Re: Windows Server 2012R2 64bit and 32bit Cygwin sshd

[Achim Gratz <Stromeko@NexGo.DE>]

Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> You already built your own Cygwin DLL, right?  What you could do is to
> do some good old printf debugging.  First let's try to find out if it's
> really one of the NetUser calls:

It looks like I need to install more than the DLL to make this work?  I
couldn't start cygserver as a service with (just) the built DLL in place. 
So I started it in debug mode from the command line (which makes it have
less rights than it needs) and started the sshd in debug mode also.  Due to
presumably the missing rights mentioned I could only log in with an
administrative account (domain account, but restricted to run on  the server
only).  I didn't get any failure from the debug_printf instrumented
functions.  With my normal user account I got a "/bin/bash: Operation not
permitted".  The cygserver debug output also showed unfettered access to the
AD.  With the sshd running without privilege separation I've noticed some
requests to the cygserver that seemed to indicate memory corruption:  Early
on in starting the daemon it would normally try to get account information
for Administrators:544, but the debug output from cygserver was showing
sshdrs as the account name being asked for.  Also there are (probably
unrelated since they are also present on x86_64) complaints about requests
of illegal length (11).

Going back to the original snapshot and using the same debugging setup the
behaviour was still the same.  Since I could now start the services again, I
did that and am back to the original behaviour.  I've asked our IT if there
are restrictions specifically targetting 32bit services or processes, but
got no answer so far (I'm not even sure this is possible).

I'm not sure what to make of these results, but at the moment I've ran out
of time anyway.


Regards,
Achim.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple