X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=ViafyVQfgQPxG9WTRu4zQmLnV/Vz2
	Yb7fMYNNqenZAhqRkSqGHmh5kQGikkgweEjjopkFeYbnGbiaq1QP2MEixn89rHDH
	72hW5Q2o4hbAY3CIo10dB9I6gtgloOqPaLX0c+gdSgZjlvR990RGITy32qJurpSx
	LMXEZ0qyjuXT/w=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; s=default; bh=6T9kXCAMSD4cJV8/c6/paXML7o8=; b=Lby
	QNLBKmQ8wzFLmbSk/01UNAGg7QJI39LYPtJ1F+d7UG0hCoaDbEjVphCeglgpoIsZ
	y0Ks7uo0uDb8VPi+mE6z1ao3nr8FAy+OH0uAYPMORLcVjVrbZ8vql23SDiwyBhAn
	BHn5MhYIhE4jQQH29IPY/K/P6j2YM1EOCkXwe17w=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=3.9 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=Owner, openssh, OpenSSH, howto
X-HELO:	mail-lb0-f182.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=aL2c2XtfkBmDdqJDbZVRwwPwZ3ZibzQtIdzWkqA+RMI=; b=eYKzE7h7jSSiv8M0lTJyT8k/JKQswqKvytPjh/9u9k0LgqaO4pZRgOpvTIpqS72HJY RRydrsAATKCpggvtZHJ8T2dAJpSjmRm1vN58ClDXnsdeAb7k/tGuoaQGL8nBrxX79teG 69ADRIvTX7+Ws/w3gpZY0+xc0x+g2y/fMjOH1phoGJFgb8xJ6gj3UlKnE/kRK5EFQECQ bvaw34HdJr6rKB/Khb78OLi9YR+ERaVVjLmzKWwcubmVIqKeXD+3YlztVb3k4umLBCim E8PXoz4mqIb0yHn9SSecZs5oUts9auRuKB7m+BonagRdv5CUQ9W83FgxJg+le/VJzT5X M4iw==
X-Gm-Message-State:	AG10YOQa2PrcYJ4EHqwkum+iMutG48f7n8T8oo88fqj+F2CUMz8F26BpYYBKJanSIe4M/e8zvpeltsXSwwhqng==
X-Received:	by 10.112.205.196 with SMTP id li4mr1839392lbc.143.1454008281806; Thu, 28 Jan 2016 11:11:21 -0800 (PST)
MIME-Version:	1.0
From:	Tom Moore <moortom AT gmail DOT com>
Date:	Thu, 28 Jan 2016 14:11:02 -0500
Message-ID:	<CANwy9RQ2XE-HWGDrkfnkeZH3iuDOhpOo5pGtxu2afRBxLZKJJw@mail.gmail.com>
Subject:	OpenSSH access to join the "Local Account" group
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes

Hi,

I have a couple of Windows 7 machines set up as OpenSSH servers.  Both are
current with windows updates.   Both machines have identical cygwin
versions (2.0.4-1).  I have tried to make the sshd configuration identical
on these two machines, following the instructions on
http://www.howtogeek.com/howto/41560/how-to-get-ssh-command-line-access-to-windows7-using-cygwin


I have set up the client machines, generated rsa keys, and copied the
public keys into the authorized_keys file on the server.  Now I can log in
to both machines without providing a password.  So far so good.

When I ssh log in to machine A and check the id that I am logged in with, I get:

uid=197608(User) gid=197121(None) groups=197121(None),114(Local account and
member of Administrators
group),544(Administrators),545(Users),4(INTERACTIVE),66049(CONSOLE
LOGON),11(Authenticated Users),15(This Organization),113(Local
account),4095(CurrentSession),262154(NTLM Authentication),405504(High
Mandatory Level)

which is what I need in order to interact with some other resources on the
system.

When I ssh log in to machine B and check the id I get:

uid=197608(Owner) gid=197121(None) groups=197121(None),11(Authenticated
Users),66048(LOCAL),66049(CONSOLE LOGON),4(INTERACTIVE),15(This
Organization),545(Users),4095(CurrentSession),544(Administrators),405504(High
Mandatory Level)

However, if on my local client if I remove the private key from the .ssh
directory and ssh login again, this time having to specify a password, my
session will join the "Local account" group as I want.

Is there a configuration that I am missing in order to get machine B to
join the "Local account" group when I log in using an rsa key?  What could
be different between the two machines?

Cheers,

Tom

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -