sshd - difference between keylogin and password

sshd - difference between keylogin and password

[morten bjoernsvik]

Hi all

Login in with private key gives less credentials than using password.
It is a no password private key.
user is a domain user.


How can this be fixed? I really like to use the private nopassword key.
Some security options in /etc/sshd_config ?
Haven't changed anything here except for kexAlgorithm



$ ssh test1-front.bptest.local -l sa_deploy
sa_deploy@test1-front.bptest.local's password:
Last login: Wed Dec 30 12:02:08 2015 from 10.11.51.56

sa_deploy@vmics01t1 ~
$ id
uid=1050685(sa_deploy) gid=1049089(Domain Users) groups=1049089(Domain Users),545(Users),544(Administrators),4(INTERACTIVE),66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),4095(CurrentSession),70145(Authentication authority asserted identity),1049758(grp_sec_localadmin_test),1050679(grp_sec_localadmin_all_dev_environments),405504(High Mandatory Level)


sa_deploy@BPOLMOBJ1 ~
$ ssh -i sa_deploy.key test1-front.bptest.local -l sa_deploy
Last login: Wed Dec 30 12:09:39 2015 from 10.11.51.56

sa_deploy@vmics01t1 ~
$ id
uid=1050685(sa_deploy) gid=1049089(Domain Users) groups=1049089(Domain Users),11(Authenticated Users),66048(LOCAL),66049(CONSOLE LOGON),4(INTERACTIVE),15(This Organization),545(Users),4095(CurrentSession),401408(Medium Mandatory Level)



$ cygcheck -s | grep ssh | uniq
Found: C:\cygwin64\bin\ssh.exe
143k 2015/03/17 C:\cygwin64\bin\cygssh2-1.dll
Service             : sshd
Display name        : CYGWIN sshd
Command             : /usr/sbin/sshd -D
libssh2_1            1.5.0-1            OK
openssh              7.1p1-1            OK


Thanks, any help really appreciated.

--
Morten Bjoernsvik, Oslo, Norway

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: sshd - difference between keylogin and password

[Achim Gratz]

Am 30.12.2015 um 12:59 schrieb morten bjoernsvik:
> Login in with private key gives less credentials than using password.
> It is a no password private key.
> user is a domain user.

This should help, I'd think.

https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3

-- 
Achim.

(on the road :-)


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Sv: sshd - difference between keylogin and password

[morten bjoernsvik]

Thanks Achim


I currently do not have any cygserver service running, so I will try and configure it.

--
Mobj




Den Onsdag, 30. desember 2015 13.14 skrev Achim Gratz <Stromeko@Nexgo.DE>:
Am 30.12.2015 um 12:59 schrieb morten bjoernsvik:
> Login in with private key gives less credentials than using password.
> It is a no password private key.
> user is a domain user.

This should help, I'd think.

https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3

-- 
Achim.

(on the road :-)



--
Problem reports:      http://cygwin.com/problems.html
FAQ:                  http://cygwin.com/faq/
Documentation:        http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Sv: sshd - difference between keylogin and password

[morten bjoernsvik]

I set up cygserver, logged in with password ran passwd -R saving the password to registry
then:

mobj@BPOLMOBJ1 ~
$ ssh -i sa_deploy_private_key.txt test1-front.bptest.local -l sa_deploy
Last login: Wed Dec 30 14:49:54 2015 from 127.0.0.1

sa_deploy@vmics01t1 ~
$ id
uid=1050685(sa_deploy) gid=1049089(Domain Users) groups=1049089(Domain Users),545(Users),544(Administrators),4(INTERACTIVE),66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),4095(CurrentSession),70145(Authentication authority asserted identity),1049758(grp_sec_localadmin_test),1050679(grp_sec_localadmin_all_dev_environments),405504(High Mandatory Level)


Same as with password.

Thanks, my only concern is update if the users domain password changes.

--
Mobj





Den Onsdag, 30. desember 2015 13.21 skrev morten bjoernsvik <morten_bjoernsvik@yahoo.no>:
Thanks Achim


I currently do not have any cygserver service running, so I will try and configure it.

--
Mobj





Den Onsdag, 30. desember 2015 13.14 skrev Achim Gratz <Stromeko@Nexgo.DE>:
Am 30.12.2015 um 12:59 schrieb morten bjoernsvik:
> Login in with private key gives less credentials than using password.
> It is a no password private key.
> user is a domain user.

This should help, I'd think.

https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3

-- 
Achim.

(on the road :-)



--
Problem reports:      http://cygwin.com/problems.html
FAQ:                  http://cygwin.com/faq/
Documentation:        http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple