From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 2494 invoked by alias); 17 May 2017 14:53:56 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 2485 invoked by uid 89); 17 May 2017 14:53:56 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00,GIT_PATCH_2,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2 spammy=cygrunsrv, Hx-languages-length:2414, Hx-spam-relays-external:64.59.136.138, timestamps X-HELO: smtp-out-so.shaw.ca Received: from smtp-out-so.shaw.ca (HELO smtp-out-so.shaw.ca) (64.59.136.138) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Wed, 17 May 2017 14:53:54 +0000 Received: from [192.168.1.100] ([174.0.238.184]) by shaw.ca with SMTP id B0Kpdg3cZeQWUB0KqdJyDZ; Wed, 17 May 2017 08:53:56 -0600 X-Authority-Analysis: v=2.2 cv=UpATD64B c=1 sm=1 tr=0 a=WqCeCkldcEjBO3QZneQsCg==:117 a=WqCeCkldcEjBO3QZneQsCg==:17 a=IkcTkHD0fZMA:10 a=AQJUoBvcukQLCN1DnjQA:9 a=QEXdDO2ut3YA:10 Subject: Re: when I try to open file with another user on CYGWIN , I get access denied message References: <2e1a331d-18e5-4dcc-0db6-257eeea2640a@gmx.com> <592ee8fc-fbdb-7bea-3508-0e5e42dee689@gmx.com> To: cygwin@cygwin.com From: Brian Inglis Reply-To: Brian.Inglis@SystematicSw.ab.ca Message-ID: <2554372a-1715-dea5-fbee-214773f3bdd1@SystematicSw.ab.ca> Date: Wed, 17 May 2017 17:08:00 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <592ee8fc-fbdb-7bea-3508-0e5e42dee689@gmx.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfGZ0TIDIQoCzKf/t4vhVRDPdCvKke+t9PGHdJx+J7DoFRkkXBArZojiL/qv5wm/KysA0tPT/afK2N5cjEk8S5QTVSu9P7Uic/X1KaK9Rhj72gyj3rD/R +46bbdZ2YmsWYxBH1VocjE/I8QrCyp+TVwSzsDNKvDzQwnp8MZMSHmi0jNSbde7m7CkSY4GMFqcOQg== X-IsSubscribed: yes X-SW-Source: 2017-05/txt/msg00280.txt.bz2 On 2017-05-17 07:53, Alex wrote: > On 16/05/2017 20:08, Brian Inglis wrote: >> On 2017-05-16 02:12, Alex wrote: >>> I have windows 2008 server and external partner requested me to install >>> CGYWIN on it so they can send a file to via SSH. I created a domain user >>> called test1 and they sent me the public key and installed home folder. >>> They can send the file without any problem. I can able to read and >>> delete if I login to windows server with test1 username. >>> My problem is I can not open that files with another username. I have a >>> username call test2 and I need to login to windows server with this >>> username and run the script to import the files from test1 folder. I got >>> access denied message when I try to open it. >>> file permission show ; >>> -rwx------ >>> I changed the umask in profile to 002 , but did not fix the problem. >>> Any idea? >>> By the way I have a little knowledge of linux >> >> You would have to change umask in sshd's user's profile to perhaps have >> any effect. > > I did in the /etc/profile but not sure what you mean in sshd's user's > profile! Anything in sshd's startup that could change umask e.g. /etc/sshd.conf. None of init, systemd, nor cygrunsrv require shells, so /etc/profile is out. >> You may want to check the receiving directory DACLs with getfacl .../ >> and if necessary change them with setfacl -m d:g::r--,d:o::r-- if only >> data is being transferred to that directory. > > #getfacl samplefolder > #owner :gm-user1 > #group :Domain User > user ::rwx > group :: r-x > other:r-x > > Yes they only transfer to file in this folder, if I run setfacl for > this directory, will it apply to files inside and the file will be added > later ? Default ACLs are applied to directories or files created in that directory, modified by creation options, or later commands. >> Removing directory DACLs e.g. with setfacl -bk .../ can stop Windows >> programs being able to read or write directories or contents. >> >> Get them to set the permissions chmod +r on the source if possible, > they said already give the file with full permission for everyone > >> and send with scp -p. > ? What file transfer client are they using? You said ssh, so I assumed scp, -p retains permissions and timestamps. -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple