Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[Shekhar Shukla]

 Hi Team,

I am having issue while establishing a ssh connection from Linux to Windows
machine using Cygwin. My powershell script works when I run it from Linux
using ssh connection(Cygwin) to Windows  and manually enter my passowrd.
But whn I use public key to authenticate my user(making a password less
connection), it fails. Is it a bug with CYgwin?

Below is the step by step explantion-


1. Sample
Code
I have put on Windows machine. This machine has Cygwin installed on it

+++++++++++++
:
+++++++++++

echo "Hello World!"
import-module ActiveDirectory
get-adcomputer -Filter * |select Name|select -first 10
+++++++++++++++++++++++++


2. When I run
this code
 from Linux machine using Cygwin WITHOUT enabling password-less connection,
It asks for password
of Windows machine and after entering the password it
 execute
s
 like a charm. See below-

+++++++++++++++++++++++

shekhar@LinuxBox:~$ ssh shekhar@WindowsBox.doamin.com 'powershell
"C:/scripts/abc.ps1"'
shekhar@WindoxBox.domain.com's password:

Hello World!

Name
----
Server1
Server2
Server3
Server4

++++++++++++++++++++++++

3. Now I generate an ssh-key on Linux for user shekhar and copy it on
Windows machine to make a password less connection.

++++++++++++++++++++++++++++++

shekhar@LinuxBox:~$ ssh-copy-id shekhar@WindowsBox.doamin.com
shekhar@WindowsBox's password:
Now try logging into the machine, with "ssh 'shekhar@WindowsBox.domain.com'",
and check in:

  .ssh/authorized_keys

to make sure we haven't added extra keys that you weren't expecting.
++++++++++++++++++++++++++++++++


4. Now I run the same script again. Now it doesn't asks a password makes a
connection with Windows box and display Hello world(first line of code) but
fails on the second line

+++++++++++++++

shekhar@LinuxBox:~$ ssh shekhar@WindoxBox.domain.com  'powershell
"C:/scripts/abc.ps1"'
Hello World!
WARNING: Error initializing default drive: 'Unable to contact the server.
This
may be because this server does not exist, it is currently down, or it does
not
 have the Active Directory Web Services running.'.
Get-ADComputer : Unable to contact the server. This may be because this
server
does not exist, it is currently down, or it does not have the Active
Directory
Web Services running.
At C:\scripts\abc.ps1:3 char:15
+ get-adcomputer <<<<  -Filter * |select Name|select -first 10
    + CategoryInfo          : ResourceUnavailable: (:) [Get-ADComputer],
ADSer
   verDownException
    + FullyQualifiedErrorId : Unable to contact the server. This may be
becaus
   e this server does not exist, it is currently down, or it does not have
th
  e Active Directory Web Services running.,Microsoft.ActiveDirectory.Managem
 ent.Commands.GetADComputer
++++++++++++++++++

Thanks in advance.

Regards,
Shekhar

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[Marco Atzeri]

going back on the mailing list.

Am 30.07.2018 um 17:40 schrieb Shekhar Shukla:
> Hi Marco,
> 
> You are absolutely right. In the second case, I do not see Administrator 
> group which is necessary. Why is it behaving so when user id is same in 
> both the cases? Is there any workaround to get it working?

I assume is due to Windows security setting.
No idea about workaround, may be some other can help
solving it.

> Thanks again.
> 
> Regards,
> Shekhar
> 
> On Mon, Jul 30, 2018 at 5:30 PM, Marco Atzeri  wrote:
> 
>     Am 30.07.2018 um 13:20 schrieb Shekhar Shukla:
> 
>            Hi Team,
> 
>         I am having issue while establishing a ssh connection from Linux
>         to Windows
>         machine using Cygwin. My powershell script works when I run it
>         from Linux
>         using ssh connection(Cygwin) to Windows  and manually enter my
>         passowrd.
>         But whn I use public key to authenticate my user(making a
>         password less
>         connection), it fails. Is it a bug with CYgwin?
> 
>     ...
> 
> 
>         Thanks in advance.
> 
>         Regards,
>         Shekhar
> 
> 
>     try executing "id" in both scenarios
> 
>     I guess in the second one you are lacking some
>     administrative groups
> 
>     Regards
>     Marco
> 
> 


---
Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft.
https://www.avast.com/antivirus


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[john doe]

On 7/30/2018 1:20 PM, Shekhar Shukla wrote:
>   Hi Team,
> 
> I am having issue while establishing a ssh connection from Linux to Windows
> machine using Cygwin. My powershell script works when I run it from Linux
> using ssh connection(Cygwin) to Windows  and manually enter my passowrd.
> But whn I use public key to authenticate my user(making a password less
> connection), it fails. Is it a bug with CYgwin?
> 
> Below is the step by step explantion-
> 
> 
> 1. Sample
> Code
> I have put on Windows machine. This machine has Cygwin installed on it
> 
> +++++++++++++
> :
> +++++++++++
> 
> echo "Hello World!"
> import-module ActiveDirectory
> get-adcomputer -Filter * |select Name|select -first 10
> +++++++++++++++++++++++++
> 
> 
> 2. When I run
> this code
>   from Linux machine using Cygwin WITHOUT enabling password-less connection,
> It asks for password
> of Windows machine and after entering the password it
>   execute
> s
>   like a charm. See below-
> 
> +++++++++++++++++++++++
> 
> shekhar@LinuxBox:~$ ssh shekhar@WindowsBox.doamin.com 'powershell
> "C:/scripts/abc.ps1"'
> shekhar@WindoxBox.domain.com's password:
> 
> Hello World!
> 
> Name
> ----
> Server1
> Server2
> Server3
> Server4
> 
> ++++++++++++++++++++++++
> 
> 3. Now I generate an ssh-key on Linux for user shekhar and copy it on
> Windows machine to make a password less connection.
> 
> ++++++++++++++++++++++++++++++
> 
> shekhar@LinuxBox:~$ ssh-copy-id shekhar@WindowsBox.doamin.com
> shekhar@WindowsBox's password:
> Now try logging into the machine, with "ssh 'shekhar@WindowsBox.domain.com'",
> and check in:
> 
>    .ssh/authorized_keys
> 
> to make sure we haven't added extra keys that you weren't expecting.
> ++++++++++++++++++++++++++++++++
> 
> 
> 4. Now I run the same script again. Now it doesn't asks a password makes a
> connection with Windows box and display Hello world(first line of code) but
> fails on the second line
> 
> +++++++++++++++
> 
> shekhar@LinuxBox:~$ ssh shekhar@WindoxBox.domain.com  'powershell
> "C:/scripts/abc.ps1"'
> Hello World!
> WARNING: Error initializing default drive: 'Unable to contact the server.
> This
> may be because this server does not exist, it is currently down, or it does
> not
>   have the Active Directory Web Services running.'.
> Get-ADComputer : Unable to contact the server. This may be because this
> server
> does not exist, it is currently down, or it does not have the Active
> Directory
> Web Services running.
> At C:\scripts\abc.ps1:3 char:15
> + get-adcomputer <<<<  -Filter * |select Name|select -first 10
>      + CategoryInfo          : ResourceUnavailable: (:) [Get-ADComputer],
> ADSer
>     verDownException
>      + FullyQualifiedErrorId : Unable to contact the server. This may be
> becaus
>     e this server does not exist, it is currently down, or it does not have
> th
>    e Active Directory Web Services running.,Microsoft.ActiveDirectory.Managem
>   ent.Commands.GetADComputer
> ++++++++++++++++++
> 

In ~/.ssh/authorized_keys you could try those options:

NO-PTY,NO-USER-RC ssh

EG: authorized_keys:
NO-PTY,NO-USER-RC ssh ...

https://www.ssh.com/ssh/authorized_keys/openssh

-- 
John Doe

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[Achim Gratz]

Shekhar Shukla writes:
> I am having issue while establishing a ssh connection from Linux to Windows
> machine using Cygwin. My powershell script works when I run it from Linux
> using ssh connection(Cygwin) to Windows  and manually enter my passowrd.
> But whn I use public key to authenticate my user(making a password less
> connection), it fails. Is it a bug with CYgwin?

No, Windows simply does not give you full access to your normal
privileges when you log in remotely without a password.  Specifically,
you won't be able to access anything that is considered non-local, like
external fileshares.

See: https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview

If you trust the server in question and all its administrators and other
users, you can use "Method 3" as described above.  Don't forget to set
up cygserver if you want to be able to set or change the password with a
non-administrative account.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

SD adaptations for KORG EX-800 and Poly-800MkII V0.9:
http://Synth.Stromeko.net/Downloads.html#KorgSDada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[Shekhar Shukla]

Hello,

I will appreciate any help. Thanks.

On Mon, Jul 30, 2018 at 10:57 PM, Marco Atzeri <marco.atzeri@gmail.com>
wrote:

> going back on the mailing list.
>
> Am 30.07.2018 um 17:40 schrieb Shekhar Shukla:
>
>> Hi Marco,
>>
>> You are absolutely right. In the second case, I do not see Administrator
>> group which is necessary. Why is it behaving so when user id is same in
>> both the cases? Is there any workaround to get it working?
>>
>
> I assume is due to Windows security setting.
> No idea about workaround, may be some other can help
> solving it.
>
> Thanks again.
>>
>> Regards,
>> Shekhar
>>
>> On Mon, Jul 30, 2018 at 5:30 PM, Marco Atzeri  wrote:
>>
>>     Am 30.07.2018 um 13:20 schrieb Shekhar Shukla:
>>
>>            Hi Team,
>>
>>         I am having issue while establishing a ssh connection from Linux
>>         to Windows
>>         machine using Cygwin. My powershell script works when I run it
>>         from Linux
>>         using ssh connection(Cygwin) to Windows  and manually enter my
>>         passowrd.
>>         But whn I use public key to authenticate my user(making a
>>         password less
>>         connection), it fails. Is it a bug with CYgwin?
>>
>>     ...
>>
>>
>>         Thanks in advance.
>>
>>         Regards,
>>         Shekhar
>>
>>
>>     try executing "id" in both scenarios
>>
>>     I guess in the second one you are lacking some
>>     administrative groups
>>
>>     Regards
>>     Marco
>>
>>
>>
>
> ---
> Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft.
> https://www.avast.com/antivirus
>
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[Thomas Wolff]

Am 30.07.2018 um 21:05 schrieb Achim Gratz:
> Shekhar Shukla writes:
>> I am having issue while establishing a ssh connection from Linux to Windows
>> machine using Cygwin. My powershell script works when I run it from Linux
>> using ssh connection(Cygwin) to Windows  and manually enter my passowrd.
>> But whn I use public key to authenticate my user(making a password less
>> connection), it fails. Is it a bug with CYgwin?
> No, Windows simply does not give you full access to your normal
> privileges when you log in remotely without a password.  Specifically,
> you won't be able to access anything that is considered non-local, like
> external fileshares.
If I setup password-less login to the cygwin ssh server, using 
authorized-keys, I can access all remote shares from cygwin,
and also from cmd, started from cygwin with `winpty cmd`, for that matter.
Possibly, if the remote login is the first login of the user, the mounts 
will just have to be established? (Using `net use`)

> See: https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview
>
> If you trust the server in question and all its administrators and other
> users, you can use "Method 3" as described above.  Don't forget to set
> up cygserver if you want to be able to set or change the password with a
> non-administrative account.
>
>
> Regards,
> Achim.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Issue running PowerShell code on Windows Machine from Linux machine using Cygwin

[Achim Gratz]

Thomas Wolff writes:
> If I setup password-less login to the cygwin ssh server, using
> authorized-keys, I can access all remote shares from cygwin,
> and also from cmd, started from cygwin with `winpty cmd`, for that matter.
> Possibly, if the remote login is the first login of the user, the
> mounts will just have to be established? (Using `net use`)

I know for certain that absolutely doesn't work in a proper AD domain.
If you're in a home network, the rules are much more relaxed, though.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

SD adaptation for Waldorf Blofeld V1.15B11:
http://Synth.Stromeko.net/Downloads.html#WaldorfSDada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple