From: "Larry Hall (Cygwin)" <reply-to-list-only-lh@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: sshd win2003 CYGWIN_NT-5.2 1.7.7(0.230/5/3)
Date: Wed, 31 Aug 2011 18:04:00 -0000 [thread overview]
Message-ID: <4E5E777B.6060700@cygwin.com> (raw)
In-Reply-To: <0087189622C8E440B0568619CF342A0B29A8C7@x2008mb2.infoblox.com>
On 8/26/2011 11:08 AM, Drew Patten wrote:
> # ls -ld /var/empty
> drwxr-xr-x+ 1 cyg_server root 0 Mar 9 14:39 /var/empty
>
> # ls -ld /etc/ssh*
> -rw-r--r-- 1 ???????? root 1555 Aug 26 07:56 /etc/ssh_config
> -rw------- 1 cyg_server None 668 Mar 9 14:39 /etc/ssh_host_dsa_key
> -rw-r--r-- 1 cyg_server None 613 Mar 9 14:39 /etc/ssh_host_dsa_key.pub
> -rw------- 1 frtest root 227 Aug 25 14:48 /etc/ssh_host_ecdsa_key
> -rw-r--r-- 1 frtest root 178 Aug 25 14:48 /etc/ssh_host_ecdsa_key.pub
> -rw------- 1 cyg_server None 988 Mar 9 14:39 /etc/ssh_host_key
> -rw-r--r-- 1 cyg_server None 653 Mar 9 14:39 /etc/ssh_host_key.pub
> -rw------- 1 cyg_server None 1675 Mar 9 14:39 /etc/ssh_host_rsa_key
> -rw-r--r-- 1 cyg_server None 405 Mar 9 14:39 /etc/ssh_host_rsa_key.pub
> -rw-r--r-- 1 ???????? root 3185 Aug 26 07:56 /etc/sshd_config
>
> # cat /var/log/sshd.log
> /var/empty must be owned by root and not group or world-writable.
Have you compared ownerships between working and non-working machines?
Absent that (or assuming that doesn't yield results for some reason),
I'd recommend changing the owners of '/etc/ssh_config' and
'/etc/sshd_config' to 'cyg_server' (my group for these files is 'None'
but I doubt that's of any significance.) Check '/var/empty' with
'getfacl'. Mine reads this way:
$ getfacl /var/empty
# file: /var/empty
# owner: cyg_server
# group: root
user::rwx
group::r-x
group:SYSTEM:rwx
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x
--
Larry
_____________________________________________________________________
A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
prev parent reply other threads:[~2011-08-31 18:04 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-08-26 15:10 Drew Patten
2011-08-31 18:04 ` Larry Hall (Cygwin) [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4E5E777B.6060700@cygwin.com \
--to=reply-to-list-only-lh@cygwin.com \
--cc=cygwin@cygwin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).