Re: Cygwin 3.1.5, 3.1.6 and 3.1.7 builds reporting tty errors with OpenSSH Services in indows Event Logs

[Takashi Yano <takashi.yano@nifty.ne.jp>]

On Tue, 15 Sep 2020 23:46:30 +0000
Peter Board via Cygwin wrote:
> Hi Stephen,
> 
> Thanks for responding. I have a standard Cygwin install on my Development server (32bit and 64bit setups) that I extract the updates from for our custom package and I tested for the fault after I saw it was occurring in our custom Cygwin install using the standard Cygwin setup. The same errors are being logged in the standard Cygwin install. I ran the Cygwin sshd installation script in the standard 64bit Cygwin install, to create the Cygwin OpenSSH service, authorised my user account to login and found that the Windows Event logs also logged the same errors as our normal package location.
> 
> I keep the standard installs on “F:\Cygwin” (32bit Cygwin) and “F:\Cygwin64” (64bit Cygwin).
> 
> Our Custom Cygwin \ OpenSSH package lives on “C:\Program Files(x86)\OpenSSH”, which is where we have kept it for 15+ odd years.
> 
> After setting up the Cygwin (64bit version) just using a out of the box Cygwin installer on F:\Cygwin64, I setup OpenSSH using the built in /bin/ssh-host-config script and then authorised my user to login to the “cygsshd” service. The standard SSH service with no modifications from me, produces these errors in the Windows Event Logs.
> 
> It accepted the password and logged the user in fine to bash shell. (I’ve removed the hostname and username from the example below)
> 
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:26 PM
> Event ID:      0
> Task Category: None
> Level:         Information
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
> 
> If the event originated on another computer, the display information had to be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1620: Accepted password for USERNAME from X.X.X.X port 56545 ssh2
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>4</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:26.000000000Z" />
>     <EventRecordID>2427841</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer>hostname</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1620: Accepted password for USERNAME from X.X.X.X port 56545 ssh2</Data>
>   </EventData>
> </Event>
> 
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:27 PM
> Event ID:      0
> Task Category: None
> Level:         Error
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
> 
> If the event originated on another computer, the display information had to be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1622: error: Failed to disconnect from controlling tty.
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>2</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:27.000000000Z" />
>     <EventRecordID>2427842</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer>hostname</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1622: error: Failed to disconnect from controlling tty.</Data>
>   </EventData>
> </Event>
> ---------- Event Log Entries ------------
> 
> Log Name:      Application
> Source:        sshd
> Date:          14/09/2020 4:30:27 PM
> Event ID:      0
> Task Category: None
> Level:         Error
> Keywords:      Classic
> User:          SYSTEM
> Computer:      hostname
> Description:
> The description for Event ID 0 from source sshd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
> 
> If the event originated on another computer, the display information had to be saved with the event.
> 
> The following information was included with the event:
> 
> sshd: PID 1622: error: ioctl(TIOCSCTTY): Operation not permitted
> 
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>   <System>
>     <Provider Name="sshd" />
>     <EventID Qualifiers="0">0</EventID>
>     <Level>2</Level>
>     <Task>0</Task>
>     <Keywords>0x80000000000000</Keywords>
>     <TimeCreated SystemTime="2020-09-14T06:30:27.000000000Z" />
>     <EventRecordID>2427843</EventRecordID>
>     <Channel>Application</Channel>
>     <Computer> hostname </Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data>sshd: PID 1622: error: ioctl(TIOCSCTTY): Operation not permitted</Data>
>   </EventData>
> </Event>
> 
> -------------- End of Entries ------------------

What does the following command say?

cygrunsrv -V -L

-- 
Takashi Yano <takashi.yano@nifty.ne.jp>