From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 60537 invoked by alias); 6 Sep 2016 18:39:22 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 60523 invoked by uid 89); 6 Sep 2016 18:39:21 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.3 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=no version=3.3.2 spammy=H*r:8.16.0, H*r:ip*8.16.0.17, U*Stromeko, sk:Stromek X-HELO: imta-38.everyone.net Received: from sitemail2.everyone.net (HELO imta-38.everyone.net) (216.200.145.36) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 06 Sep 2016 18:39:11 +0000 Received: from pps.filterd (m0004960.ppops.net [127.0.0.1]) by imta-38.everyone.net (8.16.0.17/8.16.0.17) with SMTP id u86Ic6Tm009431; Tue, 6 Sep 2016 11:39:08 -0700 X-Eon-Originating-Account: 1fl0Ydf2VL3pM4TVcm3y26EaQAFCLHxSniWcX9MjTU4v_6YJw0Dco_rGlBmpP-0Z X-Eon-Dm: m0094770.ppops.net Received: by m0086238.mta.everyone.net (EON-PICKUP) id m0086238.5780306c.80c25; Tue, 6 Sep 2016 11:39:02 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Message-Id: <20160906113901.CCAE47E5@m0086238.ppops.net> Date: Tue, 06 Sep 2016 18:39:00 -0000 From: "Jeffrey Lightner" Reply-To: To: "Achim Gratz" Cc: Subject: Re: ssh to Cygwin sshd - command with bat file fails when trust established but works with password authentication X-Eon-Sig: AQLeMdBXzw1GmnVnqgEAAAAC,b565855c3be8a1be3b4b128094d1fee4 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-09-06_06:,, signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 suspectscore=7 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1604210000 definitions=main-1609060284 X-IsSubscribed: yes X-SW-Source: 2016-09/txt/msg00101.txt.bz2 Thanks. I've done the passwd -R and re-established the trust. Once the user retests with the trust I'll let you know how it goes. The comment in the article about only System users being able to list the registry entries doesn't mean it will ignore the "passwd -R" done for a non-Administrative user (by an Administrative account of course) does it? At present the remote Windows user is a local Administrative user but of course we plan to lock that down some after other testing pans out. --- Stromeko@nexgo.de wrote: From: Achim Gratz To: cygwin@cygwin.com Subject: Re: ssh to Cygwin sshd - command with bat file fails when trust established but works with password authentication Date: Tue, 06 Sep 2016 19:59:47 +0200 Jeffrey Lightner writes: > The weirdness is that this failure only occurs when we call it using > ssh trust to make the connection. If we make the connection without a > trust so that it prompts for the OS level password the bat file then > executes correctly including its application level login. That most likely means that this application needs network access. If you log in via public key and don't have a password stored in registry via 'passwd -R' and cygserver running to use it, then you won't have any access rights to non-local resources. https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview If all you need is indeed to run one script, you might alternatively be able to set up a service that starts under a network user and just runs that script when triggered by your remote user login in via ssh. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Factory and User Sound Singles for Waldorf Q+, Q and microQ: http://Synth.Stromeko.net/Downloads.html#WaldorfSounds -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple