cygrunsrv fails to prompt for user password

cygrunsrv fails to prompt for user password

[Steven Hartland]

We're updating our servers to a newer version of cygwin (1.7.15)
from previous 1.7 version and in this version the install of
cygrunsrv (V1.40, Apr 25 2012) fails to correctly prompt for
a user password even though -u <username> is being specified.

It seems like cygrunsrv maybe checking for an "interactive"
session and incorrectly determining its not as in our case
we are running the cygrunsrv via ssh e.g.

ssh "cygrunsrv ...."

We know that this worked correctly in cygrunsrv V1.34, Mar 18
2008.

Bug introduced recently?

    Regards
    Steve


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

cygwin getpass broken recently? was: cygrunsrv fails to prompt for user password

[Steven Hartland]

----- Original Message ----- 
From: "Steven Hartland"

> We're updating our servers to a newer version of cygwin (1.7.15)
> from previous 1.7 version and in this version the install of
> cygrunsrv (V1.40, Apr 25 2012) fails to correctly prompt for
> a user password even though -u <username> is being specified.
> 
> It seems like cygrunsrv maybe checking for an "interactive"
> session and incorrectly determining its not as in our case
> we are running the cygrunsrv via ssh e.g.
> 
> ssh "cygrunsrv ...."
> 
> We know that this worked correctly in cygrunsrv V1.34, Mar 18
> 2008.
> 
> Bug introduced recently?

After inspecting the code for cygrunsrv and adding some debug
I've determined this isn't a bug in the util but in cygwin's
getpass function which I believe may have been changed
recently by Corinna Vinschen, after googling around.

Is this a new issue caused by these changes Corinna?

    Regards
    Steve


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: cygwin getpass broken recently? was: cygrunsrv fails to prompt for user password

[Corinna Vinschen]

On Jul  7 05:05, Steven Hartland wrote:
> ----- Original Message ----- From: "Steven Hartland"
> 
> >We're updating our servers to a newer version of cygwin (1.7.15)
> >from previous 1.7 version and in this version the install of
> >cygrunsrv (V1.40, Apr 25 2012) fails to correctly prompt for
> >a user password even though -u <username> is being specified.
> >
> >It seems like cygrunsrv maybe checking for an "interactive"
> >session and incorrectly determining its not as in our case
> >we are running the cygrunsrv via ssh e.g.
> >
> >ssh "cygrunsrv ...."
> >
> >We know that this worked correctly in cygrunsrv V1.34, Mar 18
> >2008.
> >
> >Bug introduced recently?
> 
> After inspecting the code for cygrunsrv and adding some debug
> I've determined this isn't a bug in the util but in cygwin's
> getpass function which I believe may have been changed
> recently by Corinna Vinschen, after googling around.
> 
> Is this a new issue caused by these changes Corinna?

Looks like it.  The code doesn't notice if stdin is not connected to a
tty or pty, but to a socket instead and then falls back to returning
with an empty password immediately.  I'll fix that in CVS.

For the time being, the workaround is to run `ssh -t ...'


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: cygwin getpass broken recently? was: cygrunsrv fails to prompt for user password

[Corinna Vinschen]

On Jul  9 14:38, Corinna Vinschen wrote:
> On Jul  7 05:05, Steven Hartland wrote:
> > ----- Original Message ----- From: "Steven Hartland"
> > 
> > >We're updating our servers to a newer version of cygwin (1.7.15)
> > >from previous 1.7 version and in this version the install of
> > >cygrunsrv (V1.40, Apr 25 2012) fails to correctly prompt for
> > >a user password even though -u <username> is being specified.
> > >
> > >It seems like cygrunsrv maybe checking for an "interactive"
> > >session and incorrectly determining its not as in our case
> > >we are running the cygrunsrv via ssh e.g.
> > >
> > >ssh "cygrunsrv ...."
> > >
> > >We know that this worked correctly in cygrunsrv V1.34, Mar 18
> > >2008.
> > >
> > >Bug introduced recently?
> > 
> > After inspecting the code for cygrunsrv and adding some debug
> > I've determined this isn't a bug in the util but in cygwin's
> > getpass function which I believe may have been changed
> > recently by Corinna Vinschen, after googling around.
> > 
> > Is this a new issue caused by these changes Corinna?
> 
> Looks like it.  The code doesn't notice if stdin is not connected to a
> tty or pty, but to a socket instead and then falls back to returning
> with an empty password immediately.  I'll fix that in CVS.
> 
> For the time being, the workaround is to run `ssh -t ...'

Oh, btw.  For security reasons, you should always call ssh -t
in this case, otherwise yoy have visible passwords.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple