Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<3E0333AA.86844B44@ieee.org>
Date:	Fri, 20 Dec 2002 10:13:46 -0500
From:	"Pierre A. Humblet" <Pierre DOT Humblet AT ieee DOT org>
X-Accept-Language:	en,pdf
MIME-Version:	1.0
To:	jurgen DOT defurne AT philips DOT com
CC:	cygwin AT cygwin DOT com
Subject:	Re: Followup: 1.3.17: sshd closes terminal immediately after
	establishingconnection (1.3.13 ? 1.3.14)
References:	<OF4A11D243 DOT 5DDF7FAC-ONC1256C8C DOT 004E0ACB-C1256C94 DOT 003767EF AT diamond DOT philips DOT com>

jurgen DOT defurne AT philips DOT com wrote:
> 
Hello Jurgen,,

thanks for the trace you sent me privately.

> so I have to run the sshd as a specific user, and I also can
> not install sshd as a service. 

<snip>

> debug1: permanently_set_uid: 45090/10513
> setuid 45090: Permission denied

You also report that the output of id is:

uid=45056(beq00871) gid=10513(Domain Users) groepen=547(Power Users),545(Users)

Note that your gid 10513 is not one of your groups (547, 545). 
This violates a basic Cygwin assumption, see
http://cygwin.com/ml/cygwin/2002-12/msg00264.html
http://cygwin.com/ml/cygwin/2002-12/msg00214.html
and this can lead to various problems. It causes an internal error
when you start Cygwin:
internal_getlogin: SetTokenInformation(TokenPrimaryGroup): Win32 error 1308 

So what's happening is that the non-privileged daemon gets a request 
for a login with   permanently_set_uid: uid=45090/gid=10513
This request can't be satisfied because 10513 is not a current group of
the daemon and it doesn't have the privilege to add groups.

The solution is simple: either edit /etc/passwd and change the gid to
547 or 545, or in Windows add the user to the Domain Users group.

Pierre

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -