1: sshd: child_copy: linked dll data write copy failed after computer reboot (Windows 2000 SP4)

2008-09-17 Thread Larry Hall (Cygwin)
anything that looked like a version number). Is it feasible it could be causing sshd to misbehave after reboot until it's restarted? Perhaps I should try making a safety copy of it, reboot, and see if sshd allows connections without being restarted. Delete all cyg*.dlls you have in the system32

sshd no longer able to start

2008-08-26 Thread Bernd Prager
After the recent update from openSSH and rerunning ssh-host-config sshd refuses to start in Win XP. The service event viewer states: ... The description for Event ID ( 0 ) in Source ( sshd ) cannot be found. The local computer may not have the necessary registry information or message DLL files

more: sshd no longer able to start

2008-08-26 Thread Bernd Prager
$ /usr/sbin/sshd -D /usr/sbin/sshd.exe: error while loading shared libraries: cygwrap-0.dll: cannot open shared object file: No such file or directory Did it got lost again? -- Bernd On Tue, 26 Aug 2008 13:09:43 -0600, Bernd Prager [EMAIL PROTECTED] wrote: After the recent update from openSSH

solved: sshd no longer able to start

2008-08-26 Thread Bernd Prager
I was missing the tcpwrapper packet. Sorry for panicking and flooding the list. -- Bernd On Tue, 26 Aug 2008 13:31:20 -0600, Bernd Prager [EMAIL PROTECTED] wrote: $ /usr/sbin/sshd -D /usr/sbin/sshd.exe: error while loading shared libraries: cygwrap-0.dll: cannot open shared object file

Bug: 1.7 sshd-config-host mount -t

2008-08-21 Thread Charlie Page
Using cygwin 1.7. ssh-host-config contains mount -t -f... on line 79. Changing to mount -f... fixes the problem and the script executes without any syntax errors. (There might also be a problem with assigning the correct user to the /var/empty directory when privilege separation is used).

Re: Bug: 1.7 sshd-config-host mount -t

2008-08-21 Thread Charles Wilson
Charlie Page wrote: Using cygwin 1.7. ssh-host-config contains mount -t -f... on line 79. Changing to mount -f... fixes the problem and the script executes without any syntax errors. (There might also be a problem with assigning the correct user to the /var/empty directory when privilege

Re: Bug: 1.7 sshd-config-host mount -t

2008-08-21 Thread Corinna Vinschen
On Aug 21 13:06, Charles Wilson wrote: Charlie Page wrote: Using cygwin 1.7. ssh-host-config contains mount -t -f... on line 79. Changing to mount -f... fixes the problem and the script executes without any syntax errors. [...] As I am new to Cygwin there could also easily be

Re: Bug: 1.7 sshd-config-host mount -t

2008-08-21 Thread Christopher Faylor
On Thu, Aug 21, 2008 at 07:38:51PM +0200, Corinna Vinschen wrote: On Aug 21 13:06, Charles Wilson wrote: Charlie Page wrote: Using cygwin 1.7. ssh-host-config contains mount -t -f... on line 79. Changing to mount -f... fixes the problem and the script executes without any syntax errors.

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Corinna Vinschen
On Aug 15 14:56, Charles Wilson wrote: Charles Wilson wrote: I've uploaded csih-0.1.6 as a test release, but I do not imagine it will survive to curr: without changes. (e.g. it is most likely broken. I hope not, but...my testing environment is limited.) Please test and send patches for

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Charles Wilson
Corinna Vinschen wrote: On Aug 15 14:56, Charles Wilson wrote: Has anybody tried this version of csih, or should I go ahead and promote it to curr and enforce some testing that way? I planned to test it for days, but I was really swamped with other stuff. No worries. I've been using MS'

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Corinna Vinschen
On Aug 18 08:30, Charles Wilson wrote: Corinna Vinschen wrote: On Aug 15 14:56, Charles Wilson wrote: Has anybody tried this version of csih, or should I go ahead and promote it to curr and enforce some testing that way? I planned to test it for days, but I was really swamped with

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Charles Wilson
Corinna Vinschen wrote: VMware Server is free and never expires. It's not the VM that's expiring, it's the Windows OS installed in the VM. I don't have a spare licensed copy of XP so I rely on the charity (hah!) of Microsoft. And their images -- whether used in Virtual PC or converted and used

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Corinna Vinschen
On Aug 18 08:52, Charles Wilson wrote: Corinna Vinschen wrote: VMware Server is free and never expires. It's not the VM that's expiring, it's the Windows OS installed in the VM. I don't have a spare licensed copy of XP so I rely on the charity (hah!) of Microsoft. And their images --

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Christopher Faylor
On Mon, Aug 18, 2008 at 08:30:32AM -0400, Charles Wilson wrote: Corinna Vinschen wrote: On Aug 15 14:56, Charles Wilson wrote: Has anybody tried this version of csih, or should I go ahead and promote it to curr and enforce some testing that way? I planned to test it for days, but I was

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Corinna Vinschen
On Aug 18 09:15, Christopher Faylor wrote: On Mon, Aug 18, 2008 at 08:30:32AM -0400, Charles Wilson wrote: Corinna Vinschen wrote: On Aug 15 14:56, Charles Wilson wrote: Has anybody tried this version of csih, or should I go ahead and promote it to curr and enforce some testing that way?

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Christopher Faylor
On Mon, Aug 18, 2008 at 03:22:54PM +0200, Corinna Vinschen wrote: On Aug 18 09:15, Christopher Faylor wrote: On Mon, Aug 18, 2008 at 08:30:32AM -0400, Charles Wilson wrote: Corinna Vinschen wrote: On Aug 15 14:56, Charles Wilson wrote: Has anybody tried this version of csih, or should I go

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-18 Thread Charles Wilson
Corinna Vinschen wrote: Maybe Windows 2008 is better for testing. Microsoft allows downloading and (so I heard) even documents how to expand the expiry to 150 days. Perhaps. I was just late in the cycle for this 'refresh' of MS's XP image. It was released back in July, so that would have been

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-15 Thread Charles Wilson
Charles Wilson wrote: I've uploaded csih-0.1.6 as a test release, but I do not imagine it will survive to curr: without changes. (e.g. it is most likely broken. I hope not, but...my testing environment is limited.) Please test and send patches for a better 0.1.7. Also see FIXME in

Re: csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-15 Thread Yaakov (Cygwin Ports)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Charles Wilson wrote: | Has anybody tried this version of csih, or should I go ahead and promote | it to curr and enforce some testing that way? http://cygwin.com/acronyms/#WJM :-) Yaakov -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-08 Thread Corinna Vinschen
On Aug 7 12:59, Charles Wilson wrote: Corinna Vinschen wrote: We can require Administrators (-544) in /etc/group, and SYSTEM (-18) in both /etc/group and /etc/passwd, right? Yes. I'm just wondering if we shouldn't check for the Admins group only. The token of the SYSTEM user always

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-07 Thread Corinna Vinschen
Hi Chuck, On Aug 4 21:31, Charles Wilson wrote: Corinna Vinschen wrote: Btw., there's a test for the administrators group in /etc/passwd. This test is not necessary. The only reason to have the admins group in /etc/passwd is to print file ownership correctly. It doesn't have any other

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-07 Thread Charles Wilson
Corinna Vinschen wrote: Hi Chuck, On Aug 4 21:31, Charles Wilson wrote: Corinna Vinschen wrote: Btw., there's a test for the administrators group in /etc/passwd. I don't see this. I see testing /etc/passwd for the (local) Administrator USER, and testing /etc/group for the Administrators

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-07 Thread Corinna Vinschen
On Aug 7 11:25, Charles Wilson wrote: Corinna Vinschen wrote: Hi Chuck, On Aug 4 21:31, Charles Wilson wrote: Corinna Vinschen wrote: Btw., there's a test for the administrators group in /etc/passwd. I don't see this. I see testing /etc/passwd for the (local) Administrator USER, and

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-07 Thread Charles Wilson
Corinna Vinschen wrote: No, the above lines are checking for the passwd entry for the administrators group. S-1-5-32-544 is the SID of that group. The SID for the Administrator user is S-1-5-21-X-Y-Z-500. D'oh. Right. Now, about csih_check_access() -- without exact knowledge of

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-07 Thread Corinna Vinschen
On Aug 7 12:19, Charles Wilson wrote: Corinna Vinschen wrote: Well, hmm. In theory, admins have backup/restore rights anyway. However, I was just thinking that csih should get rid of points of failure which are not entirely necessary, like the checks for denied user rights. If you think

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-07 Thread Charles Wilson
Corinna Vinschen wrote: We can require Administrators (-544) in /etc/group, and SYSTEM (-18) in both /etc/group and /etc/passwd, right? Yes. I'm just wondering if we shouldn't check for the Admins group only. The token of the SYSTEM user always contains the Admins group and the cyg_server

csih-0.1.6 available for testing [Was: Re: CSIH patch (Re: Unable to run sshd ...)]

2008-08-07 Thread Charles Wilson
Charles Wilson wrote: Corinna Vinschen wrote: We can require Administrators (-544) in /etc/group, and SYSTEM (-18) in both /etc/group and /etc/passwd, right? Yes. I'm just wondering if we shouldn't check for the Admins group only. The token of the SYSTEM user always contains the Admins

Re: sshd [5.1p1] fails on seteuid permission denied

2008-08-06 Thread J.D. Baldwin
On Tue, Aug 05, 2008 at 09:07:04PM -0700, Brian Dessent wrote: I can invoke /usr/sbin/sshd but not log in via same. I have tried it Stop right there. Running sshd directly from your user account -- even if you are an Administrator -- is incorrect and wrong. It won't work, and worse

sshd [5.1p1] fails on seteuid permission denied

2008-08-05 Thread J.D. Baldwin
cygwin -s -r -v output is included below. I have found numerous reports of this same problem on various Cygwin forums, mailing lists, etc., but no solutions offered. I can invoke /usr/sbin/sshd but not log in via same. I have tried it with and without privilege separation, with and without re

Re: sshd [5.1p1] fails on seteuid permission denied

2008-08-05 Thread René Berber
J.D. Baldwin wrote: [snip] I can invoke /usr/sbin/sshd but not log in via same. I have tried it with and without privilege separation, with and without re-exec and in various other permutations. It always fails on the seteuid call. [snip] I can't find a workaround for this. Any ideas

Re: sshd [5.1p1] fails on seteuid permission denied

2008-08-05 Thread J.D. Baldwin
On Tue, Aug 05, 2008 at 06:42:46PM -0500, Ren? Berber wrote: [snip] I can invoke /usr/sbin/sshd but not log in via same. I have tried it with and without privilege separation, with and without re-exec and in various other permutations. It always fails on the seteuid call. [snip] I can't

Re: sshd [5.1p1] fails on seteuid permission denied

2008-08-05 Thread René Berber
J.D. Baldwin wrote: On Tue, Aug 05, 2008 at 06:42:46PM -0500, René Berber wrote: [snip] I can invoke /usr/sbin/sshd but not log in via same. I have tried it with and without privilege separation, with and without re-exec and in various other permutations. It always fails on the seteuid call

Re: sshd [5.1p1] fails on seteuid permission denied

2008-08-05 Thread Brian Dessent
J.D. Baldwin wrote: I can invoke /usr/sbin/sshd but not log in via same. I have tried it Stop right there. Running sshd directly from your user account -- even if you are an Administrator -- is incorrect and wrong. It won't work, and worse, it will cause the permissions of the dirs and files

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-08-04 Thread Charles Wilson
Corinna Vinschen wrote: Along these lines, yes. I also think that using the cyg_server/ cron_server/sshd_server account should be preferred over SYSTEM on XP and earlier systems, at least if they are domain member machines. Maybe simply like this: The test should run on any OS, but if none of

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-07-20 Thread Corinna Vinschen
that privileged account (e.g. to run sshd)...which I imagine is the use case under consideration here...I don't think you really /need/ to explicitly specify the domain. That's not quite correct. When specifying the user running a service, you have to specify the full qualified user name

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-07-20 Thread Corinna Vinschen
if the user has been directly taken from /etc/passwd? *** Query: Please enter the password for user 'cyg_server': *** Query: Reenter: *** Info: The sshd service has been installed under the 'cyg_server' [...] Btw., there's a test for the administrators group in /etc/passwd. This test

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-07-19 Thread Charles Wilson
Corinna Vinschen wrote: Oh, btw., Charles, that's one for you. On Jun 16 23:01, Corinna Vinschen wrote: On May 13 11:09, Schutter, Thomas A. wrote: The problem was that the domain sshd_server account has no right to access the domain controller from the network. Solution: Open the Local

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-07-19 Thread Corinna Vinschen
On Jul 19 12:51, Charles Wilson wrote: Corinna Vinschen wrote: Oh, btw., Charles, that's one for you. On Jun 16 23:01, Corinna Vinschen wrote: On May 13 11:09, Schutter, Thomas A. wrote: The problem was that the domain sshd_server account has no right to access the domain controller from the

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-07-19 Thread Charles Wilson
tested it -- and have no way to do so. It would be serendipitous at best if that worked. But I'm not sure you really /need/ that -- if the privileged domain user is in the active domain of the computer on which you want to use that privileged account (e.g. to run sshd)...which I imagine is the use

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-07-19 Thread Charles Wilson
Charles Wilson wrote: Corinna Vinschen wrote: However, I sent a second patch in http://cygwin.com/ml/cygwin/2008-06/msg00453.html The Interactive Logon Right is also necessary for this account. I don't know why I missed that. I'll roll 0.1.6 soon. Here's the followup patch I applied (with

sshd - seteuid: no such process (windows 64) openssh 5.0p1-1

2008-07-16 Thread Andrew Louie
I'm trying to set up an sshd server on this computer that is running windows XP (x64), and when I try to login i get this message: fatal: seteuid 116020: No such process I looked through my cygcheck, and the only warning seems to be related to sonic solutions DLA. it is attached. Is this just

Re: sshd - seteuid: no such process (windows 64) openssh 5.0p1-1

2008-07-16 Thread Corinna Vinschen
On Jul 16 09:37, Andrew Louie wrote: I'm trying to set up an sshd server on this computer that is running windows XP (x64), and when I try to login i get this message: fatal: seteuid 116020: No such process I looked through my cygcheck, and the only warning seems to be related to sonic

Problem in SSHing as user to Windows 2003 running Cygwin sshd.

2008-07-14 Thread Shubham Gupta
Hi I have been trying to SSH as user to windows 2003 running sshd under Cygwin. STrange thing is that when I run this command: ssh -i snoopy.openssh user @72.225.73.89 wget www.google.com, it gives me error that fatal error- could not load user32, win32 error 1114. But when I SSH as : ssh -i

Can't SSH as non-root user to Windows server with sshd running under Cygwin

2008-07-14 Thread Shubham Gupta
Hi all I am facing a problem when I try to login through SSH as a non-root user from a a different server to Windows 2003 server running sshd under Cygwin. It outputs me following error: 50 [main] sshd 2040 C:\cygwin\usr\sbin\sshd.exe: *** fatal error - could not load user32, Win32 error 1114

sshd not accessible from outside my machine

2008-07-13 Thread Nathan Salwen
I installed openssh, openssl, libwrap0 and tcp_wrappers using Cygwin Setup, openssh is version 5.0p1-1 and openssl is version 0.9.8h-1. I can ssh to other boxes and I can ssh to myself after typing net start sshd but I cannot ssh from other boxes to this box. When I try that I get a Connection

Re: sshd not accessible from outside my machine

2008-07-13 Thread René Berber
Nathan Salwen wrote: I installed openssh, openssl, libwrap0 and tcp_wrappers using Cygwin Setup, openssh is version 5.0p1-1 and openssl is version 0.9.8h-1. I can ssh to other boxes and I can ssh to myself after typing net start sshd but I cannot ssh from other boxes to this box. When I try

RE: Error starting sshd: Win32 error 1069

2008-06-23 Thread Schutter, Thomas A.
-Original Message- Sent: Sunday, June 22, 2008 12:15 AM To: cygwin@cygwin.com Subject: Error starting sshd: Win32 error 1069 I'm having trouble starting sshd on a host running Windows Server 2003, SP1. It was working several days ago, and then stopped for no reason that I can

Re: Error starting sshd: Win32 error 1069

2008-06-23 Thread Adam Thompson
2008/6/22 Gordon Messmer [EMAIL PROTECTED]: I'm having trouble starting sshd on a host running Windows Server 2003, SP1. It was working several days ago, and then stopped for no reason that I can determine. I tried starting the service by hand, and got: $ cygrunsrv.exe -S sshd cygrunsrv

Error starting sshd: Win32 error 1069

2008-06-22 Thread Gordon Messmer
I'm having trouble starting sshd on a host running Windows Server 2003, SP1. It was working several days ago, and then stopped for no reason that I can determine. I tried starting the service by hand, and got: $ cygrunsrv.exe -S sshd cygrunsrv: Error starting a service: QueryServiceStatus

Re: CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-06-22 Thread Corinna Vinschen
Charles, Ping? On Jun 16 23:13, Corinna Vinschen wrote: Oh, btw., Charles, that's one for you. On Jun 16 23:01, Corinna Vinschen wrote: On May 13 11:09, Schutter, Thomas A. wrote: So when I am using pubkey authentication, the user token is not a member of the Administrators,

Re: Unable to run sshd under a domain sshd_server account [SOLVED]

2008-06-16 Thread Corinna Vinschen
Hi Thomas, On May 13 11:09, Schutter, Thomas A. wrote: Except that is not what I am seeing. When I run id from a console cygwin shell: $ id uid=18718(tschutter) gid=10513(Domain Users) groups=544(Administrators),545(Users),10513(Domain

CSIH patch (Re: Unable to run sshd under a domain sshd_server account [SOLVED])

2008-06-16 Thread Corinna Vinschen
Oh, btw., Charles, that's one for you. On Jun 16 23:01, Corinna Vinschen wrote: On May 13 11:09, Schutter, Thomas A. wrote: Except that is not what I am seeing. When I run id from a console cygwin shell: $ id uid=18718(tschutter) gid=10513(Domain Users)

sshd service stopped: exit status 255

2008-06-10 Thread Ralph Reschke, Jr.
I am attempting to start the Cygwin sshd service on a Windows 2003 server and I'm receiving the following error in the system application logs: The description for Event ID (0) in Source (sshd) cannot be found. The local computer may not have the necessary registry information or message DLL

Re: Active Directory and the dreaded Win32 error 1069 starting sshd

2008-06-09 Thread Gordon Messmer
Christopher Faylor wrote: On Tue, Jun 03, 2008 at 11:20:47PM -0700, Gordon Messmer wrote: I'm trying to set up cygwin sshd on two hosts which are members of the same domain. One server is Windows 2003, the other is 2003 R2. Briefly, the problem is that after installing cygwin on both, I

SSHD Problems (Continued)

2008-06-09 Thread liminal
I still am unable to connect to my external IP address using ssh, but can connect fine to localhost. I used netstat to check that sshd is listening: $ netstat -ba | grep ssh TCPliminal2:ssh liminal2:0 LISTENING 3972 [sshd.exe] The sshd.log file is empty

RE: SSHD Problems (Continued)

2008-06-09 Thread David Christensen
liminal wrote: I still am unable to connect to my external IP address using ssh, but can connect fine to localhost. Perhaps a firewall on your machine is blocking ssh traffic. I run XP Pro SP3, and added the following exception to Windows Firewall: Name: ssh

Re: SSHD Problems

2008-06-06 Thread Thorsten Kampe
* (Thu, 5 Jun 2008 19:38:04 -0400) Hi, I'm having problems setting up sshd using cygwin on my windows xp machine. I've run out of ideas, so if anyone can suggest troubleshooting tips or any other kind of help, I'd really appreciate it. I've installed sshd to run as a windows service. I can

SSHD Problems

2008-06-05 Thread liminal
Hi, I'm having problems setting up sshd using cygwin on my windows xp machine. I've run out of ideas, so if anyone can suggest troubleshooting tips or any other kind of help, I'd really appreciate it. I've installed sshd to run as a windows service. I can ssh to localhost or 127.0.0.1

Active Directory and the dreaded Win32 error 1069 starting sshd

2008-06-04 Thread Gordon Messmer
I'm trying to set up cygwin sshd on two hosts which are members of the same domain. One server is Windows 2003, the other is 2003 R2. Briefly, the problem is that after installing cygwin on both, I can run ssh-host-config on either one, and sshd will work. However, when I try to set up sshd

Re: Active Directory and the dreaded Win32 error 1069 starting sshd

2008-06-04 Thread Christopher Faylor
On Tue, Jun 03, 2008 at 11:20:47PM -0700, Gordon Messmer wrote: I'm trying to set up cygwin sshd on two hosts which are members of the same domain. One server is Windows 2003, the other is 2003 R2. Briefly, the problem is that after installing cygwin on both, I can run ssh-host-config

<    8   9   10   11   12   13   14   15   16   17   >