public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Brian Inglis <Brian.Inglis@SystematicSw.ab.ca>
To: cygwin@cygwin.com
Subject: Re: Cygwin sshd doesn't use domain user names on boot up
Date: Tue, 05 Dec 2017 23:52:00 -0000	[thread overview]
Message-ID: <6a47b6c6-032a-37d0-fe56-2ae21e6a5a68@SystematicSw.ab.ca> (raw)
In-Reply-To: <40190877-370C-45C1-9D35-50B88A67AA4A@cisco.com>

On 2017-12-05 12:24, Chris Wilson (chwilso3) wrote:
> I'm trying to set up sshd service on a Windows 10 build slave VM (for use 
> with Jenkins) which is attached to one of the domains in our network. I
> initially ran the ssh-host-config script to generate the cyg_server user and
> I was able to start the sshd service on Windows. Assuming that the Windows
> user is DOMAIN\myuser (real info redacted), I was able to SSH into the
> machine and the shell prompt shows up correctly:
> myuser@build-slave.example.com ~
> $ pwd
> /home/myuser
> However, after I reboot the machine, the username that shows up in the
> prompt changes to the following:
> DOMAIN+User(1234567)@build-slave.example.com ~
> $ pwd
> /home/myuser
> If I simply restart the sshd service once the machine is booted, the
> username changes back from "DOMAIN+User(1234567)" --> "myuser":
> # restart sshd
> $ net stop sshd
> $ net start sshd
> # prompt is fixed now
> myuser@build-slave.example.com ~
> $ pwd
> /home/myuser
> Anybody have an idea what's going on here? I'm not sure why the username 
> isn't picked up correctly when sshd starts up initially after a reboot. Is
> there some kind of dependency that needs to be added to the sshd service on boot?

Did you install the service by running ssh-host-config?

Check service dependencies with:
$ cygrunsrv -VQ sshd
Service             : sshd
Display name        : CYGWIN sshd
Current State       : Running
Controls Accepted   : Stop, Preshutdown
Command             : /usr/sbin/sshd -D
stdin path          : /dev/null
stdout path         : /var/log/sshd.log
stderr path         : /var/log/sshd.log
Process Type        : Own Process
Startup             : Manual
Dependencies        : cygserver, tcpip
Account             : .\cyg_server

You may have to add an additional dependency on netlogon or other AD services to
ensure they are available before sshd starts.

If your service start is Automatic, you may also want to change it manually to
Automatic (delayed start), to allow time for network services to be available.

I don't run in a domain, but found it useful to tweak the Cygwin and Windows
service settings to avoid issues with startup and updates e.g. Manual start,
dependency on cygserver, Preshutdown termination before other services, shutdown
script run in a pre-setup script or on Preshutdown event, and startup script run
at boot and in an /etc/postinstall/zp_zzz_service_start.sh script after all
other setup processing.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

  reply	other threads:[~2017-12-05 20:17 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-12-05 20:17 Chris Wilson (chwilso3)
2017-12-05 23:52 ` Brian Inglis [this message]
2017-12-08  8:58   ` Chris Wilson
2017-12-08 13:39     ` Chris Wilson

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=6a47b6c6-032a-37d0-fe56-2ae21e6a5a68@SystematicSw.ab.ca \
    --to=brian.inglis@systematicsw.ab.ca \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).