X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; 	charset="us-ascii"
Subject: ssh impersonation
Date: Thu, 30 Oct 2008 12:05:30 -0700
Message-ID: <AFB622BB993C1B4AAD830CF147995DD780588E@CAVS1.sanmateo.corp.akamai.com>
From: "Egerton, Jim" <jegerton AT akamai DOT com>
To: <cygwin AT cygwin DOT com>
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id m9ULT8hp004536

Hello,

	I've installed cygwin-1.25-15 on Server 2008 and seem to be
seeing issues related to sshd's impersonation of a public key
authenticated user.   Google turned up a few threads on this subject:

http://www.cygwin.com/ml/cygwin/2006-07/msg00577.html
http://cygwin.com/ml/cygwin/2007-01/msg00651.html

In addition to the Visual Studio 2008 linker problem, I also run into
problems accessing WMI from a ssh session - things like tasklist simply
hang and the event log DCOM messages looks like an authentication issue.
As suggested in one of the threads, running sshd as the desired logon
user fixes things, but that makes it difficult for multiple users to
share a "build" box.

It's been a while since these threads were posted; has anyone come up
with any workarounds besides using password authentication or use the
same sshd account for user logon and sshd service?    Larry mentioned
some changes in Cygwin 1.7 - any chance it's a small enough change that
I can put it into sshd until Cygwin 1.7 is released?   

thanks for your time!
jim

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/