DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 3F9203858C62
MIME-Version: 1.0
References: <CAOv4OrV3WuSDqvjzimc3VEEDzPUnkW06X_W0oEyVqFuyA2fF5Q AT mail DOT gmail DOT com>
In-Reply-To: <CAOv4OrV3WuSDqvjzimc3VEEDzPUnkW06X_W0oEyVqFuyA2fF5Q@mail.gmail.com>
From: Todor Ivanov <t DOT i DOT ivanov AT gmail DOT com>
Date: Mon, 28 Nov 2022 14:43:23 +0200
Message-ID: <CAOv4OrXwOJfmR_Bgyg7XDxzQS-jAQ+OQ9iRkbU2E2d9u1tgO9w@mail.gmail.com>
Subject: Subversion not saving encrypted password after update of cygwin 32bit
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

       Hello,

       We upgraded our cygwin 32 bit install on a Windows 2008 R2 server,
because we needed the latest python stuff and this also upgraded all core
packages, sshd (cygwin), subversion included. What changed is the svn auth
caching. As this is a remote machine, we login via ssh + key (passwordless)
to its sshd cygwin server and use svn commands from there. Now if we login
using ssh + key, the password does not get saved and asks every time.
However if we login via ssh + password the password is saved in an
encrypted way using windows-cryptoapi. We investigated a little bit and see
that profiles have different attributes when using a key and a password,
i.e:

With key:
uid=1002(ouruser) gid=513(None) groups=513(None),66048(LOCAL),66049(CONSOLE
LOGON),4(INTERACTIVE),15(This Organization),545(Users),11(Authenticated
Users),197624(bus-beta),197625(dev-beta),1010(HelpLibraryUpdaters),0(root),559(Performance
Log Users),555(Remote Desktop Users),405504(High Mandatory Level)

With password:
uid=1002(ouruser) gid=513(None) groups=513(None),114(Local account and
member of Administrators
group),197624(bus-beta),197625(dev-beta),1010(HelpLibraryUpdaters),0(root),559(Performance
Log Users),555(Remote Desktop
Users),545(Users),4(INTERACTIVE),66049(CONSOLE LOGON),11(Authenticated
Users),15(This Organization),113(Local
account),4095(CurrentSession),262154(NTLM Authentication),405504(High
Mandatory Level)

After the upgrade the following packages could not be downloaded from any
of the listed mirrors. I also googled and browsed the repositories, but
they seem to be missing and show in cygcheck as "Incomplete":

libpq
libppl-devel
libnetcdf6
libguile12
libbotan-devel

 Simple authentication works for ssh+key, but I really try to avoid this. I
also tried recreating the .subversion folder, which did not change
anything.  I did a strace and did not find any error stuff, so I don't know
how to proceed further. Your tips and guidelines are very welcome.

Kind regards,
Todor

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple