can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected

public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed

* can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
       [not found] <AM6PR07MB5334CE88B67F5421BA671C43957B0@AM6PR07MB5334.eurprd07.prod.outlook.com>
@ 2019-02-26 13:39 ` Maayan Apelboim
  2019-02-26 15:33   ` Andrey Repin
  0 siblings, 1 reply; 14+ messages in thread
From: Maayan Apelboim @ 2019-02-26 13:39 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 1048 bytes --]

Hi,

I hope I'm mailing the proper mailing list..
I am using password-less ssh login using RSA key to login windows servers from linux.
I've read this article about network shares problems when using RSA key instead password and decided method 2 is most suitable for my case:
https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview

So I ran passwd -R for the relevant user, but still getting 'permission denied' when trying to access network shares.
Tried restarting the ssh service and rebooting the server but it didn't help.

I checked the registry as SYSTEM and I can see my user UID set in the right location.. (at least I think so, cause it doesn't exists in other servers).
So it seems to me like the 'set(e)uid' / 'LogonUser' described in the article doesn't work as expected.

Would appreciate any suggestions.

* Some sensitive data was edited in the cygcheck.out file
* I don't have cygserver installed as a service - I used administrator user and didn't get any errors when running passwd -R

Best regards

[-- Attachment #2: cygcheck.out --]
[-- Type: application/octet-stream, Size: 43957 bytes --]


Cygwin Configuration Diagnostics
Current System Time: Mon Feb 25 15:24:19 2019

Windows 2008 R2 Server Standard Ver 6.1 Build 7601 Service Pack 1

Running in Terminal Service session

Path:	C:\cygwin64\usr\local\bin
	C:\cygwin64\bin
	C:\oracle\product\12.1.0\client_1\bin
	C:\Python27
	C:\Python27\Scripts
	C:\Windows\system32
	C:\Windows
	C:\Windows\System32\Wbem
	C:\Windows\System32\WindowsPowerShell\v1.0
	C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0
	C:\Windows\System32\WindowsPowerShell\v1.0
	C:\salt
	C:\Windows\System32\WindowsPowerShell\v1.0
	C:\Windows\System32\WindowsPowerShell\v1.0
	C:\Windows\System32\WindowsPowerShell\v1.0

Output from C:\cygwin64\bin\id.exe
UID: 1049682(MyUser)
GID: 1049089(Domain Users)
1049089(Domain Users)
545(Users)
544(Administrators)
14(REMOTE INTERACTIVE LOGON)
4(INTERACTIVE)
11(Authenticated Users)
15(This Organization)
4095(CurrentSession)
66048(LOCAL)
1049709(appManagers)
1049684(OPS)
1049683(rundeckAdmins)
1049088(Domain Admins)
1049148(Denied RODC Password Replication Group)
405504(High Mandatory Level)

SysDir: C:\Windows\system32
WinDir: C:\Windows

USER = 'MyUser'
PWD = '/home/MyUser'
HOME = '/home/MyUser'

USERDOMAIN = 'DOM'
OS = 'Windows_NT'
COMMONPROGRAMFILES = 'C:\Program Files\Common Files'
PROCESSOR_LEVEL = '6'
PSModulePath = 'C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules'
CommonProgramW6432 = 'C:\Program Files\Common Files'
CommonProgramFiles(x86) = 'C:\Program Files (x86)\Common Files'
FP_NO_HOST_CHECK = 'NO'
LANG = 'en_US.UTF-8'
TZ = 'America/Los_Angeles'
HOSTNAME = 'host1'
PUBLIC = 'C:\Users\Public'
OLDPWD = '/cygdrive/c/Users/MyUser.DOM/Desktop'
COR_ENABLE_PROFILING = '0'
USERNAME = 'MyUser'
LOGONSERVER = '\\DC01'
PROCESSOR_ARCHITECTURE = 'AMD64'
CLIENTNAME = 'X270'
LOCALAPPDATA = 'C:\Users\MyUser.DOM\AppData\Local'
COMPUTERNAME = 'host1'
SYSTEMDRIVE = 'C:'
USERPROFILE = 'C:\Users\MyUser.DOM'
PATHEXT = '.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC'
SYSTEMROOT = 'C:\Windows'
PROCESSOR_IDENTIFIER = 'Intel64 Family 6 Model 45 Stepping 7, GenuineIntel'
TMP = '/tmp'
windows_tracing_logfile = 'C:\BVTBin\Tests\installpackage\csilogfile.log'
PROCESSOR_REVISION = '2d07'
PROFILEREAD = 'true'
USERDNSDOMAIN = 'DOM.COM'
NUMBER_OF_PROCESSORS = '8'
ProgramW6432 = 'C:\Program Files'
windows_tracing_flags = '3'
COMSPEC = 'C:\Windows\system32\cmd.exe'
APPDATA = 'C:\Users\MyUser.DOM\AppData\Roaming'
SHELL = '/bin/bash'
TERM = 'xterm'
WINDIR = 'C:\Windows'
InternalAppDynamicsAgent_ProfilerProcesses = 'w3wp|aspnet_wp|wawebhost'
ProgramData = 'C:\ProgramData'
SHLVL = '1'
PRINTER = 'Microsoft XPS Document Writer'
PROGRAMFILES = 'C:\Program Files'
ALLUSERSPROFILE = 'C:\ProgramData'
TEMP = '/tmp'
SESSIONNAME = 'RDP-Tcp#0'
ProgramFiles(x86) = 'C:\Program Files (x86)'
PS1 = '\[\e]0;\w\a\]\n\[\e[32m\]\u@\h \[\e[33m\]\w\[\e[0m\]\n\$ '
HOMEDRIVE = 'C:'
INFOPATH = '/usr/local/info:/usr/share/info:/usr/info'
HOMEPATH = '\Users\MyUser.DOM'
ORIGINAL_PATH = '/cygdrive/c/oracle/product/12.1.0/client_1/bin:/cygdrive/c/Python27:/cygdrive/c/Python27/Scripts:/cygdrive/c/Windows/system32:/cygdrive/c/Windows:/cygdrive/c/Windows/System32/Wbem:/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0:/cygdrive/c/Program Files (x86)/Microsoft ASP.NET/ASP.NET Web Pages/v1.0:/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0:/cygdrive/c/salt:/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0:/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0:/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0'
_ = '/usr/bin/cygcheck'

HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\Installations
  (default) = '\??\C:\cygwin64'
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\Program Options
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\setup
  (default) = 'C:\cygwin64'

obcaseinsensitive set to 1

Cygwin installations found in the registry:
  System: Key: e022582115c10879 Path: C:\cygwin64

c:  hd  NTFS    255907Mb  46% CP CS UN PA FC    QU  
d:  cd             N/A    N/A                       

C:\cygwin64      /          system  binary,auto
C:\cygwin64\bin  /usr/bin   system  binary,auto
C:\cygwin64\lib  /usr/lib   system  binary,auto
cygdrive prefix  /cygdrive  user    binary,posix=0,auto

Found: C:\cygwin64\bin\awk
 -> C:\cygwin64\bin\gawk.exe
Found: C:\cygwin64\bin\bash.exe
Found: C:\cygwin64\bin\cat.exe
Found: C:\cygwin64\bin\cp.exe
Not Found: cpp (good!)
Found: C:\cygwin64\bin\crontab.exe
Found: C:\cygwin64\bin\find.exe
Found: C:\Windows\system32\find.exe
Warning: C:\cygwin64\bin\find.exe hides C:\Windows\system32\find.exe
Not Found: gcc
Not Found: gdb
Found: C:\cygwin64\bin\grep.exe
Found: C:\cygwin64\bin\kill.exe
Found: C:\cygwin64\bin\ld.exe
Found: C:\cygwin64\bin\ls.exe
Not Found: make
Found: C:\cygwin64\bin\mv.exe
Not Found: patch
Found: C:\cygwin64\bin\perl.exe
Found: C:\cygwin64\bin\rm.exe
Found: C:\cygwin64\bin\sed.exe
Found: C:\cygwin64\bin\ssh.exe
Found: C:\cygwin64\bin\sh.exe
Found: C:\cygwin64\bin\tar.exe
Found: C:\cygwin64\bin\test.exe
Found: C:\cygwin64\bin\vi.exe
Found: C:\cygwin64\bin\vim.exe

   39k 2016/09/19 C:\cygwin64\bin\cygargp-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygargp-0.dll" v0.0 ts=2016-09-19 02:13
 2568k 2013/06/23 C:\cygwin64\bin\cygasn1-8.dll - os=4.0 img=0.0 sys=5.2
                  "cygasn1-8.dll" v0.0 ts=2013-06-23 06:23
  118k 2018/02/11 C:\cygwin64\bin\cygatk-1.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygatk-1.0-0.dll" v0.0 ts=2018-02-11 23:28
  165k 2018/02/11 C:\cygwin64\bin\cygatk-bridge-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygatk-bridge-2.0-0.dll" v0.0 ts=2018-02-11 23:40
  152k 2018/02/11 C:\cygwin64\bin\cygatspi-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygatspi-0.dll" v0.0 ts=2018-02-11 23:33
   16k 2013/03/26 C:\cygwin64\bin\cygattr-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygattr-1.dll" v0.0 ts=2013-03-26 18:26
  180k 2015/03/23 C:\cygwin64\bin\cygblkid-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygblkid-1.dll" v0.0 ts=2015-03-23 09:46
   64k 2017/02/22 C:\cygwin64\bin\cygbz2-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygbz2-1.dll" v0.0 ts=2017-02-22 07:22
 1032k 2018/02/12 C:\cygwin64\bin\cygcairo-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygcairo-2.dll" v0.0 ts=2018-02-12 00:05
   27k 2018/02/12 C:\cygwin64\bin\cygcairo-gobject-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygcairo-gobject-2.dll" v0.0 ts=2018-02-12 00:05
  120k 2018/02/12 C:\cygwin64\bin\cygcairo-script-interpreter-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygcairo-script-interpreter-2.dll" v0.0 ts=2018-02-12 00:05
   13k 2013/03/06 C:\cygwin64\bin\cygcatgets1.dll - os=4.0 img=0.0 sys=5.2
                  "cygcatgets1.dll" v0.0 ts=2013-03-06 14:34
   13k 2015/03/19 C:\cygwin64\bin\cygcom_err-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygcom_err-2.dll" v0.0 ts=2015-03-19 02:44
  203k 2017/04/25 C:\cygwin64\bin\cygcroco-0.6-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygcroco-0.6-3.dll" v0.0 ts=2017-04-25 17:03
   39k 2017/09/03 C:\cygwin64\bin\cygcrypt-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygcrypt-0.dll" v0.0 ts=2017-09-03 08:18
 2346k 2018/08/27 C:\cygwin64\bin\cygcrypto-1.0.0.dll - os=4.0 img=0.0 sys=5.2
                  "cygcrypto-1.0.0.dll" v0.0 ts=2018-08-27 18:14
  507k 2018/03/15 C:\cygwin64\bin\cygcurl-4.dll - os=4.0 img=0.0 sys=5.2
                  "cygcurl-4.dll" v0.0 ts=2018-03-15 16:22
   24k 2014/11/12 C:\cygwin64\bin\cygdatrie-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygdatrie-1.dll" v0.0 ts=2014-11-12 07:24
 1552k 2017/09/28 C:\cygwin64\bin\cygdb-5.3.dll - os=4.0 img=0.0 sys=5.2
                  "cygdb-5.3.dll" v0.0 ts=2017-09-28 20:05
  267k 2017/08/10 C:\cygwin64\bin\cygdbus-1-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygdbus-1-3.dll" v0.0 ts=2017-08-10 06:10
  119k 2017/09/28 C:\cygwin64\bin\cygdb_cxx-5.3.dll - os=4.0 img=0.0 sys=5.2
                  "cygdb_cxx-5.3.dll" v0.0 ts=2017-09-28 20:06
  569k 2017/09/28 C:\cygwin64\bin\cygdb_sql-5.3.dll - os=4.0 img=0.0 sys=5.2
                  "cygdb_sql-5.3.dll" v0.0 ts=2017-09-28 20:06
  154k 2013/10/20 C:\cygwin64\bin\cygedit-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygedit-0.dll" v0.0 ts=2013-10-20 21:56
  119k 2018/06/05 C:\cygwin64\bin\cygEGL-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygEGL-1.dll" v0.0 ts=2018-06-05 01:20
  679k 2017/09/04 C:\cygwin64\bin\cygepoxy-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygepoxy-0.dll" v0.0 ts=2017-09-04 22:23
   16k 2013/03/28 C:\cygwin64\bin\cygevtlog-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygevtlog-0.dll" v0.0 ts=2013-03-28 14:00
  148k 2017/08/06 C:\cygwin64\bin\cygexpat-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygexpat-1.dll" v0.0 ts=2017-08-07 00:43
   73k 2016/08/26 C:\cygwin64\bin\cygexslt-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygexslt-0.dll" v0.0 ts=2016-08-26 22:10
  214k 2015/03/19 C:\cygwin64\bin\cygext2fs-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygext2fs-2.dll" v0.0 ts=2015-03-19 02:45
   30k 2014/10/14 C:\cygwin64\bin\cygfam-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygfam-0.dll" v0.0 ts=2014-10-14 21:33
   27k 2015/11/17 C:\cygwin64\bin\cygffi-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygffi-6.dll" v0.0 ts=2015-11-17 22:14
  252k 2018/02/13 C:\cygwin64\bin\cygfontconfig-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygfontconfig-1.dll" v0.0 ts=2018-02-13 04:08
   26k 2016/01/29 C:\cygwin64\bin\cygfontenc-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygfontenc-1.dll" v0.0 ts=2016-01-29 20:19
   65k 2017/12/05 C:\cygwin64\bin\cygformw-10.dll - os=4.0 img=0.0 sys=5.2
                  "cygformw-10.dll" v0.0 ts=2017-12-05 08:15
  654k 2018/03/20 C:\cygwin64\bin\cygfreetype-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygfreetype-6.dll" v0.0 ts=2018-03-20 03:29
   70k 2018/06/26 C:\cygwin64\bin\cyggcc_s-seh-1.dll - os=4.0 img=0.0 sys=5.2
                  "cyggcc_s-seh-1.dll" v0.0 ts=2018-06-26 17:17
  472k 2013/03/13 C:\cygwin64\bin\cyggcrypt-11.dll - os=4.0 img=0.0 sys=5.2
                  "cyggcrypt-11.dll" v0.0 ts=2013-03-13 02:27
 1099k 2018/03/19 C:\cygwin64\bin\cyggcrypt-20.dll - os=4.0 img=0.0 sys=5.2
                  "cyggcrypt-20.dll" v0.0 ts=2018-03-19 20:09
   39k 2016/10/10 C:\cygwin64\bin\cyggdbm-4.dll - os=4.0 img=0.0 sys=5.2
                  "cyggdbm-4.dll" v0.0 ts=2016-10-10 09:26
   13k 2016/10/10 C:\cygwin64\bin\cyggdbm_compat-4.dll - os=4.0 img=0.0 sys=5.2
                  "cyggdbm_compat-4.dll" v0.0 ts=2016-10-10 09:26
  699k 2018/02/19 C:\cygwin64\bin\cyggdk-3-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggdk-3-0.dll" v0.0 ts=2018-02-19 06:40
  620k 2018/02/12 C:\cygwin64\bin\cyggdk-x11-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggdk-x11-2.0-0.dll" v0.0 ts=2018-02-12 01:51
  141k 2018/02/11 C:\cygwin64\bin\cyggdk_pixbuf-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggdk_pixbuf-2.0-0.dll" v0.0 ts=2018-02-11 23:46
 1398k 2018/02/11 C:\cygwin64\bin\cyggio-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggio-2.0-0.dll" v0.0 ts=2018-02-11 19:03
  469k 2018/06/05 C:\cygwin64\bin\cygGL-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygGL-1.dll" v0.0 ts=2018-06-05 01:20
  295k 2018/06/05 C:\cygwin64\bin\cygglapi-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygglapi-0.dll" v0.0 ts=2018-06-05 01:18
  993k 2018/02/11 C:\cygwin64\bin\cygglib-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygglib-2.0-0.dll" v0.0 ts=2018-02-11 19:01
   15k 2018/02/11 C:\cygwin64\bin\cyggmodule-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggmodule-2.0-0.dll" v0.0 ts=2018-02-11 19:01
  527k 2017/01/21 C:\cygwin64\bin\cyggmp-10.dll - os=4.0 img=0.0 sys=5.2
                  "cyggmp-10.dll" v0.0 ts=2017-01-21 18:25
  938k 2017/05/02 C:\cygwin64\bin\cyggnutls-28.dll - os=4.0 img=0.0 sys=5.2
                  "cyggnutls-28.dll" v0.0 ts=2017-05-02 22:06
 1207k 2018/03/15 C:\cygwin64\bin\cyggnutls-30.dll - os=4.0 img=0.0 sys=5.2
                  "cyggnutls-30.dll" v0.0 ts=2018-03-15 23:08
   24k 2017/05/02 C:\cygwin64\bin\cyggnutls-openssl-27.dll - os=4.0 img=0.0 sys=5.2
                  "cyggnutls-openssl-27.dll" v0.0 ts=2017-05-02 22:06
  289k 2018/02/11 C:\cygwin64\bin\cyggobject-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggobject-2.0-0.dll" v0.0 ts=2018-02-11 19:02
   95k 2018/03/19 C:\cygwin64\bin\cyggpg-error-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggpg-error-0.dll" v0.0 ts=2018-03-19 19:27
  177k 2017/09/04 C:\cygwin64\bin\cyggraphite2-3.dll - os=4.0 img=3.0 sys=5.2
                  "cyggraphite2-3.dll" v0.0 ts=2017-09-04 21:02
 2247k 2013/06/23 C:\cygwin64\bin\cyggssapi-3.dll - os=4.0 img=0.0 sys=5.2
                  "cyggssapi-3.dll" v0.0 ts=2013-06-23 06:31
  274k 2018/03/16 C:\cygwin64\bin\cyggssapi_krb5-2.dll - os=4.0 img=0.0 sys=5.2
                  "cyggssapi_krb5-2.dll" v0.0 ts=2018-03-16 03:38
    9k 2018/02/11 C:\cygwin64\bin\cyggthread-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggthread-2.0-0.dll" v0.0 ts=2018-02-11 19:01
 6754k 2018/02/19 C:\cygwin64\bin\cyggtk-3-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggtk-3-0.dll" v0.0 ts=2018-02-19 07:00
 4007k 2018/02/12 C:\cygwin64\bin\cyggtk-x11-2.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cyggtk-x11-2.0-0.dll" v0.0 ts=2018-02-12 01:59
  680k 2018/04/11 C:\cygwin64\bin\cygharfbuzz-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygharfbuzz-0.dll" v0.0 ts=2018-04-11 08:11
  101k 2013/06/23 C:\cygwin64\bin\cygheimbase-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygheimbase-1.dll" v0.0 ts=2013-06-23 06:20
  135k 2013/06/23 C:\cygwin64\bin\cygheimntlm-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygheimntlm-0.dll" v0.0 ts=2013-06-23 06:28
   33k 2017/02/13 C:\cygwin64\bin\cyghistory7.dll - os=4.0 img=0.0 sys=5.2
                  "cyghistory7.dll" v0.0 ts=2017-02-11 22:39
  167k 2016/03/13 C:\cygwin64\bin\cyghogweed-2.dll - os=4.0 img=0.0 sys=5.2
                  "cyghogweed-2.dll" v0.0 ts=2016-03-13 14:46
  163k 2018/03/15 C:\cygwin64\bin\cyghogweed-4.dll - os=4.0 img=0.0 sys=5.2
                  "cyghogweed-4.dll" v0.0 ts=2018-03-16 00:07
 1412k 2013/06/23 C:\cygwin64\bin\cyghx509-5.dll - os=4.0 img=0.0 sys=5.2
                  "cyghx509-5.dll" v0.0 ts=2013-06-23 06:24
   77k 2014/08/10 C:\cygwin64\bin\cygICE-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygICE-6.dll" v0.0 ts=1970-01-01 00:00
  361k 2017/07/03 C:\cygwin64\bin\cygicons-0.dll - os=4.0 img=1.4 sys=5.2
                  "cygicons-0.dll" v0.0 ts=2017-07-03 22:17
 1009k 2015/02/20 C:\cygwin64\bin\cygiconv-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygiconv-2.dll" v0.0 ts=2015-02-20 17:07
21806k 2013/06/25 C:\cygwin64\bin\cygicudata51.dll - os=4.0 img=0.0 sys=5.2
                  "cygicudata51.dll" v0.0 ts=2013-06-25 06:30
 1717k 2013/06/25 C:\cygwin64\bin\cygicui18n51.dll - os=4.0 img=0.0 sys=5.2
                  "cygicui18n51.dll" v0.0 ts=2013-06-25 06:28
   43k 2013/06/25 C:\cygwin64\bin\cygicuio51.dll - os=4.0 img=0.0 sys=5.2
                  "cygicuio51.dll" v0.0 ts=2013-06-25 06:30
  305k 2013/06/25 C:\cygwin64\bin\cygicule51.dll - os=4.0 img=0.0 sys=5.2
                  "cygicule51.dll" v0.0 ts=2013-06-25 06:28
   38k 2013/06/25 C:\cygwin64\bin\cygiculx51.dll - os=4.0 img=0.0 sys=5.2
                  "cygiculx51.dll" v0.0 ts=2013-06-25 06:28
 1231k 2013/06/25 C:\cygwin64\bin\cygicuuc51.dll - os=4.0 img=0.0 sys=5.2
                  "cygicuuc51.dll" v0.0 ts=2013-06-25 06:27
  197k 2017/05/02 C:\cygwin64\bin\cygidn-11.dll - os=4.0 img=0.0 sys=5.2
                  "cygidn-11.dll" v0.0 ts=2017-05-02 01:18
  111k 2017/09/25 C:\cygwin64\bin\cygidn2-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygidn2-0.dll" v0.0 ts=2017-09-25 03:16
   42k 2016/10/23 C:\cygwin64\bin\cygintl-8.dll - os=4.0 img=0.0 sys=5.2
                  "cygintl-8.dll" v0.0 ts=2016-10-23 07:17
  284k 2017/01/03 C:\cygwin64\bin\cygjasper-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygjasper-1.dll" v0.0 ts=2017-01-03 14:07
  288k 2017/09/25 C:\cygwin64\bin\cygjasper-4.dll - os=4.0 img=4.0 sys=5.2
                  "cygjasper-4.dll" v0.0 ts=2017-09-25 02:39
   48k 2014/06/17 C:\cygwin64\bin\cygjbig-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygjbig-2.dll" v0.0 ts=1970-01-01 00:00
   18k 2014/06/17 C:\cygwin64\bin\cygjbig85-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygjbig85-2.dll" v0.0 ts=1970-01-01 00:00
  419k 2017/12/18 C:\cygwin64\bin\cygjpeg-8.dll - os=4.0 img=0.0 sys=5.2
                  "cygjpeg-8.dll" v0.0 ts=2017-12-18 02:41
  130k 2018/02/12 C:\cygwin64\bin\cygjson-glib-1.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygjson-glib-1.0-0.dll" v0.0 ts=2018-02-12 01:18
  192k 2018/03/16 C:\cygwin64\bin\cygk5crypto-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygk5crypto-3.dll" v0.0 ts=2018-03-16 03:37
  159k 2013/06/23 C:\cygwin64\bin\cygkafs-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygkafs-0.dll" v0.0 ts=2013-06-23 06:28
 3287k 2013/06/23 C:\cygwin64\bin\cygkrb5-26.dll - os=4.0 img=0.0 sys=5.2
                  "cygkrb5-26.dll" v0.0 ts=2013-06-23 06:27
  754k 2018/03/16 C:\cygwin64\bin\cygkrb5-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygkrb5-3.dll" v0.0 ts=2018-03-16 03:37
   37k 2018/03/16 C:\cygwin64\bin\cygkrb5support-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygkrb5support-0.dll" v0.0 ts=2018-03-16 03:36
   45k 2015/11/19 C:\cygwin64\bin\cyglber-2-4-2.dll - os=4.0 img=0.0 sys=5.2
                  "cyglber-2-4-2.dll" v0.0 ts=2015-11-19 14:17
  246k 2015/11/19 C:\cygwin64\bin\cygldap-2-4-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygldap-2-4-2.dll" v0.0 ts=2015-11-19 14:18
  262k 2015/11/19 C:\cygwin64\bin\cygldap_r-2-4-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygldap_r-2-4-2.dll" v0.0 ts=2015-11-19 14:19
18282k 2016/03/30 C:\cygwin64\bin\cygLLVM-3.5.dll - os=4.0 img=0.0 sys=5.2
                  "cygLLVM-3.5.dll" v0.0 ts=2016-03-30 03:42
36141k 2017/12/31 C:\cygwin64\bin\cygLLVM-5.0.dll - os=4.0 img=0.0 sys=5.2
                  "cygLLVM-5.0.dll" v0.0 ts=2017-12-31 10:34
    6k 2018/08/31 C:\cygwin64\bin\cyglsa64.dll - os=4.0 img=0.0 sys=5.2
                  "cyglsa64.dll" v0.0 ts=2018-08-31 12:05
  139k 2017/05/10 C:\cygwin64\bin\cyglzma-5.dll - os=4.0 img=0.0 sys=5.2
                  "cyglzma-5.dll" v0.0 ts=2017-05-10 01:17
  129k 2017/10/05 C:\cygwin64\bin\cyglzo2-2.dll - os=4.0 img=0.0 sys=5.2
                  "cyglzo2-2.dll" v0.0 ts=2017-10-05 19:40
  125k 2018/03/18 C:\cygwin64\bin\cygmagic-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygmagic-1.dll" v0.0 ts=2018-03-18 15:17
  168k 2018/01/23 C:\cygwin64\bin\cygman-2-7-6-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygman-2-7-6-1.dll" v0.0 ts=2018-01-23 20:22
   22k 2018/01/23 C:\cygwin64\bin\cygmandb-2-7-6-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygmandb-2-7-6-1.dll" v0.0 ts=2018-01-23 20:22
   33k 2017/12/05 C:\cygwin64\bin\cygmenuw-10.dll - os=4.0 img=0.0 sys=5.2
                  "cygmenuw-10.dll" v0.0 ts=2017-12-05 08:15
   42k 2013/08/12 C:\cygwin64\bin\cygmetalink-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygmetalink-3.dll" v0.0 ts=2013-08-13 00:02
  346k 2017/11/04 C:\cygwin64\bin\cygmpfr-4.dll - os=4.0 img=0.0 sys=5.2
                  "cygmpfr-4.dll" v0.0 ts=2017-11-04 18:48
  432k 2018/07/28 C:\cygwin64\bin\cygmpfr-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygmpfr-6.dll" v0.0 ts=2018-07-28 20:18
   71k 2015/03/15 C:\cygwin64\bin\cygmspack-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygmspack-0.dll" v0.0 ts=2015-03-15 19:28
  317k 2017/12/05 C:\cygwin64\bin\cygncursesw-10.dll - os=4.0 img=0.0 sys=5.2
                  "cygncursesw-10.dll" v0.0 ts=2017-12-05 08:13
  180k 2016/03/13 C:\cygwin64\bin\cygnettle-4.dll - os=4.0 img=0.0 sys=5.2
                  "cygnettle-4.dll" v0.0 ts=2016-03-13 14:46
  207k 2018/03/15 C:\cygwin64\bin\cygnettle-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygnettle-6.dll" v0.0 ts=2018-03-16 00:07
  140k 2018/03/16 C:\cygwin64\bin\cygnghttp2-14.dll - os=4.0 img=0.0 sys=5.2
                  "cygnghttp2-14.dll" v0.0 ts=2018-03-16 02:04
 1019k 2018/04/09 C:\cygwin64\bin\cygp11-kit-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygp11-kit-0.dll" v0.0 ts=2018-04-09 01:55
   15k 2017/12/05 C:\cygwin64\bin\cygpanelw-10.dll - os=4.0 img=0.0 sys=5.2
                  "cygpanelw-10.dll" v0.0 ts=2017-12-05 08:14
  270k 2018/02/12 C:\cygwin64\bin\cygpango-1.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygpango-1.0-0.dll" v0.0 ts=2018-02-12 00:40
   44k 2018/02/12 C:\cygwin64\bin\cygpangocairo-1.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygpangocairo-1.0-0.dll" v0.0 ts=2018-02-12 00:41
   72k 2018/02/12 C:\cygwin64\bin\cygpangoft2-1.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygpangoft2-1.0-0.dll" v0.0 ts=2018-02-12 00:40
   28k 2018/02/12 C:\cygwin64\bin\cygpangoxft-1.0-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygpangoxft-1.0-0.dll" v0.0 ts=2018-02-12 00:41
  475k 2017/04/23 C:\cygwin64\bin\cygpcre-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygpcre-1.dll" v0.0 ts=2017-04-24 00:50
 2182k 2018/04/16 C:\cygwin64\bin\cygperl5_26.dll - os=4.0 img=0.0 sys=5.2
                  "cygperl5_26.dll" v0.0 ts=2018-04-16 18:54
   39k 2015/04/09 C:\cygwin64\bin\cygpipeline-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygpipeline-1.dll" v0.0 ts=2015-04-09 21:04
  638k 2016/08/08 C:\cygwin64\bin\cygpixman-1-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygpixman-1-0.dll" v0.0 ts=2016-08-08 02:51
  149k 2015/04/13 C:\cygwin64\bin\cygpng15-15.dll - os=4.0 img=0.0 sys=5.2
                  "cygpng15-15.dll" v0.0 ts=2015-04-13 19:37
  200k 2017/12/18 C:\cygwin64\bin\cygpng16-16.dll - os=4.0 img=0.0 sys=5.2
                  "cygpng16-16.dll" v0.0 ts=2017-12-18 01:48
   41k 2016/07/13 C:\cygwin64\bin\cygpopt-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygpopt-0.dll" v0.0 ts=2016-07-13 06:16
  109k 2017/09/27 C:\cygwin64\bin\cygproxy-1.dll - os=4.0 img=1.0 sys=5.2
                  "cygproxy-1.dll" v0.0 ts=2017-09-27 17:56
   53k 2017/08/11 C:\cygwin64\bin\cygpsl-5.dll - os=4.0 img=0.0 sys=5.2
                  "cygpsl-5.dll" v0.0 ts=2017-08-11 06:56
  219k 2017/02/13 C:\cygwin64\bin\cygreadline7.dll - os=4.0 img=0.0 sys=5.2
                  "cygreadline7.dll" v0.0 ts=2017-02-11 22:39
   73k 2018/02/12 C:\cygwin64\bin\cygrest-0.7-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygrest-0.7-0.dll" v0.0 ts=2018-02-12 02:55
   29k 2018/02/12 C:\cygwin64\bin\cygrest-extras-0.7-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygrest-extras-0.7-0.dll" v0.0 ts=2018-02-12 02:55
  424k 2013/06/23 C:\cygwin64\bin\cygroken-18.dll - os=4.0 img=0.0 sys=5.2
                  "cygroken-18.dll" v0.0 ts=2013-06-23 06:21
  212k 2018/02/12 C:\cygwin64\bin\cygrDOMg-2-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygrDOMg-2-2.dll" v0.0 ts=2018-02-12 00:38
   96k 2017/04/16 C:\cygwin64\bin\cygsasl2-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygsasl2-3.dll" v0.0 ts=2017-04-16 19:15
   11k 2015/07/17 C:\cygwin64\bin\cygsigsegv-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygsigsegv-2.dll" v0.0 ts=2015-07-17 22:35
  887k 2018/03/05 C:\cygwin64\bin\cygslang-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygslang-2.dll" v0.0 ts=2018-03-05 17:23
   28k 2014/01/14 C:\cygwin64\bin\cygSM-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygSM-6.dll" v0.0 ts=2014-01-14 23:23
   89k 2015/03/23 C:\cygwin64\bin\cygsmartcols-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygsmartcols-1.dll" v0.0 ts=2015-03-23 09:46
  710k 2018/02/12 C:\cygwin64\bin\cygsoup-2.4-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygsoup-2.4-1.dll" v0.0 ts=2018-02-12 00:39
   11k 2018/02/12 C:\cygwin64\bin\cygsoup-gnome-2.4-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygsoup-gnome-2.4-1.dll" v0.0 ts=2018-02-12 00:39
  996k 2017/11/06 C:\cygwin64\bin\cygsqlite3-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygsqlite3-0.dll" v0.0 ts=2017-11-06 12:43
  156k 2016/03/02 C:\cygwin64\bin\cygssh2-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygssh2-1.dll" v0.0 ts=2016-03-02 18:03
  406k 2018/08/27 C:\cygwin64\bin\cygssl-1.0.0.dll - os=4.0 img=0.0 sys=5.2
                  "cygssl-1.0.0.dll" v0.0 ts=2018-08-27 18:14
   12k 2017/11/13 C:\cygwin64\bin\cygssp-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygssp-0.dll" v0.0 ts=2017-11-13 21:52
 1394k 2018/06/26 C:\cygwin64\bin\cygstdc++-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygstdc++-6.dll" v0.0 ts=2018-06-26 17:34
  347k 2015/02/11 C:\cygwin64\bin\cygsyslog-ng-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygsyslog-ng-0.dll" v0.0 ts=2015-02-11 10:20
   67k 2018/03/19 C:\cygwin64\bin\cygtasn1-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygtasn1-6.dll" v0.0 ts=2018-03-19 21:41
   34k 2017/03/05 C:\cygwin64\bin\cygthai-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygthai-0.dll" v0.0 ts=2017-03-05 04:36
   58k 2017/12/05 C:\cygwin64\bin\cygticw-10.dll - os=4.0 img=0.0 sys=5.2
                  "cygticw-10.dll" v0.0 ts=2017-12-05 08:13
  359k 2013/04/24 C:\cygwin64\bin\cygtiff-5.dll - os=4.0 img=0.0 sys=5.2
                  "cygtiff-5.dll" v0.0 ts=2013-04-24 06:30
  452k 2017/12/18 C:\cygwin64\bin\cygtiff-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygtiff-6.dll" v0.0 ts=2017-12-18 02:52
   10k 2013/04/24 C:\cygwin64\bin\cygtiffxx-5.dll - os=4.0 img=0.0 sys=5.2
                  "cygtiffxx-5.dll" v0.0 ts=2013-04-24 06:30
   12k 2017/12/18 C:\cygwin64\bin\cygtiffxx-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygtiffxx-6.dll" v0.0 ts=2017-12-18 02:52
 1612k 2018/08/16 C:\cygwin64\bin\cygunistring-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygunistring-2.dll" v0.0 ts=2018-08-16 20:33
   15k 2015/03/23 C:\cygwin64\bin\cyguuid-1.dll - os=4.0 img=0.0 sys=5.2
                  "cyguuid-1.dll" v0.0 ts=2015-03-23 09:46
  275k 2013/06/23 C:\cygwin64\bin\cygwind-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygwind-0.dll" v0.0 ts=2013-06-23 06:22
   31k 2018/07/14 C:\cygwin64\bin\cygwrap-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygwrap-0.dll" v0.0 ts=2018-07-14 11:43
 1128k 2017/06/19 C:\cygwin64\bin\cygX11-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygX11-6.dll" v0.0 ts=2017-06-19 02:47
    9k 2017/06/19 C:\cygwin64\bin\cygX11-xcb-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygX11-xcb-1.dll" v0.0 ts=2017-06-19 02:47
   12k 2013/06/06 C:\cygwin64\bin\cygXau-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygXau-6.dll" v0.0 ts=2013-06-06 06:23
  121k 2017/10/03 C:\cygwin64\bin\cygxcb-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygxcb-1.dll" v0.0 ts=2017-10-03 23:34
   15k 2017/10/03 C:\cygwin64\bin\cygxcb-dri2-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygxcb-dri2-0.dll" v0.0 ts=2017-10-03 23:34
   75k 2017/10/03 C:\cygwin64\bin\cygxcb-glx-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygxcb-glx-0.dll" v0.0 ts=2017-10-03 23:34
   41k 2017/10/03 C:\cygwin64\bin\cygxcb-render-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygxcb-render-0.dll" v0.0 ts=2017-10-03 23:34
   11k 2017/10/03 C:\cygwin64\bin\cygxcb-shm-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygxcb-shm-0.dll" v0.0 ts=2017-10-03 23:34
   25k 2017/10/03 C:\cygwin64\bin\cygxcb-xfixes-0.dll - os=4.0 img=0.0 sys=5.2
                  "cygxcb-xfixes-0.dll" v0.0 ts=2017-10-03 23:34
   11k 2013/03/18 C:\cygwin64\bin\cygXcomposite-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygXcomposite-1.dll" v0.0 ts=2013-03-18 23:05
   36k 2018/02/21 C:\cygwin64\bin\cygXcursor-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygXcursor-1.dll" v0.0 ts=2018-02-21 00:54
   10k 2013/04/08 C:\cygwin64\bin\cygXdamage-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygXdamage-1.dll" v0.0 ts=2013-04-08 22:24
   21k 2015/03/26 C:\cygwin64\bin\cygXdmcp-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygXdmcp-6.dll" v0.0 ts=2015-03-26 15:38
   56k 2014/08/10 C:\cygwin64\bin\cygXext-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygXext-6.dll" v0.0 ts=1970-01-01 00:00
   20k 2016/10/09 C:\cygwin64\bin\cygXfixes-3.dll - os=4.0 img=0.0 sys=5.2
                  "cygXfixes-3.dll" v0.0 ts=2016-10-09 18:37
   73k 2014/08/10 C:\cygwin64\bin\cygXft-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygXft-2.dll" v0.0 ts=1970-01-01 00:00
   58k 2017/06/19 C:\cygwin64\bin\cygXi-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygXi-6.dll" v0.0 ts=2017-06-19 03:04
   10k 2013/06/06 C:\cygwin64\bin\cygXinerama-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygXinerama-1.dll" v0.0 ts=2013-06-06 21:33
 1214k 2017/03/13 C:\cygwin64\bin\cygxml2-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygxml2-2.dll" v0.0 ts=2017-03-13 17:01
   36k 2016/10/09 C:\cygwin64\bin\cygXrandr-2.dll - os=4.0 img=0.0 sys=5.2
                  "cygXrandr-2.dll" v0.0 ts=2016-10-09 18:45
   36k 2016/01/29 C:\cygwin64\bin\cygXrender-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygXrender-1.dll" v0.0 ts=2016-01-29 20:24
  209k 2016/08/26 C:\cygwin64\bin\cygxslt-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygxslt-1.dll" v0.0 ts=2016-08-26 22:10
   12k 2013/03/14 C:\cygwin64\bin\cygXss-1.dll - os=4.0 img=0.0 sys=5.2
                  "cygXss-1.dll" v0.0 ts=2013-03-14 04:07
  326k 2016/01/29 C:\cygwin64\bin\cygXt-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygXt-6.dll" v0.0 ts=2016-01-29 20:26
   22k 2016/10/09 C:\cygwin64\bin\cygXtst-6.dll - os=4.0 img=0.0 sys=5.2
                  "cygXtst-6.dll" v0.0 ts=2016-10-09 18:54
   83k 2017/03/03 C:\cygwin64\bin\cygz.dll - os=4.0 img=0.0 sys=5.2
                  "cygz.dll" v0.0 ts=2017-03-03 21:42
 3257k 2018/08/31 C:\cygwin64\bin\cygwin1.dll - os=4.0 img=0.0 sys=5.2
                  "cygwin1.dll" v0.0 ts=2018-08-31 12:05
    Cygwin DLL version info:
        DLL version: 2.11.0
        DLL epoch: 19
        DLL old termios: 5
        DLL malloc env: 28
        Cygwin conv: 181
        API major: 0
        API minor: 329
        Shared data: 5
        DLL identifier: cygwin1
        Mount registry: 3
        Cygwin registry name: Cygwin
        Installations name: Installations
        Cygdrive default prefix: 
        Build date: 
        Shared id: cygwin1S5


Service             : sshd                
Display name        : CYGWIN sshd
Current State       : Running
Controls Accepted   : Stop
Command             : /usr/sbin/sshd -D
stdin path          : /dev/null
stdout path         : /var/log/sshd.log
stderr path         : /var/log/sshd.log
Process Type        : Own Process
Startup             : Automatic
Dependencies        : tcpip
Account             : cyg_server@DOM.com


Cygwin Package Information
Last downloaded files to: C:\Install\cygwin
Last downloaded files from: http://cygwin.mirror.constant.com/

Package                   Version             Status
_autorebase               001007-1            OK
Empty package _update-info-dir
_update-info-dir          03000-1             OK
adwaita-icon-theme        3.26.1-1            OK
alternatives              1.3.30c-10          OK
at-spi2-core              2.26.2-1            OK
attr                      2.4.46-1            OK
base-cygwin               3.8-1               OK
base-files                4.2-4               OK
bash                      4.4.12-3            OK
bash-completion           2.7-1               OK
binutils                  2.29-1              OK
bzip2                     1.0.6-3             OK
ca-certificates           2.22-1              OK
cabextract                1.7-1               OK
chewmail                  1.2-1               OK
coreutils                 8.26-2              OK
cron                      4.1-65              OK
csih                      0.9.11-1            OK
curl                      7.59.0-1            OK
cygcheck-dep              3.0-2               OK
cygrunsrv                 1.62-1              OK
cygutils                  1.4.16-2            OK
cygutils-extra            1.4.16-2            OK
cygwin                    2.11.0-1            OK
cygwin-devel              2.11.0-1            OK
dash                      0.5.9.1-1           OK
dconf-service             0.26.1-1            OK
dejavu-fonts              2.37-1              OK
desktop-file-utils        0.23-1              OK
diffutils                 3.5-2               OK
dri-drivers               18.0.5-1            OK
editrights                1.03-1              OK
email                     3.2.3-git-2         OK
expect                    5.45-3              OK
file                      5.32-1              OK
findutils                 4.6.0-1             OK
Empty package font-adobe-dpi100
font-adobe-dpi100         7.5-3               OK
Empty package font-encodings
font-encodings            7.5-3               OK
fontconfig                2.12.6-1            OK
gamin                     0.1.10-15           OK
gawk                      4.2.1-1             OK
gdk-pixbuf2.0-DOMg         2.40.20-1           OK
getent                    2.18.90-4           OK
getmail                   5.1-1               OK
glib2.0-networking        2.54.1-1            OK
gnome-icon-theme          3.10.0-1            OK
grep                      3.0-2               OK
groff                     1.22.3-1            OK
gsettings-desktop-schemas 3.24.1-1            OK
gtk-update-icon-cache     3.22.28-1           OK
gvim                      8.0.1567-1          OK
gzip                      1.8-1               OK
hicolor-icon-theme        0.15-1              OK
hostname                  3.13-1              OK
httperf                   0.9.0-1             OK
info                      6.5-2               OK
ipc-utils                 1.0-2               OK
less                      530-1               OK
libargp                   20110921-3          OK
libasn1_8                 1.5.2-4             OK
libatk-bridge2.0_0        2.26.1-1            OK
libatk1.0_0               2.26.1-1            OK
libatspi0                 2.26.2-1            OK
libattr1                  2.4.46-1            OK
libblkid1                 2.25.2-2            OK
libbz2_1                  1.0.6-3             OK
libcairo2                 1.14.12-1           OK
libcatgets1               1.1-2               OK
libcom_err2               1.42.12-2           OK
libcroco0.6_3             0.6.12-1            OK
libcrypt0                 2.1-1               OK
libcurl4                  7.59.0-1            OK
libdatrie1                0.2.8-1             OK
libdb5.3                  5.3.28-2            OK
libdbus1_3                1.10.22-1           OK
libedit0                  20130712-1          OK
libEGL1                   18.0.5-1            OK
libepoxy0                 1.4.3-1             OK
libevtlog0                0.2.12-2            OK
libexpat1                 2.2.3-1             OK
libext2fs2                1.42.12-2           OK
libfam0                   0.1.10-15           OK
libffi6                   3.2.1-2             OK
libfontconfig-common      2.12.6-1            OK
libfontconfig1            2.12.6-1            OK
libfontenc1               1.1.3-1             OK
libfreetype6              2.8.1-1             OK
libgcc1                   7.3.0-3             OK
libgcrypt11               1.5.0-1             OK
libgcrypt20               1.8.2-1             OK
libgdbm4                  1.12-1              OK
libgdk_pixbuf2.0_0        2.36.11-1           OK
libGL1                    18.0.5-1            OK
libglapi0                 18.0.5-1            OK
libglib2.0_0              2.54.3-1            OK
libgmp10                  6.1.2-1             OK
libgnutls28               3.3.27-1            OK
libgnutls30               3.5.18-1            OK
libgpg-error0             1.28-1              OK
libgraphite2_3            1.3.10-1            OK
libgssapi3                1.5.2-4             OK
libgssapi_krb5_2          1.15.2-2            OK
libgtk2.0_0               2.24.32-1           OK
libgtk3_0                 3.22.28-1           OK
libharfbuzz0              1.7.6-1             OK
libheimbase1              1.5.2-4             OK
libheimntlm0              1.5.2-4             OK
libhogweed2               2.7.1-1             OK
libhogweed4               3.4-1               OK
libhx509_5                1.5.2-4             OK
libICE6                   1.0.9-1             OK
libiconv                  1.14-3              OK
libiconv2                 1.14-3              OK
libicu51                  51.2-1              OK
libidn11                  1.33-1              OK
libidn2_0                 2.0.4-1             OK
libintl8                  0.19.8.1-2          OK
libjasper1                1.900.22-1          OK
libjasper4                2.0.14-1            OK
libjbig2                  2.0-14              OK
libjpeg8                  1.5.3-1             OK
libjson-glib1.0_0         1.4.2-1             OK
libk5crypto3              1.15.2-2            OK
libkafs0                  1.5.2-4             OK
libkrb5_26                1.5.2-4             OK
libkrb5_3                 1.15.2-2            OK
libkrb5support0           1.15.2-2            OK
libllvm3.5                3.5.2-2             OK
libllvm5.0                5.0.1-1             OK
liblzma5                  5.2.3-1             OK
liblzo2_2                 2.10-1              OK
libmetalink3              0.1.2-1             OK
libmpfr4                  3.1.6-1p1           OK
libmpfr6                  4.0.1-4p11          OK
libmspack0                0.5-0.1.alpha       OK
libncursesw10             6.0-12.20171125     OK
libnettle4                2.7.1-1             OK
libnettle6                3.4-1               OK
libnghttp2_14             1.31.0-1            OK
libopenldap2_4_2          2.4.42-1            OK
libopenssl100             1.0.2p-1            OK
libp11-kit0               0.23.10-1           OK
libpango1.0_0             1.40.14-1           OK
libpcre1                  8.40-3              OK
libpipeline1              1.4.0-1             OK
libpixman1_0              0.34.0-1            OK
libpng15                  1.5.22-1            OK
libpng16                  1.6.34-1            OK
libpopt-common            1.16-2              OK
libpopt0                  1.16-2              OK
libproxy1                 0.4.14-2            OK
libpsl5                   0.18.0-1            OK
libreadline7              7.0.3-3             OK
librest0.7_0              0.8.1-1             OK
libroken18                1.5.2-4             OK
librDOMg2_2                2.40.20-1           OK
libsasl2_3                2.1.26-11           OK
libsigsegv2               2.10-2              OK
libslang2                 2.3.2-1             OK
libSM6                    1.2.2-1             OK
libsmartcols1             2.25.2-2            OK
libsoup-gnome2.4_1        2.60.3-1            OK
libsoup2.4_1              2.60.3-1            OK
libsqlite3_0              3.21.0-1            OK
libssh2_1                 1.7.0-1             OK
libssp0                   6.4.0-4             OK
libstdc++6                7.3.0-3             OK
libtasn1_6                4.13-1              OK
libthai0                  0.1.26-1            OK
libtiff5                  3.9.7-3             OK
libtiff6                  4.0.9-1             OK
libunistring2             0.9.10-1            OK
libuuid-devel             2.25.2-2            OK
libuuid1                  2.25.2-2            OK
libwind0                  1.5.2-4             OK
libwrap0                  7.6-26              OK
libX11-xcb1               1.6.5-1             OK
libX11_6                  1.6.5-1             OK
libXau6                   1.0.8-1             OK
libxcb-dri2_0             1.12-2              OK
libxcb-glx0               1.12-2              OK
libxcb-render0            1.12-2              OK
libxcb-shm0               1.12-2              OK
libxcb-xfixes0            1.12-2              OK
libxcb1                   1.12-2              OK
libXcomposite1            0.4.3-1             OK
libXcursor1               1.1.15-1            OK
libXdamage1               1.1.4-1             OK
libXdmcp6                 1.1.2-1             OK
libXext6                  1.3.3-1             OK
libXfixes3                5.0.3-1             OK
libXft2                   2.3.2-1             OK
libXi6                    1.7.9-1             OK
libXinerama1              1.1.3-1             OK
libxml2                   2.9.4-2             OK
libXrandr2                1.5.1-1             OK
libXrender1               0.9.9-1             OK
libxslt                   1.1.29-1            OK
libXss1                   1.2.2-1             OK
libXt6                    1.1.5-1             OK
libXtst6                  1.2.3-1             OK
login                     1.12-1              OK
lynx                      2.8.7-2             OK
Empty package man
man                       2.7.6.1-1           OK
man-db                    2.7.6.1-1           OK
mc                        4.8.21-1            OK
mintty                    2.9.0-0             OK
mkfontdir                 1.0.7-1             OK
mkfontscale               1.1.1-1             OK
mmv                       1.01b-1             OK
ncurses                   6.0-12.20171125     OK
openssh                   7.8p1-1             OK
openssl                   1.0.2p-1            OK
p11-kit                   0.23.10-1           OK
p11-kit-trust             0.23.10-1           OK
perl                      5.26.2-1            OK
Empty package perl-Carp
perl-Carp                 1.38-2              OK
Empty package perl-Pod-Simple
perl-Pod-Simple           3.35-2              OK
perl-Stow                 2.2.2-2             OK
perl-TimeDate             2.30-3              OK
perl_autorebase           5.26.2-1            OK
perl_base                 5.26.2-1            OK
Empty package popt
popt                      1.16-2              OK
publicsuffix-list-dafsa   20180523-1          OK
Empty package python
python                    2.7.14-1            OK
Empty package python-tkinter
python-tkinter            2.7.14-1            OK
python2                   2.7.14-1            OK
python2-tkinter           2.7.14-1            OK
rebase                    4.4.4-1             OK
rsync                     3.1.2-1             OK
run                       1.3.4-2             OK
sed                       4.4-1               OK
shared-mime-info          1.8-1               OK
sharutils                 4.15.2-1            OK
shutdown                  2.0-2               OK
stow                      2.2.2-2             OK
syslog-ng                 3.2.5-2             OK
syDOMinit                  2.86-1              OK
tar                       1.29-1              OK
tcl                       8.6.8-1             OK
tcl-tix                   8.4.3-3             OK
tcl-tk                    8.6.8-1             OK
tcsh                      6.20.00-1           OK
terminfo                  6.0-12.20171125     OK
texinfo                   6.5-2               OK
tzcode                    2018e-1             OK
tzdata                    2018e-1             OK
unzip                     6.0-17              OK
util-linux                2.25.2-2            OK
vim                       8.0.1567-1          OK
vim-common                8.0.1567-1          OK
vim-minimal               8.0.1567-1          OK
wget                      1.19.1-2            OK
which                     2.20-2              OK
xmlstarlet                1.6.1-1             OK
xorg-x11-fonts-dpi100     7.5-3               OK
xorg-x11-fonts-misc       7.5-3               OK
xxd                       8.0.1567-1          OK
xz                        5.2.3-1             OK
zlib0                     1.2.11-1            OK
Use -h to see help about each section

[-- Attachment #3: Type: text/plain, Size: 219 bytes --]


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-02-26 13:39 ` can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected Maayan Apelboim
@ 2019-02-26 15:33   ` Andrey Repin
  2019-02-26 18:00     ` Houder
  0 siblings, 1 reply; 14+ messages in thread
From: Andrey Repin @ 2019-02-26 15:33 UTC (permalink / raw)
  To: Maayan Apelboim, cygwin

Greetings, Maayan Apelboim!

> Hi,

> I hope I'm mailing the proper mailing list..
> I am using password-less ssh login using RSA key to login windows servers from linux.
> I've read this article about network shares problems when using RSA key
> instead password and decided method 2 is most suitable for my case:
> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview

> So I ran passwd -R for the relevant user, but still getting 'permission
> denied' when trying to access network shares.
> Tried restarting the ssh service and rebooting the server but it didn't help.

> I checked the registry as SYSTEM and I can see my user UID set in the right
> location.. (at least I think so, cause it doesn't exists in other servers).
> So it seems to me like the 'set(e)uid' / 'LogonUser' described in the article doesn't work as expected.

> Would appreciate any suggestions.

Please try changing the cygsshd service configuration to run as "SYSTEM" user.

> * Some sensitive data was edited in the cygcheck.out file
> * I don't have cygserver installed as a service - I used administrator user
> and didn't get any errors when running passwd -R


-- 
With best regards,
Andrey Repin
Tuesday, February 26, 2019 17:58:28

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-02-26 15:33   ` Andrey Repin
@ 2019-02-26 18:00     ` Houder
  2019-02-27  1:17       ` Andrey Repin
  0 siblings, 1 reply; 14+ messages in thread
From: Houder @ 2019-02-26 18:00 UTC (permalink / raw)
  To: cygwin

On Tue, 26 Feb 2019 18:01:18, Andrey Repin  wrote:

> Greetings, Maayan Apelboim!
> 
> > Hi,
> 
> > I hope I'm mailing the proper mailing list..
> > I am using password-less ssh login using RSA key to login windows servers from linux.
> > I've read this article about network shares problems when using RSA key
> > instead password and decided method 2 is most suitable for my case:
> > https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview
[snip]

> Please try changing the cygsshd service configuration to run as "SYSTEM" user.

Why, Andrey? He is running cygwin1.dll version 2.11.0 (as far as I can tell).

Henri


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-02-26 18:00     ` Houder
@ 2019-02-27  1:17       ` Andrey Repin
  2019-03-05  8:19         ` Maayan Apelboim
  0 siblings, 1 reply; 14+ messages in thread
From: Andrey Repin @ 2019-02-27  1:17 UTC (permalink / raw)
  To: Houder, cygwin

Greetings, Houder!

> On Tue, 26 Feb 2019 18:01:18, Andrey Repin  wrote:

>> Greetings, Maayan Apelboim!
>> 
>> > Hi,
>> 
>> > I hope I'm mailing the proper mailing list..
>> > I am using password-less ssh login using RSA key to login windows servers from linux.
>> > I've read this article about network shares problems when using RSA key
>> > instead password and decided method 2 is most suitable for my case:
>> > https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview
> [snip]

>> Please try changing the cygsshd service configuration to run as "SYSTEM" user.

> Why, Andrey? He is running cygwin1.dll version 2.11.0 (as far as I can tell).

Sorry, I missed that bit. I normally assume people running an up to date
system. Or at least update when they encounter issues.


-- 
With best regards,
Andrey Repin
Wednesday, February 27, 2019 3:45:05

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* RE: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-02-27  1:17       ` Andrey Repin
@ 2019-03-05  8:19         ` Maayan Apelboim
  2019-03-05 19:27           ` Achim Gratz
  0 siblings, 1 reply; 14+ messages in thread
From: Maayan Apelboim @ 2019-03-05  8:19 UTC (permalink / raw)
  To: cygwin

To my understanding this feature should be working in older versions as well.
I have Cygwin running on production servers.
If I upgrade one I need to upgrade all, so I prefer to see if anyone has any suggestion before trying to upgrade.

Regards,
Maayan

-----Original Message-----
From: Andrey Repin [mailto:anrdaemon@yandex.ru] 
Sent: Wednesday, February 27, 2019 2:46 AM
To: Houder <cygwin@cygwin.com>; cygwin@cygwin.com
Subject: Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected

Greetings, Houder!

> On Tue, 26 Feb 2019 18:01:18, Andrey Repin  wrote:

>> Greetings, Maayan Apelboim!
>> 
>> > Hi,
>> 
>> > I hope I'm mailing the proper mailing list..
>> > I am using password-less ssh login using RSA key to login windows servers from linux.
>> > I've read this article about network shares problems when using RSA 
>> > key instead password and decided method 2 is most suitable for my case:
>> > https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview
> [snip]

>> Please try changing the cygsshd service configuration to run as "SYSTEM" user.

> Why, Andrey? He is running cygwin1.dll version 2.11.0 (as far as I can tell).

Sorry, I missed that bit. I normally assume people running an up to date system. Or at least update when they encounter issues.


--
With best regards,
Andrey Repin
Wednesday, February 27, 2019 3:45:05

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-05  8:19         ` Maayan Apelboim
@ 2019-03-05 19:27           ` Achim Gratz
  2019-03-06 10:09             ` Maayan Apelboim
  0 siblings, 1 reply; 14+ messages in thread
From: Achim Gratz @ 2019-03-05 19:27 UTC (permalink / raw)
  To: cygwin

Maayan Apelboim writes:
> To my understanding this feature should be working in older versions
> as well.

If it works OK with 2.11.2, then wait a few moments for 3.0.2 to appear
and it should work the same, plus you can then run the service under
Local System instead of the special cyg_server user.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Samples for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldSamplesExtra

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* RE: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-05 19:27           ` Achim Gratz
@ 2019-03-06 10:09             ` Maayan Apelboim
  2019-03-06 12:28               ` Corinna Vinschen
  0 siblings, 1 reply; 14+ messages in thread
From: Maayan Apelboim @ 2019-03-06 10:09 UTC (permalink / raw)
  To: cygwin

Well, it doesn't work OK unfortunately, but I'm not sure if I missed something in the process, or is it just not working properly.
I'm a bit worried to upgrade to 3.0.2 at the moment cause it's a major version and will probably have new bugs that I wouldn't want to find in production.

Assuming we will eventually upgrade to latest version - 
My sshd service is running with domain user cyg_server and we login with domains users via ssh - is it still OK to switch the sshd service's user to local system?
Will we still be able to login with domain users via ssh?
Will it help with my network shares problem?

Thank you for your reply

-----Original Message-----
From: Achim Gratz [mailto:Stromeko@nexgo.de] 
Sent: Tuesday, March 5, 2019 9:28 PM
To: cygwin@cygwin.com
Subject: Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected

Maayan Apelboim writes:
> To my understanding this feature should be working in older versions 
> as well.

If it works OK with 2.11.2, then wait a few moments for 3.0.2 to appear and it should work the same, plus you can then run the service under Local System instead of the special cyg_server user.

Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Samples for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldSamplesExtra

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-06 10:09             ` Maayan Apelboim
@ 2019-03-06 12:28               ` Corinna Vinschen
  2019-03-06 12:35                 ` Corinna Vinschen
  2019-03-13  8:32                 ` Maayan Apelboim
  0 siblings, 2 replies; 14+ messages in thread
From: Corinna Vinschen @ 2019-03-06 12:28 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 1360 bytes --]

On Mar  6 10:09, Maayan Apelboim wrote:
> Well, it doesn't work OK unfortunately, but I'm not sure if I missed something in the process, or is it just not working properly.
> I'm a bit worried to upgrade to 3.0.2 at the moment cause it's a major version and will probably have new bugs that I wouldn't want to find in production.
> 
> Assuming we will eventually upgrade to latest version - 
> My sshd service is running with domain user cyg_server and we login with domains users via ssh - is it still OK to switch the sshd service's user to local system?
> Will we still be able to login with domain users via ssh?

Yes, that's the idea.  The new method using the official S4U logon
technique runs under the SYSTEM account.  No need to have a special
cyg_server account with potentially dangerous privileges anymore.

> Will it help with my network shares problem?

No.  Just like the old techniques using an LSA authentication module
or creating a user token from scratch, S4U login does not create
tokens with valid network credentials.  For some weird reason only
Microsoft knows about, you still need a password login for that.

The other method, logging in by stored password, as described in
https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3 still
works, though.

Corinna

-- 
Corinna Vinschen
Cygwin Maintainer

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-06 12:28               ` Corinna Vinschen
@ 2019-03-06 12:35                 ` Corinna Vinschen
  2019-03-13  8:32                 ` Maayan Apelboim
  1 sibling, 0 replies; 14+ messages in thread
From: Corinna Vinschen @ 2019-03-06 12:35 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 1581 bytes --]

On Mar  6 13:28, Corinna Vinschen wrote:
> On Mar  6 10:09, Maayan Apelboim wrote:
> > Well, it doesn't work OK unfortunately, but I'm not sure if I missed something in the process, or is it just not working properly.
> > I'm a bit worried to upgrade to 3.0.2 at the moment cause it's a major version and will probably have new bugs that I wouldn't want to find in production.
> > 
> > Assuming we will eventually upgrade to latest version - 
> > My sshd service is running with domain user cyg_server and we login with domains users via ssh - is it still OK to switch the sshd service's user to local system?
> > Will we still be able to login with domain users via ssh?
> 
> Yes, that's the idea.  The new method using the official S4U logon
> technique runs under the SYSTEM account.  No need to have a special
> cyg_server account with potentially dangerous privileges anymore.
> 
> > Will it help with my network shares problem?
> 
> No.  Just like the old techniques using an LSA authentication module
> or creating a user token from scratch, S4U login does not create
> tokens with valid network credentials.  For some weird reason only
> Microsoft knows about, you still need a password login for that.

Btw., that's in no way different when using Microsoft's own SSHD.
They use S4U login as well.  That's where I got the idea, in fact.

> The other method, logging in by stored password, as described in
> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3 still
> works, though.


Corinna

-- 
Corinna Vinschen
Cygwin Maintainer

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 14+ messages in thread

* RE: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-06 12:28               ` Corinna Vinschen
  2019-03-06 12:35                 ` Corinna Vinschen
@ 2019-03-13  8:32                 ` Maayan Apelboim
  2019-03-13  9:04                   ` Corinna Vinschen
  1 sibling, 1 reply; 14+ messages in thread
From: Maayan Apelboim @ 2019-03-13  8:32 UTC (permalink / raw)
  To: cygwin

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain; charset="utf-8", Size: 2326 bytes --]

Hi,

I appreciate your detailed response, however, stored passwords doesn't work properly.
I've read the article and ran passwd -R as described - no errors generated and I was able to find the relevant registry entry after running the command, but still can't access network shares (access denied).
When I login with password network shares are available.

Is there something else I need to do except 'passwd -R' for getting a proper token?

Thanks

-----Original Message-----
From: Corinna Vinschen [mailto:corinna-cygwin@cygwin.com] 
Sent: Wednesday, March 6, 2019 2:28 PM
To: cygwin@cygwin.com
Subject: Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected

On Mar  6 10:09, Maayan Apelboim wrote:
> Well, it doesn't work OK unfortunately, but I'm not sure if I missed something in the process, or is it just not working properly.
> I'm a bit worried to upgrade to 3.0.2 at the moment cause it's a major version and will probably have new bugs that I wouldn't want to find in production.
> 
> Assuming we will eventually upgrade to latest version - My sshd 
> service is running with domain user cyg_server and we login with domains users via ssh - is it still OK to switch the sshd service's user to local system?
> Will we still be able to login with domain users via ssh?

Yes, that's the idea.  The new method using the official S4U logon technique runs under the SYSTEM account.  No need to have a special cyg_server account with potentially dangerous privileges anymore.

> Will it help with my network shares problem?

No.  Just like the old techniques using an LSA authentication module or creating a user token from scratch, S4U login does not create tokens with valid network credentials.  For some weird reason only Microsoft knows about, you still need a password login for that.

The other method, logging in by stored password, as described in
https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3 still works, though.

Corinna

--
Corinna Vinschen
Cygwin Maintainer
\0Ð¢ÒÐÐ¥\a&ö&ÆVÒ\a&W\x06÷'G3¢\x02\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒ÷\a&ö&ÆV×2æ‡FÖÀÐ¤d\x15\x13¢\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒöf\x17\x12ðÐ¤Fö7VÖVçF\x17F–öã¢\x02\x02\x02\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒöFö72æ‡FÖÀÐ¥Vç7V'67&–&R\x06–æfó¢\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒöÖÂò7Vç7V'67&–&R×6–×\x06ÆPÐ Ð

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-13  8:32                 ` Maayan Apelboim
@ 2019-03-13  9:04                   ` Corinna Vinschen
  2019-03-14 10:41                     ` Maayan Apelboim
  0 siblings, 1 reply; 14+ messages in thread
From: Corinna Vinschen @ 2019-03-13  9:04 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 2572 bytes --]

Please, don't top-post.

On Mar 13 08:31, Maayan Apelboim wrote:
>> From: Corinna Vinschen
>> Sent: Wednesday, March 6, 2019 2:28 PM
>> To: cygwin@cygwin.com
>> Subject: Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
>> 
>> On Mar  6 10:09, Maayan Apelboim wrote:
>> > Well, it doesn't work OK unfortunately, but I'm not sure if I missed something in the process, or is it just not working properly.
>> > I'm a bit worried to upgrade to 3.0.2 at the moment cause it's a major version and will probably have new bugs that I wouldn't want to find in production.
>> > 
>> > Assuming we will eventually upgrade to latest version - My sshd 
>> > service is running with domain user cyg_server and we login with domains users via ssh - is it still OK to switch the sshd service's user to local system?
>> > Will we still be able to login with domain users via ssh?
>> 
>> Yes, that's the idea.  The new method using the official S4U logon technique runs under the SYSTEM account.  No need to have a special cyg_server account with potentially dangerous privileges anymore.
>> 
>> > Will it help with my network shares problem?
>> 
>> No.  Just like the old techniques using an LSA authentication module or creating a user token from scratch, S4U login does not create tokens with valid network credentials.  For some weird reason only Microsoft knows about, you still need a password login for that.
>> 
>> The other method, logging in by stored password, as described in
>> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3 still works, though.
>>
> Hi,
> 
> I appreciate your detailed response, however, stored passwords doesn't work properly.
> I've read the article and ran passwd -R as described - no errors generated and I was able to find the relevant registry entry after running the command, but still can't access network shares (access denied).
> When I login with password network shares are available.

When you login with stored password, Cygwin performs the same LogonUser
call as if you login with password, so the same user token is generated.

Off the top of my head I don't know why it shouldn't work for you.  You
sure you have the correct password stored?  When you login and call
`id', what does it print?  Does it contain the "interactive" group or
the "network" group?  If the latter, then the internal LogonUser call
performed with stored password failed for some reason.


Corinna

-- 
Corinna Vinschen
Cygwin Maintainer

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 14+ messages in thread

* RE: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-13  9:04                   ` Corinna Vinschen
@ 2019-03-14 10:41                     ` Maayan Apelboim
  2019-03-14 11:11                       ` Corinna Vinschen
  0 siblings, 1 reply; 14+ messages in thread
From: Maayan Apelboim @ 2019-03-14 10:41 UTC (permalink / raw)
  To: cygwin

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain; charset="utf-8", Size: 1766 bytes --]

When you login with stored password, Cygwin performs the same LogonUser call as if you login with password, so the same user token is generated.

