From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 36385 invoked by alias); 28 Jan 2016 19:11:26 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 36372 invoked by uid 89); 28 Jan 2016 19:11:26 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=3.9 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=Owner, openssh, OpenSSH, howto X-HELO: mail-lb0-f182.google.com Received: from mail-lb0-f182.google.com (HELO mail-lb0-f182.google.com) (209.85.217.182) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES128-GCM-SHA256 encrypted) ESMTPS; Thu, 28 Jan 2016 19:11:25 +0000 Received: by mail-lb0-f182.google.com with SMTP id bc4so28996065lbc.2 for ; Thu, 28 Jan 2016 11:11:24 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=aL2c2XtfkBmDdqJDbZVRwwPwZ3ZibzQtIdzWkqA+RMI=; b=eYKzE7h7jSSiv8M0lTJyT8k/JKQswqKvytPjh/9u9k0LgqaO4pZRgOpvTIpqS72HJY RRydrsAATKCpggvtZHJ8T2dAJpSjmRm1vN58ClDXnsdeAb7k/tGuoaQGL8nBrxX79teG 69ADRIvTX7+Ws/w3gpZY0+xc0x+g2y/fMjOH1phoGJFgb8xJ6gj3UlKnE/kRK5EFQECQ bvaw34HdJr6rKB/Khb78OLi9YR+ERaVVjLmzKWwcubmVIqKeXD+3YlztVb3k4umLBCim E8PXoz4mqIb0yHn9SSecZs5oUts9auRuKB7m+BonagRdv5CUQ9W83FgxJg+le/VJzT5X M4iw== X-Gm-Message-State: AG10YOQa2PrcYJ4EHqwkum+iMutG48f7n8T8oo88fqj+F2CUMz8F26BpYYBKJanSIe4M/e8zvpeltsXSwwhqng== X-Received: by 10.112.205.196 with SMTP id li4mr1839392lbc.143.1454008281806; Thu, 28 Jan 2016 11:11:21 -0800 (PST) MIME-Version: 1.0 Received: by 10.112.147.197 with HTTP; Thu, 28 Jan 2016 11:11:02 -0800 (PST) From: Tom Moore Date: Thu, 28 Jan 2016 20:28:00 -0000 Message-ID: Subject: OpenSSH access to join the "Local Account" group To: cygwin@cygwin.com Content-Type: text/plain; charset=UTF-8 X-IsSubscribed: yes X-SW-Source: 2016-01/txt/msg00436.txt.bz2 Hi, I have a couple of Windows 7 machines set up as OpenSSH servers. Both are current with windows updates. Both machines have identical cygwin versions (2.0.4-1). I have tried to make the sshd configuration identical on these two machines, following the instructions on http://www.howtogeek.com/howto/41560/how-to-get-ssh-command-line-access-to-windows7-using-cygwin I have set up the client machines, generated rsa keys, and copied the public keys into the authorized_keys file on the server. Now I can log in to both machines without providing a password. So far so good. When I ssh log in to machine A and check the id that I am logged in with, I get: uid=197608(User) gid=197121(None) groups=197121(None),114(Local account and member of Administrators group),544(Administrators),545(Users),4(INTERACTIVE),66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),113(Local account),4095(CurrentSession),262154(NTLM Authentication),405504(High Mandatory Level) which is what I need in order to interact with some other resources on the system. When I ssh log in to machine B and check the id I get: uid=197608(Owner) gid=197121(None) groups=197121(None),11(Authenticated Users),66048(LOCAL),66049(CONSOLE LOGON),4(INTERACTIVE),15(This Organization),545(Users),4095(CurrentSession),544(Administrators),405504(High Mandatory Level) However, if on my local client if I remove the private key from the .ssh directory and ssh login again, this time having to specify a password, my session will join the "Local account" group as I want. Is there a configuration that I am missing in order to get machine B to join the "Local account" group when I log in using an rsa key? What could be different between the two machines? Cheers, Tom -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple