From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 77699 invoked by alias); 28 Jan 2019 15:02:28 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 77687 invoked by uid 89); 28 Jan 2019 15:02:27 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-1.2 required=5.0 tests=BAYES_05,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=UD:mail.com, mail.com, mailcom, U*corinna-cygwin X-HELO: mout.gmx.com Received: from mout.gmx.com (HELO mout.gmx.com) (74.208.4.200) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 28 Jan 2019 15:02:26 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.com; s=dbd5af2cbaf7; t=1548687744; bh=DsM0DMZjtRk2XTYj/WQCknAfGO8ykY5Yp3de2Tgb+sE=; h=X-UI-Sender-Class:References:In-Reply-To:From:Date:Subject:To; b=WB5SkS6hCxQ68eo5Sskwkz/igGjYRZJW6L7xmK7fR/GKiaSE7wvND9xN2v+YyNPIi fVO4nLI5Dp+vj+FEF8RY+W+nLllW+pGgHKiXEmZw0L9pBFq27V+OUejX5621I9Jeed KfSyfYq7X5CjpSVYNHJ6wP8P6ZIKRLfBBFuT1Bxg= X-UI-Sender-Class: 214d933f-fd2f-45c7-a636-f5d79ae31a79 Received: from mail-lf1-f45.google.com ([209.85.167.45]) by mail.gmx.com (mrgmxus001 [74.208.5.15]) with ESMTPSA (Nemesis) id 0Lzc1c-1hIbnR3COA-014lg6 for ; Mon, 28 Jan 2019 16:02:24 +0100 Received: by mail-lf1-f45.google.com with SMTP id f5so12041392lfc.13 for ; Mon, 28 Jan 2019 07:02:23 -0800 (PST) MIME-Version: 1.0 References: <1690850474.834980.1548391349102.ref@mail.yahoo.com> <1690850474.834980.1548391349102@mail.yahoo.com> <20190125174833.GA1710@zebra> <20190128095947.GN3912@calimero.vinschen.de> In-Reply-To: <20190128095947.GN3912@calimero.vinschen.de> From: Bill Stewart Date: Mon, 28 Jan 2019 15:02:00 -0000 Message-ID: Subject: Re: sshd permits logon using disabled user? To: cygwin@cygwin.com Content-Type: text/plain; charset="UTF-8" X-IsSubscribed: yes X-SW-Source: 2019-01/txt/msg00259.txt.bz2 On Mon, Jan 28, 2019 at 2:59 AM Corinna Vinschen wrote: > Can you please test again with the latest snapshot from > https://cygwin.com/snapshots/? The new S4U authentication method > used in this snapshot automatically applies the Windows account rules so > in my testing the patch I applied originally is not required anymore. > Consequentially I disabled it to rely fully on the Windows function's > behaviour. Can you test this, too, please, just to be sure? Thank you Corinna; I will test. Will the S4U authentication work on standalone (non domain-joined) machines also? Bill -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple