X-Spam-Check-By: sourceware.org
Message-ID: <43CE619E.6070708@equate.dyndns.org>
Date: Wed, 18 Jan 2006 15:41:18 +0000
From: Chris Taylor <chris AT equate DOT dyndns DOT org>
Reply-To: cygwin AT cygwin DOT com
User-Agent: Debian Thunderbird 1.0.7 (X11/20051017)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Wich privileges required by ssh-host-config running user?
References: <SERRANOCBcKfExvWvqz000001b4 AT SERRANO DOT CAM DOT ARTIMI DOT COM>
In-Reply-To: <SERRANOCBcKfExvWvqz000001b4@SERRANO.CAM.ARTIMI.COM>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Dave Korn wrote:
> Chris Taylor wrote:
> 
> 
>>You want to try with the domain administrator account, not the local
>>administrator.
>>If you're logging on as administrator, and log on to is set to the
>>domain, then you are already doing so and something most unusual is
>>occuring - suggestive of an admin removing administrator access to the
>>root filesystem, or to certain parts of it.
> 
> 
> 
>   Bingo.  That's it.  In particular, joining a domain locks down the perms of
> your C:\ root drive.  If, for instance, a folder under that relies on the
> default perms being inherited, it's going to be in trouble.

Indeed it would be.

> 
>   I think this is a problem any time you install cygwin as a local admin, then
> join a domain, then try and use it as a domain user, although I may not have
> the precise order of events right there.  But I'm certain the key to this
> problem is in the perm changes that get applied when you join a domain.

That could potentially cause problems, but I can't say for sure.. No 
machines with which to test.

> 
>   Simplest workaround would be to always join the machine to the domain first
> and install cygwin second.
> 

And to install as the domain administrator, not the local admin, 
otherwise you run into this problem, as the OP has done.

> 
> 
>    cheers,
>       DaveK



Chris
-- 

Spinning complacently in the darkness, covered and blinded by a blanket
of little lives, false security has lulled the madness of this world
into a slumber. Wake up! An eye is upon you, staring straight down and
keenly through, seeing all that you are and everything that you will
never be. Yes, an eye is upon you, an eye ready to blink. So face
forward, with arms wide open and mind reeling. Your future has
arrived... Are you ready to go?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/