FW: Problem with openssh and domain user rights

FW: Problem with openssh and domain user rights

[Dave Korn]

Jevos, Peter wrote on 24 July 2008 15:27:

> Hi all
> 
> I have a problem with opsnssh login. I've red documntation and mailing
> list but I didn't find an answer.
> So I installed openssh according to
> http://pigtail.net/LRP/printsrv/cygwin-sshd.html manual

  *sip*


  Blimey, it's been a while.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....

Re: FW: Problem with openssh and domain user rights

[Robert Pendell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dave Korn wrote:
| Jevos, Peter wrote on 24 July 2008 15:27:
|
|> Hi all
|>
|> I have a problem with opsnssh login. I've red documntation and mailing
|> list but I didn't find an answer.
|> So I installed openssh according to
|> http://pigtail.net/LRP/printsrv/cygwin-sshd.html manual
|
|   *sip*
|
|
|   Blimey, it's been a while.
|
|     cheers,
|       DaveK

Yes it has.  Is it me or have they fixed their instructions?  Also I see
a nice big disclaimer at the top not to bug the cygwin list with issues...

*sip*


- --
Robert Pendell
shinji@elite-systems.org

"A perfect world is one of chaos."

Thawte Web of Trust Notary
CAcert Assurer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIiL8Rs1pR2j1qW+sRArgjAJ4x7wIKuLodXCmijy/UCEaKmOKLKwCfVyQ2
mWC4SJwkI/oweXq68plEk+g=
=DLRZ
-----END PGP SIGNATURE-----

Re: FW: Problem with openssh and domain user rights

[Andrew Louie]

On Thu, Jul 24, 2008 at 1:42 PM, Robert Pendell <> wrote:

> Yes it has.  Is it me or have they fixed their instructions?  Also I see
> a nice big disclaimer at the top not to bug the cygwin list with issues...
>
> *sip*
>

I don't know, but It seems that they make the instructions way more
complicated than it needs to be. why should you have to manually set
the CYGWIN environment variable?

They have the instruction:
If the script asks about "create a local user sshd on this machine", answer yes

Later on they say if it fails to do this:
chown system /etc/ssh*
chown system /var/empty

If the sshd service is being started as the local sshd user, who has
user rights, how will changing ownership of those two things to system
help? and what about /var/log/lastlog and /var/log/sshd.log?

maybe I don't understand sshd like I think I do.





-- 
-Andrew Louie :wq
--雷恩銘

Re: FW: Problem with openssh and domain user rights

[One Angry User]

On a balmy Thursday morning, the 24th day of July, 2008, Dave Korn's computer deigned to emit the following stream of bytes:

> Jevos, Peter wrote on 24 July 2008 15:27:
>
> > I have a problem with opsnssh login. I've red documntation and mailing
> > list but I didn't find an answer.

And I have green documentation and mailing list.  Not very helpful either.

OAU

Re: FW: Problem with openssh and domain user rights

[peter]

Quoting One Angry User <angry@lusers.org>:

> On a balmy Thursday morning, the 24th day of July, 2008, Dave Korn's  
>  computer deigned to emit the following stream of bytes:
>
>> Jevos, Peter wrote on 24 July 2008 15:27:
>>
>> > I have a problem with opsnssh login. I've red documntation and mailing
>> > list but I didn't find an answer.
>
> And I have green documentation and mailing list.  Not very helpful either.
>
> OAU
>

Well. that's your problem.  You need the fuschia documentation with a  
nice cup of tea.  Earl gray I think.  See if that helps.

Peter

Re: FW: Problem with openssh and domain user rights

[Robert Pendell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Louie wrote:
| On Thu, Jul 24, 2008 at 1:42 PM, Robert Pendell <> wrote:
|
|> Yes it has.  Is it me or have they fixed their instructions?  Also I see
|> a nice big disclaimer at the top not to bug the cygwin list with
issues...
|>
|> *sip*
|>
|
| I don't know, but It seems that they make the instructions way more
| complicated than it needs to be. why should you have to manually set
| the CYGWIN environment variable?
|
| They have the instruction:
| If the script asks about "create a local user sshd on this machine",
answer yes
|
| Later on they say if it fails to do this:
| chown system /etc/ssh*
| chown system /var/empty
|
| If the sshd service is being started as the local sshd user, who has
| user rights, how will changing ownership of those two things to system
| help? and what about /var/log/lastlog and /var/log/sshd.log?
|
| maybe I don't understand sshd like I think I do.
|
|
|
|
|
Well if I recall correctly the last time I looked at those instructions
they didn't even have the user run ssh-host-config.  Regardless you are
right in saying they are still over complicated.  For the most part you
should just have to run ssh-host-config and it can stop right there.
Configure sshd_config if you have to but no ownership changes have to be
done.  Also at least they say right up at the top not to bug us about
the instructions.

- --
Robert Pendell
shinji@elite-systems.org

"A perfect world is one of chaos."

Thawte Web of Trust Notary
CAcert Assurer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIklQfs1pR2j1qW+sRAovfAJ90miEr4o/mrqhnKtA19Gh4n1CT2ACghcCk
x5DprwYL1ryeIy8vKPaAWG0=
=Bwjr
-----END PGP SIGNATURE-----