From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 19167 invoked by alias); 27 Jun 2003 09:54:05 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 19065 invoked from network); 27 Jun 2003 09:54:01 -0000 Received: from unknown (HELO phumblet.no-ip.org) (151.199.63.181) by sources.redhat.com with SMTP; 27 Jun 2003 09:54:01 -0000 Received: from pierre by phumblet.no-ip.org with local (Exim 4.20) id HH4YCV-0090R3-NN for cygwin@cygwin.com; Fri, 27 Jun 2003 06:26:55 -0400 Date: Fri, 27 Jun 2003 10:25:00 -0000 From: "Pierre A. Humblet" To: cygwin@cygwin.com Subject: Re: unable to autologin to 2003 Message-ID: <20030627102653.GA514627@Worldnet> References: <217E3C0C100E144B93AF131E71C6D62A0373B973@edc-exchange.everdreamcorp.com> <01bc01c33c31$27732ef0$4d1f1cac@THEODOLITE> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <01bc01c33c31$27732ef0$4d1f1cac@THEODOLITE> User-Agent: Mutt/1.4i X-SW-Source: 2003-06/txt/msg01274.txt.bz2 On Thu, Jun 26, 2003 at 03:20:30PM -0700, Bruce Dobrin wrote: > I hope this isn't a stupid question. I configure cygwin with a script which > installs all passwd, hosts.equiv, inetd etc..... I have hundreds of > machines configured this way on which all is well. I just installed 2003 > server, cygwin, and ran the autoconfig script. I am unable to rsh to this > machine. I get: > > dobrin@srdalien2:/home/dobrin> rlogin srdalien2 > Switching to user dobrin failed! > rlogin: connection closed. > > or > > dobrin@srdalien2:/home/dobrin> rlogin srdalien2 -l dobrin > Switching to user dobrin failed! > rlogin: connection closed. > > > cygwin settingis : > dobrin@srdalien2:/home/dobrin> echo $CYGWIN > binmode tty ntsec > > Is there a known 2003 server issue, I searched the mailing lists pretty > carefully, but sisn't turn up anything. > > telnet and non interactive rsh (rather than rlogin), work fine. > > > Bruce Dobrin > dobrin@imageworks.com There is evidence that password-less logins (as well as exim) fail on Windows 2003 because the SYSTEM account is lacking the CreateToken privilege and can't setuid(). I don't know if/how that privilege can be added, can you investigate? A workaround (reported to work) is to create a new privileged account and to run the daemons under that account (-u switch in cygrunsrv). The new account (you could call it Root) should 1) be in the Administrators group 2) have the Login As A Service privilege 3) " Create Token " 4) " Assign Token " 5) " Increase Quota " (if it exists on your system. Does it?). In addition by being Administrators it should also have the Backup and Restore Files privileges. If not, assign them explicitly. Rebuild /etc/passwd after creating such an account. Pierre -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/