Off the top of my head I don't know why it shouldn't work for you.  You sure you have the correct password stored?  When you login and call `id', what does it print?  Does it contain the "interactive" group or the "network" group?  If the latter, then the internal LogonUser call performed with stored password failed for some reason.

Corinna

--
Corinna Vinschen
Cygwin Maintainer

---------------------------------------------------------------------------------------

Yes, I'm sure I used the correct password, I use it all the time and I also tried running passwd -R multiple times in case I entered it wrongly.
I'm not sure what are "interactive" & "network" groups - do you mean literally groups called network & interactive?
Either way - I'm always getting a group named "interactive" among other groups - either with password ssh or with RSA - never "network"
I do have some different groups when running id - comparing password ssh and RSA ssh.
Also, when I run mkpasswd -d when I log in with password, it generates users from the domain, comparing RSA ssh that generates only a few entries unrelated to my domain..

I think the same as you (also mentioned in the email title :) ) that the LogonUser call doesn't work as expected. Is there a way to verify it? Any logs I can check?
Would it help if I'll send the different groups I'm getting?

Thanks!

\x03B‹KCB”\x1c›Ø›\x19[H\x1c™\^[Ü\x1cÎˆ\b\b\b\b\b\b\x1a\x1d\x1d\x1c\x0e‹ËØÞYÝÚ[‹˜ÛÛKÜ\x1c›Ø›\x19[\Ëš\x1d^[[\x03B‘TNˆ\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\x1a\x1d\x1d\x1c\x0e‹ËØÞYÝÚ[‹˜ÛÛKÙ˜\KÃB‘^[ØÝ[Y[\x18]\x1a[ÛŽˆ\b\b\b\b\b\b\b\b\x1a\x1d\x1d\x1c\x0e‹ËØÞYÝÚ[‹˜ÛÛKÙ^[ØÜËš\x1d^[[\x03B•[œÝXœØÜšX™H\x1a[™›Îˆ\b\b\b\b\b\x1a\x1d\x1d\x1c\x0e‹ËØÞYÝÚ[‹˜ÛÛKÛ[\vÈÝ[œÝXœØÜšX™K\Ú[\^[\x19CBƒB

^ permalink raw reply	[flat|nested] 14+ messages in thread

* Re: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-14 10:41                     ` Maayan Apelboim
@ 2019-03-14 11:11                       ` Corinna Vinschen
  2019-03-18 13:53                         ` Maayan Apelboim
  0 siblings, 1 reply; 14+ messages in thread
From: Corinna Vinschen @ 2019-03-14 11:11 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 3200 bytes --]

On Mar 14 10:41, Maayan Apelboim wrote:
> 
> When you login with stored password, Cygwin performs the same
> LogonUser call as if you login with password, so the same user token
> is generated.
> 
> Off the top of my head I don't know why it shouldn't work for you.
> You sure you have the correct password stored?  When you login and
> call `id', what does it print?  Does it contain the "interactive"
> group or the "network" group?  If the latter, then the internal
> LogonUser call performed with stored password failed for some reason.
> 
> 
> Corinna
> 
> --
> Corinna Vinschen
> Cygwin Maintainer
> 
> ---------------------------------------------------------------------------------------
> 
> Yes, I'm sure I used the correct password, I use it all the time and I
> also tried running passwd -R multiple times in case I entered it
> wrongly.  I'm not sure what are "interactive" & "network" groups - do
> you mean literally groups called network & interactive?  Either way -

Yes.

> I'm always getting a group named "interactive" among other groups -
> either with password ssh or with RSA - never "network" I do have some
> different groups when running id - comparing password ssh and RSA ssh.

If password auth or `passwd -R' auth is used you'll have the
"4(INTERACTIVE)" group in your `id' output.  If S4ULogon is used you'll
have the "2(NETWORK)" group in your `id' output.  This is one way to
identify which logon method has been used.

> Also, when I run mkpasswd -d when I log in with password, it generates
> users from the domain, comparing RSA ssh that generates only a few
> entries unrelated to my domain..

You don't need mkpasswd anymore.  Use `getent passwd' instead.

But... given you're using mkpasswd at all, I wonder if you still
have /etc/passwd and/or /etc/group files.  If so, move them out
of the way and restart your CYgwin processes.  They are not required
and may even result in problems if they have been tweaked.

If you still have these files, removing them is the first thing to
try.

> I think the same as you (also mentioned in the email title :) ) that
> the LogonUser call doesn't work as expected. Is there a way to verify
> it? Any logs I can check?  Would it help if I'll send the different
> groups I'm getting?

Other groups than NETWORK or INTERACTIVE don't matter, as explained
above.  The only reasons I can think of that LogonUser doesn't work is
that your username, domainname, or password are incorrect, or your
account is disabled.  I never saw the call fail for any other reason.

For debugging, you would have to call the sshd service under strace.
That would give a hint.  For that you should change the sshd service
call in the registry so that `/usr/sbin/sshd -D' is replaced with
`/usr/bin/strace -o /tmp/sshd.trace /usr/sbin/sshd -d'.  Note the
lowercase -d, which runs sshd in debug mode.  After the first logon,
sshd will terminate itself automatically.  Afterwards you should send
the /tmp/sshd.trace file here for inspection.  You can obfuscate
sensitive info, but the gist of the file should stay intact.

Corinna

-- 
Corinna Vinschen
Cygwin Maintainer

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 14+ messages in thread

* RE: can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected
  2019-03-14 11:11                       ` Corinna Vinschen
@ 2019-03-18 13:53                         ` Maayan Apelboim
  0 siblings, 0 replies; 14+ messages in thread
From: Maayan Apelboim @ 2019-03-18 13:53 UTC (permalink / raw)
  To: cygwin

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain; charset="utf-8", Size: 2587 bytes --]

If password auth or `passwd -R' auth is used you'll have the "4(INTERACTIVE)" group in your `id' output.  If S4ULogon is used you'll have the "2(NETWORK)" group in your `id' output.  This is one way to identify which logon method has been used.

	>>>>I always get 4(INTERACTIVE) - with password or with RSA (also on servers I didn't run passwd -R). Never got 2(NETWORK).

You don't need mkpasswd anymore.  Use `getent passwd' instead.
But... given you're using mkpasswd at all, I wonder if you still have /etc/passwd and/or /etc/group files.  If so, move them out of the way and restart your CYgwin processes.  They are not required and may even result in problems if they have been tweaked.
If you still have these files, removing them is the first thing to try.

	>>>>Yes, I still have passwd and group files. No special tweaks. They were set with mkpasswd -d & mkgroup -d and never been touched, but I'll check how to use getent and will update.

Other groups than NETWORK or INTERACTIVE don't matter, as explained above.  The only reasons I can think of that LogonUser doesn't work is that your username, domainname, or password are incorrect, or your account is disabled.  I never saw the call fail for any other reason.
For debugging, you would have to call the sshd service under strace.
That would give a hint.  For that you should change the sshd service call in the registry so that `/usr/sbin/sshd -D' is replaced with `/usr/bin/strace -o /tmp/sshd.trace /usr/sbin/sshd -d'.  Note the lowercase -d, which runs sshd in debug mode.  After the first logon, sshd will terminate itself automatically.  Afterwards you should send the /tmp/sshd.trace file here for inspection.  You can obfuscate sensitive info, but the gist of the file should stay intact.

	>>>> I was able to set sshd to run with debug (-d), but when adding the trace the service fails to start. 

Noticed another problem started only on the servers I ran passwd -R - the Cygwin terminal fails to start. The window opens and closes immediately. It didn't happen immediately after running the command. It started a few days later.
Servers have been rebooted during this time and I think it started after the reboot.
Think I might need to reinstall or upgrade and try your suggestions again.

Thanks for the tips. I will update when I have more info.
\0Ð¢ÒÐÐ¥\a&ö&ÆVÒ\a&W\x06÷'G3¢\x02\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒ÷\a&ö&ÆV×2æ‡FÖÀÐ¤d\x15\x13¢\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒöf\x17\x12ðÐ¤Fö7VÖVçF\x17F–öã¢\x02\x02\x02\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒöFö72æ‡FÖÀÐ¥Vç7V'67&–&R\x06–æfó¢\x02\x02\x02\x02\x02\x06‡GG\x03¢òö7–wv–âæ6öÒöÖÂò7Vç7V'67&–&R×6–×\x06ÆPÐ Ð

^ permalink raw reply	[flat|nested] 14+ messages in thread

end of thread, other threads:[~2019-03-18 13:53 UTC | newest]

Thread overview: 14+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <AM6PR07MB5334CE88B67F5421BA671C43957B0@AM6PR07MB5334.eurprd07.prod.outlook.com>
2019-02-26 13:39 ` can't access remote shares when using ssh with rsa key - passwd -R / set(e)uid / LogonUser is not working as expected Maayan Apelboim
2019-02-26 15:33   ` Andrey Repin
2019-02-26 18:00     ` Houder
2019-02-27  1:17       ` Andrey Repin
2019-03-05  8:19         ` Maayan Apelboim
2019-03-05 19:27           ` Achim Gratz
2019-03-06 10:09             ` Maayan Apelboim
2019-03-06 12:28               ` Corinna Vinschen
2019-03-06 12:35                 ` Corinna Vinschen
2019-03-13  8:32                 ` Maayan Apelboim
2019-03-13  9:04                   ` Corinna Vinschen
2019-03-14 10:41                     ` Maayan Apelboim
2019-03-14 11:11                       ` Corinna Vinschen
2019-03-18 13:53                         ` Maayan Apelboim

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).