Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Date: Wed, 10 Dec 2003 21:00:30 +0200 Message-Id: <200312101900.hBAJ0Uki015582@beta.mvs.co.il> From: "Ehud Karni" To: mberney@polyserve.com Cc: cygwin@cygwin.com, cygwin-lh@cygwin.com Subject: Re: Question about cygwin sshd and StrictModes In-reply-to: (message from Matt Berney on Wed, 10 Dec 2003 09:17:23 -0800) Organization: Mivtach-Simon Insurance agencies Reply-to: ehud@unix.mvs.co.il References: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-8-i Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 10 Dec 2003 09:17:23 -0800, Matt Berney wrote: > > Thanks for the no-help. I have already read all relevant > documentation that I could find. That is the reason for > posting a message to the group. In the future, if you wish > to be helpful, please offer more than RTFM. I don't exactly know what Larry meant, but if you read the "Fucking" manual as you claim, you either missed or misunderstood the following (from the man pages of sshd_config(5) ): StrictModes Specifies whether sshd should check file modes and ownership of the user's files and home directory before accepting login. This ^^^^^^ is normally desirable because novices sometimes accidentally leave their directory or files world-writable. The default is ``yes''. Which is in plain English: check the permissions of your Home (~/) and your ssh (~/.ssh) directories. Your home directory must NOT be writable by others (not even from your group) and the ~/.ssh should not be readable by others (because you may have your private keys there). Ehud. - -- Ehud Karni Tel: +972-3-7966-561 /"\ Mivtach - Simon Fax: +972-3-7966-667 \ / ASCII Ribbon Campaign Insurance agencies (USA) voice mail and X Against HTML Mail http://www.mvs.co.il FAX: 1-815-5509341 / \ GnuPG: 98EA398D Better Safe Than Sorry -----BEGIN PGP SIGNATURE----- Comment: use http://www.keyserver.net/ to get my key (and others) iD8DBQE/121NLFvTvpjqOY0RApgtAJ9dsH7eFVYhn7KjgI0Mt6glHiSoygCfY4aU dDt9iTdg2EqXanRErmOkBk8= =DDIp -----END PGP SIGNATURE----- -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/