public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
* Problems with ssh-host-config on Windows 10
@ 2017-02-02 11:20 Erik Bray
  2017-02-02 13:08 ` Corinna Vinschen
  0 siblings, 1 reply; 4+ messages in thread
From: Erik Bray @ 2017-02-02 11:20 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 1853 bytes --]

Hi all,

I've been trying to get a Cygwin sshd server running on a Windows 10
VM, and have found it to be surprisingly tricky without some
additional fiddling, and it's not clear to me whether that's expected
or if it's a bug.  I've attached the cygcheck output from the VM.

The symptom I've having seems to be the same as in this post:

https://cygwin.com/ml/cygwin/2015-06/msg00265.html

The problem seems to be stemming from some assumptions in:
/usr/share/csih/cygwin-service-installation-helper.sh

It creates the "privileged user" (in my case with the default name
cyg_server) with `net user`, including the SAM comment entry:

/comment:'<cygwin home="/var/empty" shell="/bin/false"/>'

Shortly after it calls:

passwd -e "${csih_PRIVILEGED_USERNAME}"

and this fails with:

Warning: Setting password expiry for user 'desktop-mk2koav+cyg_server' failed!

This happens because this is a fresh Cygwin install with all the
default settings in /etc/nsswitch.conf.  In particular, no passwd
entry is found for the cyg_server user unless I explicitly add "local"
to db_enum.  Furthermore, the SAM comment entry is not read correctly
without db_home: desc and db_shell: desc.  In summary, I had to edit
/etc/nsswitch.conf to:

passwd db
db_enum: local
db_home: desc
db_shell: desc

or else the cyg_server user's passwd entry is not read correctly and
the cygwin-server-installation-helper.sh script breaks when trying to
set up the new user.  Because the user is not configured properly (for
example, none of the editrights calls are made) it can't seteuid
properly and any attempt to log in via SSH errors out.

I'm not sure what the solution is.  Either the
cygwin-server-installation-helper.sh script should be improved to work
with the default nsswitch.conf settings, or the documentation for
setting up sshd could be better improved.

Thanks,
Erik

[-- Attachment #2: cygcheck.log --]
[-- Type: application/octet-stream, Size: 11888 bytes --]

Cygwin Configuration Diagnostics
Current System Time: Thu Feb 02 11:03:57 2017

Windows 10 Professional Ver 10.0 Build 14393

Path:   C:\cygwin64\usr\local\bin
        C:\cygwin64\bin
        C:\cygwin64\bin
        C:\windows\system32
        C:\windows
        C:\windows\System32\Wbem
        C:\windows\System32\WindowsPowerShell\v1.0
        C:\Users\cyg_server\AppData\Local\Microsoft\WindowsApps

Output from C:\cygwin64\bin\id.exe
UID: 197608(Admin)
GID: 197121(None)
197121(None)
114(Local account and member of Administrators group)
544(Administrators)
545(Users)
4(INTERACTIVE)
66049(CONSOLE LOGON)
11(Authenticated Users)
15(This Organization)
113(Local account)
66048(LOCAL)
405504(High Mandatory Level)

SysDir: C:\windows\system32
WinDir: C:\windows

USER = 'Admin'
PWD = '/home/Admin'
HOME = '/home/Admin'

Use '-r' to scan registry

obcaseinsensitive set to 1

Cygwin installations found in the registry:
  System: Key: e022582115c10879 Path: C:\cygwin64
  User:   Key: e022582115c10879 Path: C:\cygwin64

c:  hd  NTFS     61437Mb  33% CP CS UN PA FC     EN

C:\cygwin64      /          system  binary,auto
C:\cygwin64\bin  /usr/bin   system  binary,auto
C:\cygwin64\lib  /usr/lib   system  binary,auto
cygdrive prefix  /cygdrive  user    binary,posix=0,auto

Found: C:\cygwin64\bin\awk
Found: C:\cygwin64\bin\awk
 -> C:\cygwin64\bin\gawk.exe
Found: C:\cygwin64\bin\bash.exe
Found: C:\cygwin64\bin\bash.exe
Found: C:\cygwin64\bin\cat.exe
Found: C:\cygwin64\bin\cat.exe
Found: C:\cygwin64\bin\cp.exe
Found: C:\cygwin64\bin\cp.exe
Not Found: cpp (good!)
Not Found: crontab
Found: C:\cygwin64\bin\find.exe
Found: C:\cygwin64\bin\find.exe
Found: C:\windows\system32\find.exe
Not Found: gcc
Not Found: gdb
Found: C:\cygwin64\bin\grep.exe
Found: C:\cygwin64\bin\grep.exe
Found: C:\cygwin64\bin\kill.exe
Found: C:\cygwin64\bin\kill.exe
Not Found: ld
Found: C:\cygwin64\bin\ls.exe
Found: C:\cygwin64\bin\ls.exe
Not Found: make
Found: C:\cygwin64\bin\mv.exe
Found: C:\cygwin64\bin\mv.exe
Not Found: patch
Not Found: perl
Found: C:\cygwin64\bin\rm.exe
Found: C:\cygwin64\bin\rm.exe
Found: C:\cygwin64\bin\sed.exe
Found: C:\cygwin64\bin\sed.exe
Found: C:\cygwin64\bin\ssh.exe
Found: C:\cygwin64\bin\ssh.exe
Found: C:\cygwin64\bin\sh.exe
Found: C:\cygwin64\bin\sh.exe
Found: C:\cygwin64\bin\tar.exe
Found: C:\cygwin64\bin\tar.exe
Found: C:\cygwin64\bin\test.exe
Found: C:\cygwin64\bin\test.exe
Found: C:\cygwin64\bin\vi.exe
Found: C:\cygwin64\bin\vi.exe
Found: C:\cygwin64\bin\vim.exe
Found: C:\cygwin64\bin\vim.exe

   39k 2016/09/19 C:\cygwin64\bin\cygargp-0.dll
   16k 2013/03/26 C:\cygwin64\bin\cygattr-1.dll
  180k 2015/03/23 C:\cygwin64\bin\cygblkid-1.dll
   64k 2013/03/07 C:\cygwin64\bin\cygbz2-1.dll
   13k 2015/03/19 C:\cygwin64\bin\cygcom_err-2.dll
   10k 2016/06/09 C:\cygwin64\bin\cygcrypt-0.dll
 2235k 2017/01/26 C:\cygwin64\bin\cygcrypto-1.0.0.dll
  154k 2013/10/20 C:\cygwin64\bin\cygedit-0.dll
   27k 2015/11/17 C:\cygwin64\bin\cygffi-6.dll
   55k 2017/01/25 C:\cygwin64\bin\cygformw-10.dll
   70k 2016/06/13 C:\cygwin64\bin\cyggcc_s-seh-1.dll
   39k 2016/10/10 C:\cygwin64\bin\cyggdbm-4.dll
   13k 2016/10/10 C:\cygwin64\bin\cyggdbm_compat-4.dll
  527k 2017/01/21 C:\cygwin64\bin\cyggmp-10.dll
  258k 2016/09/26 C:\cygwin64\bin\cyggssapi_krb5-2.dll
   33k 2016/12/08 C:\cygwin64\bin\cyghistory7.dll
 1009k 2015/02/20 C:\cygwin64\bin\cygiconv-2.dll
   42k 2016/10/23 C:\cygwin64\bin\cygintl-8.dll
  177k 2016/09/26 C:\cygwin64\bin\cygk5crypto-3.dll
  722k 2016/09/26 C:\cygwin64\bin\cygkrb5-3.dll
   35k 2016/09/26 C:\cygwin64\bin\cygkrb5support-0.dll
    6k 2016/12/16 C:\cygwin64\bin\cyglsa64.dll
  139k 2015/11/09 C:\cygwin64\bin\cyglzma-5.dll
  114k 2016/01/11 C:\cygwin64\bin\cygmagic-1.dll
  169k 2016/10/10 C:\cygwin64\bin\cygman-2-7-5.dll
   22k 2016/10/10 C:\cygwin64\bin\cygmandb-2-7-5.dll
   29k 2017/01/25 C:\cygwin64\bin\cygmenuw-10.dll
  346k 2016/09/27 C:\cygwin64\bin\cygmpfr-4.dll
   53k 2017/01/25 C:\cygwin64\bin\cygncurses++w-10.dll
  279k 2017/01/25 C:\cygwin64\bin\cygncursesw-10.dll
  319k 2015/06/01 C:\cygwin64\bin\cygp11-kit-0.dll
   14k 2017/01/25 C:\cygwin64\bin\cygpanelw-10.dll
  474k 2017/01/27 C:\cygwin64\bin\cygpcre-1.dll
   39k 2015/04/09 C:\cygwin64\bin\cygpipeline-1.dll
   41k 2016/07/13 C:\cygwin64\bin\cygpopt-0.dll
  219k 2016/12/08 C:\cygwin64\bin\cygreadline7.dll
   11k 2015/07/17 C:\cygwin64\bin\cygsigsegv-2.dll
   89k 2015/03/23 C:\cygwin64\bin\cygsmartcols-1.dll
  399k 2017/01/26 C:\cygwin64\bin\cygssl-1.0.0.dll
   12k 2016/06/13 C:\cygwin64\bin\cygssp-0.dll
 1325k 2016/06/13 C:\cygwin64\bin\cygstdc++-6.dll
   66k 2016/08/22 C:\cygwin64\bin\cygtasn1-6.dll
   52k 2017/01/25 C:\cygwin64\bin\cygticw-10.dll
   15k 2015/03/23 C:\cygwin64\bin\cyguuid-1.dll
   80k 2014/11/19 C:\cygwin64\bin\cygz.dll
 3239k 2016/12/16 C:\cygwin64\bin\cygwin1.dll
    Cygwin DLL version info:
        DLL version: 2.6.1
        DLL epoch: 19
        DLL old termios: 5
        DLL malloc env: 28
        Cygwin conv: 181
        API major: 0
        API minor: 305
        Shared data: 5
        DLL identifier: cygwin1
        Mount registry: 3
        Cygwin registry name: Cygwin
        Installations name: Installations
        Cygdrive default prefix:
        Build date:
        Shared id: cygwin1S5

   39k 2016/09/19 C:\cygwin64\bin\cygargp-0.dll
   16k 2013/03/26 C:\cygwin64\bin\cygattr-1.dll
  180k 2015/03/23 C:\cygwin64\bin\cygblkid-1.dll
   64k 2013/03/07 C:\cygwin64\bin\cygbz2-1.dll
   13k 2015/03/19 C:\cygwin64\bin\cygcom_err-2.dll
   10k 2016/06/09 C:\cygwin64\bin\cygcrypt-0.dll
 2235k 2017/01/26 C:\cygwin64\bin\cygcrypto-1.0.0.dll
  154k 2013/10/20 C:\cygwin64\bin\cygedit-0.dll
   27k 2015/11/17 C:\cygwin64\bin\cygffi-6.dll
   55k 2017/01/25 C:\cygwin64\bin\cygformw-10.dll
   70k 2016/06/13 C:\cygwin64\bin\cyggcc_s-seh-1.dll
   39k 2016/10/10 C:\cygwin64\bin\cyggdbm-4.dll
   13k 2016/10/10 C:\cygwin64\bin\cyggdbm_compat-4.dll
  527k 2017/01/21 C:\cygwin64\bin\cyggmp-10.dll
  258k 2016/09/26 C:\cygwin64\bin\cyggssapi_krb5-2.dll
   33k 2016/12/08 C:\cygwin64\bin\cyghistory7.dll
 1009k 2015/02/20 C:\cygwin64\bin\cygiconv-2.dll
   42k 2016/10/23 C:\cygwin64\bin\cygintl-8.dll
  177k 2016/09/26 C:\cygwin64\bin\cygk5crypto-3.dll
  722k 2016/09/26 C:\cygwin64\bin\cygkrb5-3.dll
   35k 2016/09/26 C:\cygwin64\bin\cygkrb5support-0.dll
    6k 2016/12/16 C:\cygwin64\bin\cyglsa64.dll
  139k 2015/11/09 C:\cygwin64\bin\cyglzma-5.dll
  114k 2016/01/11 C:\cygwin64\bin\cygmagic-1.dll
  169k 2016/10/10 C:\cygwin64\bin\cygman-2-7-5.dll
   22k 2016/10/10 C:\cygwin64\bin\cygmandb-2-7-5.dll
   29k 2017/01/25 C:\cygwin64\bin\cygmenuw-10.dll
  346k 2016/09/27 C:\cygwin64\bin\cygmpfr-4.dll
   53k 2017/01/25 C:\cygwin64\bin\cygncurses++w-10.dll
  279k 2017/01/25 C:\cygwin64\bin\cygncursesw-10.dll
  319k 2015/06/01 C:\cygwin64\bin\cygp11-kit-0.dll
   14k 2017/01/25 C:\cygwin64\bin\cygpanelw-10.dll
  474k 2017/01/27 C:\cygwin64\bin\cygpcre-1.dll
   39k 2015/04/09 C:\cygwin64\bin\cygpipeline-1.dll
   41k 2016/07/13 C:\cygwin64\bin\cygpopt-0.dll
  219k 2016/12/08 C:\cygwin64\bin\cygreadline7.dll
   11k 2015/07/17 C:\cygwin64\bin\cygsigsegv-2.dll
   89k 2015/03/23 C:\cygwin64\bin\cygsmartcols-1.dll
  399k 2017/01/26 C:\cygwin64\bin\cygssl-1.0.0.dll
   12k 2016/06/13 C:\cygwin64\bin\cygssp-0.dll
 1325k 2016/06/13 C:\cygwin64\bin\cygstdc++-6.dll
   66k 2016/08/22 C:\cygwin64\bin\cygtasn1-6.dll
   52k 2017/01/25 C:\cygwin64\bin\cygticw-10.dll
   15k 2015/03/23 C:\cygwin64\bin\cyguuid-1.dll
   80k 2014/11/19 C:\cygwin64\bin\cygz.dll
 3239k 2016/12/16 C:\cygwin64\bin\cygwin1.dll
    Cygwin DLL version info:
        DLL version: 2.6.1
        DLL epoch: 19
        DLL old termios: 5
        DLL malloc env: 28
        Cygwin conv: 181
        API major: 0
        API minor: 305
        Shared data: 5
        DLL identifier: cygwin1
        Mount registry: 3
        Cygwin registry name: Cygwin
        Installations name: Installations
        Cygdrive default prefix:
        Build date:
        Shared id: cygwin1S5


Service             : sshd
Display name        : CYGWIN sshd
Current State       : Running
Controls Accepted   : Stop
Command             : /usr/sbin/sshd -D


Cygwin Package Information
Package              Version            Status
_autorebase          001004-1           OK
alternatives         1.3.30c-10         OK
base-cygwin          3.8-1              OK
base-files           4.2-4              OK
bash                 4.4.12-3           OK
bzip2                1.0.6-2            OK
ca-certificates      2.11-1             OK
coreutils            8.26-1             OK
csih                 0.9.9-1            OK
cygrunsrv            1.62-1             OK
cygutils             1.4.15-2           OK
cygwin               2.6.1-1            OK
dash                 0.5.8-3            OK
diffutils            3.5-2              OK
editrights           1.03-1             OK
file                 5.25-1             OK
findutils            4.6.0-1            OK
gawk                 4.1.4-2            OK
getent               2.18.90-4          OK
grep                 2.27-2             OK
groff                1.22.3-1           OK
gzip                 1.8-1              OK
hostname             3.13-1             OK
info                 6.3-1              OK
ipc-utils            1.0-2              OK
less                 481-1              OK
libargp              20110921-3         OK
libattr1             2.4.46-1           OK
libblkid1            2.25.2-2           OK
libbz2_1             1.0.6-2            OK
libcom_err2          1.42.12-2          OK
libcrypt0            1.4-1              OK
libedit0             20130712-1         OK
libffi6              3.2.1-2            OK
libgcc1              5.4.0-1            OK
libgdbm4             1.12-1             OK
libgmp10             6.1.2-1            OK
libgssapi_krb5_2     1.14.4-1           OK
libiconv             1.14-3             OK
libiconv2            1.14-3             OK
libintl8             0.19.8.1-2         OK
libk5crypto3         1.14.4-1           OK
libkrb5_3            1.14.4-1           OK
libkrb5support0      1.14.4-1           OK
liblzma5             5.2.2-1            OK
libmpfr4             3.1.5-1            OK
libncursesw10        6.0-9.20170121     OK
libopenssl100        1.0.2k-1           OK
libp11-kit0          0.22.1-1           OK
libpcre1             8.40-1             OK
libpipeline1         1.4.0-1            OK
libpopt-common       1.16-2             OK
libpopt0             1.16-2             OK
libreadline7         7.0.1-1            OK
libsigsegv2          2.10-2             OK
libsmartcols1        2.25.2-2           OK
libssp0              5.4.0-1            OK
libstdc++6           5.4.0-1            OK
libtasn1_6           4.9-1              OK
libuuid1             2.25.2-2           OK
login                1.11-1             OK
man-db               2.7.5-2            OK
mintty               2.7.4-0            OK
ncurses              6.0-9.20170121     OK
openssh              7.4p1-1            OK
openssl              1.0.2k-1           OK
p11-kit              0.22.1-1           OK
p11-kit-trust        0.22.1-1           OK
rebase               4.4.2-1            OK
run                  1.3.4-2            OK
sed                  4.2.2-3            OK
tar                  1.29-1             OK
terminfo             6.0-9.20170121     OK
tzcode               2016j-1            OK
tzdata               2016j-1            OK
unzip                6.0-15             OK
util-linux           2.25.2-2           OK
vim                  8.0.0244-1         OK
vim-common           8.0.0244-1         OK
vim-minimal          8.0.0244-1         OK
which                2.20-2             OK
xxd                  8.0.0244-1         OK
xz                   5.2.2-1            OK
zip                  3.0-12             OK
zlib0                1.2.8-3            OK

[-- Attachment #3: Type: text/plain, Size: 219 bytes --]


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: Problems with ssh-host-config on Windows 10
  2017-02-02 11:20 Problems with ssh-host-config on Windows 10 Erik Bray
@ 2017-02-02 13:08 ` Corinna Vinschen
  2017-02-06  9:51   ` Erik Bray
  0 siblings, 1 reply; 4+ messages in thread
From: Corinna Vinschen @ 2017-02-02 13:08 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 1776 bytes --]

On Feb  2 12:19, Erik Bray wrote:
> Hi all,
> 
> I've been trying to get a Cygwin sshd server running on a Windows 10
> VM, and have found it to be surprisingly tricky without some
> additional fiddling, and it's not clear to me whether that's expected
> or if it's a bug.  I've attached the cygcheck output from the VM.
> 
> The symptom I've having seems to be the same as in this post:
> 
> https://cygwin.com/ml/cygwin/2015-06/msg00265.html
> 
> The problem seems to be stemming from some assumptions in:
> /usr/share/csih/cygwin-service-installation-helper.sh
> 
> It creates the "privileged user" (in my case with the default name
> cyg_server) with `net user`, including the SAM comment entry:
> 
> /comment:'<cygwin home="/var/empty" shell="/bin/false"/>'
> 
> Shortly after it calls:
> 
> passwd -e "${csih_PRIVILEGED_USERNAME}"
> 
> and this fails with:
> 
> Warning: Setting password expiry for user 'desktop-mk2koav+cyg_server' failed!
> 
> This happens because this is a fresh Cygwin install with all the
> default settings in /etc/nsswitch.conf.  In particular, no passwd
> entry is found for the cyg_server user unless I explicitly add "local"
> to db_enum.  Furthermore, the SAM comment entry is not read correctly
> without db_home: desc and db_shell: desc.  In summary, I had to edit
> /etc/nsswitch.conf to:
> 
> passwd db
> db_enum: local
> db_home: desc
> db_shell: desc

The assumption in ssh-host-config is that your nsswitch.conf settings
are already correct.  It's kind of tricky to set up accounts and stuff
in a not yet configured environment.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: Problems with ssh-host-config on Windows 10
  2017-02-02 13:08 ` Corinna Vinschen
@ 2017-02-06  9:51   ` Erik Bray
  2017-02-12 11:09     ` Corinna Vinschen
  0 siblings, 1 reply; 4+ messages in thread
From: Erik Bray @ 2017-02-06  9:51 UTC (permalink / raw)
  To: cygwin

On Thu, Feb 2, 2017 at 2:08 PM, Corinna Vinschen
<corinna-cygwin@cygwin.com> wrote:
> On Feb  2 12:19, Erik Bray wrote:
>> Hi all,
>>
>> I've been trying to get a Cygwin sshd server running on a Windows 10
>> VM, and have found it to be surprisingly tricky without some
>> additional fiddling, and it's not clear to me whether that's expected
>> or if it's a bug.  I've attached the cygcheck output from the VM.
>>
>> The symptom I've having seems to be the same as in this post:
>>
>> https://cygwin.com/ml/cygwin/2015-06/msg00265.html
>>
>> The problem seems to be stemming from some assumptions in:
>> /usr/share/csih/cygwin-service-installation-helper.sh
>>
>> It creates the "privileged user" (in my case with the default name
>> cyg_server) with `net user`, including the SAM comment entry:
>>
>> /comment:'<cygwin home="/var/empty" shell="/bin/false"/>'
>>
>> Shortly after it calls:
>>
>> passwd -e "${csih_PRIVILEGED_USERNAME}"
>>
>> and this fails with:
>>
>> Warning: Setting password expiry for user 'desktop-mk2koav+cyg_server' failed!
>>
>> This happens because this is a fresh Cygwin install with all the
>> default settings in /etc/nsswitch.conf.  In particular, no passwd
>> entry is found for the cyg_server user unless I explicitly add "local"
>> to db_enum.  Furthermore, the SAM comment entry is not read correctly
>> without db_home: desc and db_shell: desc.  In summary, I had to edit
>> /etc/nsswitch.conf to:
>>
>> passwd db
>> db_enum: local
>> db_home: desc
>> db_shell: desc
>
> The assumption in ssh-host-config is that your nsswitch.conf settings
> are already correct.  It's kind of tricky to set up accounts and stuff
> in a not yet configured environment.

I think that's reasonable, but the question is what is "correct"?  Any
valid settings for nsswitch.conf could be "correct" for different use
cases, whereas the cygwin-service-installation-helper.sh script seems
to have some very specific requirements that don't match the default
configuration, or even many non-default configurations (especially
w.r.t. db_home and db_shell).

Best,
Erik

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: Problems with ssh-host-config on Windows 10
  2017-02-06  9:51   ` Erik Bray
@ 2017-02-12 11:09     ` Corinna Vinschen
  0 siblings, 0 replies; 4+ messages in thread
From: Corinna Vinschen @ 2017-02-12 11:09 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 2413 bytes --]

On Feb  6 10:51, Erik Bray wrote:
> On Thu, Feb 2, 2017 at 2:08 PM, Corinna Vinschen
> <corinna-cygwin@cygwin.com> wrote:
> > On Feb  2 12:19, Erik Bray wrote:
> >> The problem seems to be stemming from some assumptions in:
> >> /usr/share/csih/cygwin-service-installation-helper.sh
> >>
> >> It creates the "privileged user" (in my case with the default name
> >> cyg_server) with `net user`, including the SAM comment entry:
> >>
> >> /comment:'<cygwin home="/var/empty" shell="/bin/false"/>'
> >>
> >> Shortly after it calls:
> >>
> >> passwd -e "${csih_PRIVILEGED_USERNAME}"
> >>
> >> and this fails with:
> >>
> >> Warning: Setting password expiry for user 'desktop-mk2koav+cyg_server' failed!
> >>
> >> This happens because this is a fresh Cygwin install with all the
> >> default settings in /etc/nsswitch.conf.  In particular, no passwd
> >> entry is found for the cyg_server user unless I explicitly add "local"
> >> to db_enum.  Furthermore, the SAM comment entry is not read correctly
> >> without db_home: desc and db_shell: desc.  In summary, I had to edit
> >> /etc/nsswitch.conf to:
> >>
> >> passwd db
> >> db_enum: local
> >> db_home: desc
> >> db_shell: desc
> >
> > The assumption in ssh-host-config is that your nsswitch.conf settings
> > are already correct.  It's kind of tricky to set up accounts and stuff
> > in a not yet configured environment.
> 
> I think that's reasonable, but the question is what is "correct"?  Any
> valid settings for nsswitch.conf could be "correct" for different use
> cases, whereas the cygwin-service-installation-helper.sh script seems
> to have some very specific requirements that don't match the default
> configuration, or even many non-default configurations (especially
> w.r.t. db_home and db_shell).

The script depends on what's returned by tools like getent, mkpasswd and
mkgroup.  Those in turn depend on the nsswitch.conf settings.  If
there's a bug in there, I'd be grateful for a fix.  Maybe at one point
it should call mkpasswd instead of getent, the former not depending on
db_enum, in contrast to the latter?

Or maybe the default for db_enum is the actual problem?  Maybe it should
be set to cache + builtin + local accounts?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2017-02-12 11:09 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-02-02 11:20 Problems with ssh-host-config on Windows 10 Erik Bray
2017-02-02 13:08 ` Corinna Vinschen
2017-02-06  9:51   ` Erik Bray
2017-02-12 11:09     ` Corinna Vinschen

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).