public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Bruce Halco <bruce@halcomp.com>
To: cygwin@cygwin.com
Subject: Re: seteuid problem with sshd
Date: Thu, 14 Mar 2019 02:20:00 -0000	[thread overview]
Message-ID: <032d1268-15e7-f10d-bdd7-45effb6b6a2b@halcomp.com> (raw)
In-Reply-To: <1231848485.20190314025011@yandex.ru>

I had found nothing referencing "No such file or directory", which 
sounds rather different from a permissions problem.

Running sshd under the Local System account made no difference.

passwd -R was no help.

What I did discover was that cygwin/sshd apparently now requires the 
Windows account to be Enabled.  That was not the case previously.

The target systems in my application are in restaurant offices, and only 
use a single Windows login.

As the people who use ssh do not need local Windows accounts, I've 
always used the practice of Disabling those user accounts in Windows. 
The credentials were available to ssh, without the security issues of 
all those extra active accounts.

Unless someone can suggest an alternative, I'll have to leave all those 
accounts Enabled. I can put some long, nasty passwords on them to keep 
the risk acceptable.

Thanks.

Bruce


On 3/13/19 7:50 PM, Andrey Repin wrote:
> Greetings, Bruce Halco!
>
>> I'm having to update a number of cygwin installations that are about a
>> year old (cygwin 2.9.0-3). Usually I just run the installer and
>> everything goes fine.  Occasionally I've run into a problem and had to
>> remove the existing installation and reinstall.
>> Apparently something has changed with ssh.  I now go though the same
>> installation process I've been using for years, but sshd logins fail
>> after connection with
>>       "fatal: seteuid xxxxxx: No such file or directory"
>> The ssh client gets as far as offering the key. The last two lines from
>> the client side are
>>       debug1: Offering public key: bhalco.ssh RSA
>> SHA256:DDFVOXwQIpPODxXJPxp8Mxj1Y1mXsMqdmrvVYi5P51c agent
>>       Connection closed by 192.168.0.12 port 32000
>> I've reproduced the problem on two computers. Both are running Windows
>> 7, although the same update will need to be applied to Windows 10 systems.
>> I haven't found any info using Google or the cygwin archives.
> Please don't lie. The archive is full of recent reports.
>
>> I don't even have a good guess what file or directory is missing.
>> I'd greatly appreciate any suggestions.
> Try changing the owning user of sshd service to LocalSystem for a starter.
>
>


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

  reply	other threads:[~2019-03-14  2:20 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-03-13 23:26 Bruce Halco
2019-03-14  0:00 ` Houder
2019-03-14  0:05 ` Andrey Repin
2019-03-14  2:20   ` Bruce Halco [this message]
2019-03-14  9:47     ` Corinna Vinschen
2019-03-14 10:45       ` Bruce Halco

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=032d1268-15e7-f10d-bdd7-45effb6b6a2b@halcomp.com \
    --to=bruce@halcomp.com \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).