RE: problem starting inetd as NT service

RE: problem starting inetd as NT service

[Mellman Thomas]

>>-----Original Message-----
>>From: Larry Hall (RFK Partners, Inc) [mailto:lhall@rfk.com]

>>>Ah, I afraid that's the key.  mkpasswd - both with -l and -d 
>>options - does not yield my account name.  I guess my 
>>employer REALLY has the security tied down.  Does that mean 
>>that telnet is out for me?
>>
>>
>>Not necessarily.  You need to be able to create a proper 
>>/etc/passwd file.
>>mkpasswd will do this for you normally.  However, if you can 
>>find the proper
>>info, you can create one manually.  Before embarking on this 
>>"last resort"
>>path though, look at Jason Tishler's 'mkpasswd' email from 
>>today.  That thread
>>may have some useful information for you.


Yes, I was just pondering it.  When I try with the -lu* option,
that's the error message I get: 2221.

Thank you for the information.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: problem starting inetd as NT service

[Heribert Dahms]

I'd try in a DOS box: NET USER and NET USER /DOMAIN

Bye, Heribert (heribert_dahms@icon-scm.com)

> -----Original Message-----
> From:	Mellman Thomas [SMTP:Thomas.Mellman@icn.siemens.de]
> Sent:	Wednesday, May 08, 2002 16:37
> To:	'Larry Hall (RFK Partners, Inc)'
> Cc:	cygwin@cygwin.com
> Subject:	RE: problem starting inetd as NT service
> 
	[Heribert]  [snip]

> Yes, I was just pondering it.  When I try with the -lu* option,
> that's the error message I get: 2221.
> 
	[Heribert]  [snip]



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: problem starting inetd as NT service

[Mellman Thomas]

>>-----Original Message-----
>>From: Larry Hall (RFK Partners, Inc) [mailto:lhall@rfk.com]
>>Sent: Tuesday, May 07, 2002 5:04 PM
>>To: Mellman Thomas; 'john@vincent.as'; YuriLeikind@scnsoft.com
>>Cc: cygwin@cygwin.com
>>Subject: RE: problem starting inetd as NT service
>>
>>
>>At 08:38 AM 5/7/2002, Mellman Thomas wrote:
>>>Due to constraints poised by my employer, I guess, I'm having basic
>>>problems meeting the requirements:
>>>
>>>When I do that, I can't create files anymore.  My id is (clearly)
>>>uid=500(Administrator) gid=513(Kein) groups=513(Kein)



Incidently, I meant NOT as a telnet or ftp user, but simply as
a normal cygwin console user (Administrator) can I no longer create
files.


>>>- I read somewhere that I need to put my RID in the GCOS field of
>>>   a password entry for me.  I couldn't find the RID in my registry.
>>>   Where can I find it?
>>
>>
>>The lack of this data in your /etc/passwd file is probably 
>>the reason you
>>are having permission problems with ntsec turned on.  Just 
>>run "mkpasswd"
>>again with the appropriate flags for your installation.  So 
>>long as it can
>>find your login name, it will add the appropriate information to your 
>>/etc/passwd file for you.


Ah, I afraid that's the key.  mkpasswd - both with -l and -d options - does not yield my account name.  I guess my employer REALLY has the security tied down.  Does that mean that telnet is out for me?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: problem starting inetd as NT service

[Larry Hall (RFK Partners, Inc)]

At 05:39 AM 5/8/2002, Mellman Thomas wrote:
> >>-----Original Message-----
> >>From: Larry Hall (RFK Partners, Inc) [mailto:lhall@rfk.com]
> >>Sent: Tuesday, May 07, 2002 5:04 PM
> >>To: Mellman Thomas; 'john@vincent.as'; YuriLeikind@scnsoft.com
> >>Cc: cygwin@cygwin.com
> >>Subject: RE: problem starting inetd as NT service
> >>
> >>
> >>At 08:38 AM 5/7/2002, Mellman Thomas wrote:
> >>>Due to constraints poised by my employer, I guess, I'm having basic
> >>>problems meeting the requirements:
> >>>
> >>>When I do that, I can't create files anymore.  My id is (clearly)
> >>>uid=500(Administrator) gid=513(Kein) groups=513(Kein)
>
>
>
>Incidently, I meant NOT as a telnet or ftp user, but simply as
>a normal cygwin console user (Administrator) can I no longer create
>files.


OK, you're problem with /etc/passwd is at the heart of this problem.


> >>>- I read somewhere that I need to put my RID in the GCOS field of
> >>>   a password entry for me.  I couldn't find the RID in my registry.
> >>>   Where can I find it?
> >>
> >>
> >>The lack of this data in your /etc/passwd file is probably 
> >>the reason you
> >>are having permission problems with ntsec turned on.  Just 
> >>run "mkpasswd"
> >>again with the appropriate flags for your installation.  So 
> >>long as it can
> >>find your login name, it will add the appropriate information to your 
> >>/etc/passwd file for you.
>
>
>Ah, I afraid that's the key.  mkpasswd - both with -l and -d options - does not yield my account name.  I guess my employer REALLY has the security tied down.  Does that mean that telnet is out for me?


Not necessarily.  You need to be able to create a proper /etc/passwd file.
mkpasswd will do this for you normally.  However, if you can find the proper
info, you can create one manually.  Before embarking on this "last resort"
path though, look at Jason Tishler's 'mkpasswd' email from today.  That thread
may have some useful information for you.


Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
838 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: problem starting inetd as NT service

[Mellman Thomas]

>>-----Original Message-----
>>From: john@vincent.as [mailto:john@vincent.as]
>>Sent: Tuesday, May 07, 2002 1:50 PM
>>To: YuriLeikind@scnsoft.com
>>Cc: cygwin@cygwin.com
>>Subject: Re: problem starting inetd as NT service
>>
>>
>>.... (I assume you read the README file
>>I mentioned earlier). Also if you're using the NTFS file
>>system, you may also need to set the CYGWIN environment
>>variable to "ntsec".


I am also having problems getting the inetd services to run.

Due to constraints poised by my employer, I guess, I'm having basic
problems meeting the requirements:


>  If you don't start inetd as service under LocalSystem but under
>  another account, you have to [make sure] that that account has several
>  user rights set in the user manager resp. local/domain security
>  policy mmc snap in:
>        "Act as part of the operating system"
>        "Replace process level token"
>        "Increase quotas"
>        "Logon as a service"
>  Note that administrators do not have all that user rights set
>  by default!


- I'm afraid I don't know what "mmc snap" means - ah, from google
  I get something about microsoft management console tools ...
  (I hope I won't have to become a Certified Microsoft Engineer...)

- I see that, under the control-panel -> services ->+ cygwin-inetd
  I can choose between system account and 'this account'.  Default is
  system account.  Why would I use "this account"?  Why would I use
  the system account, or what problems lurk for me there?

- if I try to use "this account", I must enter a password.  Where
  does this come from?  My own password does not seem to work.

I probably won't ask these questions, except that my employer has
got the security turned down pretty tight, so trying things out isn't
very satisfactory.


>
>  For all application started via NT/W2K service manager under
>  LocalSystem account, the following restrictions apply:
>
>  - The environment variable CYGWIN must be either set in the system
>    environment to be active from start on or you can set CYGWIN thru
>    the registry:
>    Under the key HKLM\Software\Cygnus Solutions\Cygwin\Program Options
>    create a REG_SZ (String) named like the full DOS path to the application,
>    eg. "C:\usr\bin\inetd.exe" and with the value equal to the preferred
>    CYGWIN settings, eg "binmode tty ntsec".


When I do that, I can't create files anymore.  My id is (clearly)
uid=500(Administrator) gid=513(Kein) groups=513(Kein)

- How do I get it to be otherwise?  Will I have to login in twice,
  once to nt and once to cygwin?
- I read somewhere that I need to put my RID in the GCOS field of
  a password entry for me.  I couldn't find the RID in my registry.
  Where can I find it?

Thanks in advance.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: problem starting inetd as NT service

[Larry Hall (RFK Partners, Inc)]

At 08:38 AM 5/7/2002, Mellman Thomas wrote:
> >>-----Original Message-----
> >>From: john@vincent.as [mailto:john@vincent.as]
> >>Sent: Tuesday, May 07, 2002 1:50 PM
> >>To: YuriLeikind@scnsoft.com
> >>Cc: cygwin@cygwin.com
> >>Subject: Re: problem starting inetd as NT service
> >>
> >>
> >>.... (I assume you read the README file
> >>I mentioned earlier). Also if you're using the NTFS file
> >>system, you may also need to set the CYGWIN environment
> >>variable to "ntsec".
>
>
>I am also having problems getting the inetd services to run.
>
>Due to constraints poised by my employer, I guess, I'm having basic
>problems meeting the requirements:
>
>
> >  If you don't start inetd as service under LocalSystem but under
> >  another account, you have to [make sure] that that account has several
> >  user rights set in the user manager resp. local/domain security
> >  policy mmc snap in:
> >        "Act as part of the operating system"
> >        "Replace process level token"
> >        "Increase quotas"
> >        "Logon as a service"
> >  Note that administrators do not have all that user rights set
> >  by default!
>
>
>- I'm afraid I don't know what "mmc snap" means - ah, from google
>   I get something about microsoft management console tools ...
>   (I hope I won't have to become a Certified Microsoft Engineer...)


Me too! ;-)


>- I see that, under the control-panel -> services ->+ cygwin-inetd
>   I can choose between system account and 'this account'.  Default is
>   system account.  Why would I use "this account"?  Why would I use
>   the system account, or what problems lurk for me there?


Just use the "SYSTEM" account.  It's the default and gets you 
what you need.  It means you need to know a whole lot less.  You don't need
to play with the "mmc snap" mentioned above if you use "SYSTEM".


>- if I try to use "this account", I must enter a password.  Where
>   does this come from?  My own password does not seem to work.
>
>I probably won't ask these questions, except that my employer has
>got the security turned down pretty tight, so trying things out isn't
>very satisfactory.


Right.  So you probably only have the option of using "SYSTEM" as the account
anyway.



> >
> >  For all application started via NT/W2K service manager under
> >  LocalSystem account, the following restrictions apply:
> >
> >  - The environment variable CYGWIN must be either set in the system
> >    environment to be active from start on or you can set CYGWIN thru
> >    the registry:
> >    Under the key HKLM\Software\Cygnus Solutions\Cygwin\Program Options
> >    create a REG_SZ (String) named like the full DOS path to the application,
> >    eg. "C:\usr\bin\inetd.exe" and with the value equal to the preferred
> >    CYGWIN settings, eg "binmode tty ntsec".
>
>
>When I do that, I can't create files anymore.  My id is (clearly)
>uid=500(Administrator) gid=513(Kein) groups=513(Kein)
>
>- How do I get it to be otherwise?  Will I have to login in twice,
>   once to nt and once to cygwin?


I'd recommend just adding "ntsec" to the system version of the CYGWIN 
environment variable.  This will ensure that you're using ntsec both for
services and for interactive tasks, which is the best if you're using NTFS. 


>- I read somewhere that I need to put my RID in the GCOS field of
>   a password entry for me.  I couldn't find the RID in my registry.
>   Where can I find it?


The lack of this data in your /etc/passwd file is probably the reason you
are having permission problems with ntsec turned on.  Just run "mkpasswd"
again with the appropriate flags for your installation.  So long as it can
find your login name, it will add the appropriate information to your 
/etc/passwd file for you.



Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
838 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: problem starting inetd as NT service

[john]

Make sure the cygwin1.ddl is in a directory that is specified
in the PATH environment variable that is used when the
service is started. (I assume you read the README file
I mentioned earlier). Also if you're using the NTFS file
system, you may also need to set the CYGWIN environment
variable to "ntsec".

I hope this helps.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

problem starting inetd as NT service

[john]

If you look at the FAQ and documentation for inetd
you'll see that you don't use cygrunsrv to install
inetd. You run it with a special argument and it
installs itself (something like inetd --install-as-service)
if I remember right. If you've got the Cygwin files
installed, look at /usr/doc/Cygwin/inetutils-1.3.2.README

I hope this helps you. 

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: problem starting inetd as NT service

[Yuri Leikind]

On 7 May 2002 10:32:44 -0000
john@vincent.as wrote:

> If you look at the FAQ and documentation for inetd
> you'll see that you don't use cygrunsrv to install
> inetd. You run it with a special argument and it
> installs itself (something like inetd --install-as-service)
> if I remember right. If you've got the Cygwin files
> installed, look at /usr/doc/Cygwin/inetutils-1.3.2.README
> 
> I hope this helps you. 

Oh yes it did work, thank you!

Only now I get

Trying 192.168.102.79...
Connected to martynenko.scnsoft.com.
Escape character is '^]'.
Connection closed by foreign host.

And there is nothing in logs


___
Best regards,
Yuri Leikind


Most programs fail because they are based on the theory that, 
with nine women pregnant, you can get a baby a month.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

problem starting inetd as NT service

[Yuri Leikind]

Hello all,

I cannot start inetd as NT service. I do this:

Install the service:
   cygrunsrv --install inetd --path /usr/sbin/inetd.exe 

And then try to start it:
   cygrunsrv --start inetd

On this command I get the following error dialog:

   The procedure entry point __progname could not be located in the dynamic link library cygwin1.dll


I have these packages:

inetutils 1.3.2-16
cygrunsrv 0.95-1
cygwin 1.3.10-1

and the OS is NT4.0

Where do I dig to solve the problem ?

___
Best regards,
Yuri Leikind


Most programs fail because they are based on the theory that, 
with nine women pregnant, you can get a baby a month.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: problem starting inetd as NT service

[Larry Hall (RFK Partners, Inc)]

At 06:30 AM 5/6/2002, Yuri Leikind wrote:
>Hello all,
>
>I cannot start inetd as NT service. I do this:
>
>Install the service:
>    cygrunsrv --install inetd --path /usr/sbin/inetd.exe 
>
>And then try to start it:
>    cygrunsrv --start inetd
>
>On this command I get the following error dialog:
>
>    The procedure entry point __progname could not be located in the dynamic link library cygwin1.dll
>
>
>I have these packages:
>
>inetutils 1.3.2-16
>cygrunsrv 0.95-1
>cygwin 1.3.10-1
>
>and the OS is NT4.0
>
>Where do I dig to solve the problem ?


The email list archives is one place to dig.  Another is the output of 
cygcheck -s -r -v.  You'll be looking for a duplicate, older version of 
cygwin1.dll on your system.  Get rid of it.



Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
838 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/