From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 25522 invoked by alias); 26 May 2011 15:10:43 -0000 Received: (qmail 25512 invoked by uid 22791); 26 May 2011 15:10:42 -0000 X-SWARE-Spam-Status: No, hits=-0.7 required=5.0 tests=AWL,BAYES_40,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,RFC_ABUSE_POST,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: sourceware.org Received: from mail-gy0-f171.google.com (HELO mail-gy0-f171.google.com) (209.85.160.171) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Thu, 26 May 2011 15:10:28 +0000 Received: by gye5 with SMTP id 5so431151gye.2 for ; Thu, 26 May 2011 08:10:27 -0700 (PDT) MIME-Version: 1.0 Received: by 10.101.207.40 with SMTP id j40mr697004anq.48.1306422627227; Thu, 26 May 2011 08:10:27 -0700 (PDT) Received: by 10.100.46.19 with HTTP; Thu, 26 May 2011 08:10:26 -0700 (PDT) Date: Thu, 26 May 2011 15:10:00 -0000 Message-ID: Subject: Troubleshooting SSH connection as SYSTEM user. From: Matthew Leonhardt To: cygwin@cygwin.com Content-Type: text/plain; charset=ISO-8859-1 X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com X-SW-Source: 2011-05/txt/msg00392.txt.bz2 Hello all, I'm trying to install a service to keep some SSH tunnels alive using the following script: $ cat ssh_tunnel.exe #!/usr/bin/bash while : do /cygdrive/c/WINDOWS/system32/netstat -an | grep 192\.168\.0\.1:139 \ | grep LISTENING > /dev/null if (( $? )); then /usr/bin/ssh -v -v -v -x -i/home/user/.ssh/id_rsa -2 \ -L 192.168.0.1:139:127.0.0.1:139 -N remote_user@remote.host 2>&1 & fi /cygdrive/c/WINDOWS/system32/netstat -an | grep 192\.168\.0\.1:3306 \ | grep LISTENING > /dev/null if (( $? )); then /usr/bin/ssh -v -v -v -x -i/home/user/.ssh/id_rsa -2 \ -L 192.168.0.1:3306:127.0.0.1:3306 -N remote_user@remote.host 2>&1 & fi sleep 300 done The script works fine at the command line, but fails when running as a service. My vain attempt to gather info (-v -v -v) only yields: Permission denied, please try again. Permission denied, please try again. Permission denied (publickey,gssapi-with-mic,password). in the service log (all three lines for each instance of an ssh command). SYSTEM should have access to id_rsa: $ getfacl id_rsa # file: id_rsa # owner: user # group: Domain Users user::rw- group::--- group:SYSTEM:r-- mask:rwx other:--- $ ls -l id_rsa -rw-------+ 1 user Domain Users 1679 Dec 13 13:40 id_rsa But, id_rsa was generated as "user", not as "SYSTEM," so I'm wondering if SYSTEM needs it's own private RSA key, and how one would go about generating one, since I don't seem to be able to su to the SYSTEM user. I appreciate any help anyone can offer. -Matt -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple