X-Recipient:	archive-cygwin AT delorie DOT com
X-Spam-Check-By:	sourceware.org
Message-ID:	<49244AFE.6070206@cygwin.com>
Date:	Wed, 19 Nov 2008 12:21:02 -0500
From:	"Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-To:	cygwin AT cygwin DOT com
User-Agent:	Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080723 Fedora/2.0.0.16-1.fc8 Lightning/0.9 Thunderbird/2.0.0.16 Mnenhy/0.7.5.0
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Cygwin sshd key auth doesn't work (seteuid 500: Permission denied) [SOLVED]
References:	<4923DCFA DOT 4030001 AT criptos DOT com> <4923E945 DOT 80905 AT criptos DOT com>
In-Reply-To:	<4923E945.80905@criptos.com>
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 11/19/2008, Tomàs Núñez wrote:
> I've found this doc
> http://ist.uwaterloo.ca/~kscully/CygwinSSHD_W2K3.html
> and followed the part of "privilege separation". After that, everything 
> worked fine with key auth. 

It's always recommended that you stick with the defaults of the
configuration scripts unless you have a real good reason not to.
Obviously, I'm glad you found the information you needed from any
source though I want to clarify for anyone looking in these archives
in the future that the above site was not material in solving this
problem and any information posted there is not supported by this
list.  In short, the solution is, use the defaults of ssh-host-config.
This will set privilege separation, which is what you want.

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -