X-Spam-Check-By:	sourceware.org
To:	cygwin AT cygwin DOT com
From:	Andrew DeFaria <Andrew AT DeFaria DOT com>
Subject:	Re: ssh password-less cmds to Windows 2003 don't return any output
Date:	Wed, 21 Jun 2006 08:29:09 -0700
Lines:	27
Message-ID:	<e7bok7$t4$1@sea.gmane.org>
References:	<ab50889f0606210407o5cec13c3ha9c0b6a496b99ebd AT mail DOT gmail DOT com>
Mime-Version:	1.0
User-Agent:	Thunderbird 1.5.0.4 (Windows/20060516)
In-Reply-To:	<ab50889f0606210407o5cec13c3ha9c0b6a496b99ebd@mail.gmail.com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

John McNulty wrote:
> However I've just installed and configured Cygwin OpenSSH on a 
> Windows  2003 server, and setup password-less logins (via public keys) 
> as before. But when I try and issue a command via ssh from the client 
> I get no command output back at all.  The remote command just 
> completes silently.  The password-less login is working just fine.
Are you sure it works at all? Did you check /var/log/sshd.log on the 
W2K3 server for errors? It might be that the ssh isn't running the 
command at all rather it's aborting.
> Does anyone else see this and have any idea why I'm getting this 
> behavior?
I have similar problems with both ssh and rsh on W2K3.
> I followed the instructions in ssh-host-config and opted to use the 
> sshd_server account (which kind of caught me by surprise).  Obviously 
> this changes the way ssh works on Cygwin a little.
The change is necessary since W2K3 tightened up security and permissions 
on the Local System Account such that sshd would not be able to switch 
user if it used that account. Instead it offers to create a new account 
called sshd_server and bestow on it the required rights to switch user. 
(I've been wondering why not bestow those rights directly to the Local 
System Account? I mean it had them before... Obviously a security 
decision, probably a wise one).

-- 

Andrew DeFaria <http://defaria.com>
It's not an optical illusion. It just looks like one.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -