X-Spam-Check-By: sourceware.org
To: cygwin AT cygwin DOT com
From: Brian Kasper <kasper AT aero DOT org>
Subject:  Re: sshd exits during login attempt on WinXP 2003 x64 -- even with   sshd running as service
Date:  Fri, 09 Feb 2007 10:47:40 -0800
Lines: 30
Message-ID: <eqifkd$p0i$1@sea.gmane.org>
References:  <eqadt0$54d$1 AT sea DOT gmane DOT org> <20070206175733 DOT GA26300 AT calimero DOT vinschen DOT de> <eqdh7k$bcd$1 AT sea DOT gmane DOT org> <20070208085935 DOT GX27843 AT calimero DOT vinschen DOT de>
Mime-Version:  1.0
Content-Type:  text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding:  7bit
User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
In-Reply-To: <20070208085935.GX27843@calimero.vinschen.de>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Thanks for pointing that out -- I'm really not very conversant with 
Windows security.

While logged in as Administrator, I tried adding sshd_server to the list 
of users with the "Act as part of the operating system" privilege 
(SeTcbPrivilege), but for some reason on my system both the "Add User or 
Group" and "Remove" buttons are greyed-out.

Looks like this is a Windows Security configuration issue, not a Cygwin 
issue; I'll keep trying to resolve it.

Thanks for taking time to respond.

-Brian

Corinna Vinschen wrote:
[snip]
> 
> Looks like the Tcb privilege ("Act as part of the operating system")
> is missing for the sshd_server user.
> 
>> I don't know how to activate output to /var/log/sshd.log -- would that
>> help to diagnose this problem?
> 
> No.  You don't have to activate anything.  If output is created,
> it will go to sshd.log.  There's no magic.
> 
> 
> Corinna
> 


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/