Re: Followup: 1.3.17: sshd closes terminal immediately after establishingconnection (1.3.13 ? 1.3.14)

Re: Followup: 1.3.17: sshd closes terminal immediately after establishingconnection (1.3.13 ? 1.3.14)

[jurgen.defurne]

Thanks Pierre,

I worked it out with regenerating the group file, according to your first
mail (BTW, I am a member of 10513, but it was not reflected as it
should have been. Now, my id is correct).

However, I had to know how to prune it, because in our organisation,
the group file generated from the all overlapping domain contains
some 22000 entries. Luckily, these are named according to
organisational domain, and I could pick out those which were
relevant, leaving me with only about 500 entries.

After mirroring my new group file to my servers, and updating to
cygwin 1.3.18, I was able to login on this machine, and now I can
start upgrading my other machines.

Regards,

Jurgen

Re: Followup: 1.3.17: sshd closes terminal immediately after establishingconnection (1.3.13 ? 1.3.14)

[Pierre A. Humblet]

jurgen.defurne@philips.com wrote:
> 
Hello Jurgen,,

thanks for the trace you sent me privately.

> so I have to run the sshd as a specific user, and I also can
> not install sshd as a service. 

<snip>

> debug1: permanently_set_uid: 45090/10513
> setuid 45090: Permission denied

You also report that the output of id is:

uid=45056(beq00871) gid=10513(Domain Users) groepen=547(Power Users),545(Users)

Note that your gid 10513 is not one of your groups (547, 545). 
This violates a basic Cygwin assumption, see
http://cygwin.com/ml/cygwin/2002-12/msg00264.html
http://cygwin.com/ml/cygwin/2002-12/msg00214.html
and this can lead to various problems. It causes an internal error
when you start Cygwin:
internal_getlogin: SetTokenInformation(TokenPrimaryGroup): Win32 error 1308 

So what's happening is that the non-privileged daemon gets a request 
for a login with   permanently_set_uid: uid=45090/gid=10513
This request can't be satisfied because 10513 is not a current group of
the daemon and it doesn't have the privilege to add groups.

The solution is simple: either edit /etc/passwd and change the gid to
547 or 545, or in Windows add the user to the Domain Users group.

Pierre

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/