This is the mail archive of the cygwin@sources.redhat.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

Re: SSHD setup


Matt Minnis wrote:
> Ok,
> 
> I have beat my head against this too much now.
> What are the permissions for '/usr/local/etc/ssh_host_key'?

Take a look into your /etc/sshd_config file. It seems to be
an older version which contains "HostKey /usr/local/etc/ssh_host_key"
by mistake. Change the value to the "HostKey /etc/ssh_host_key"
or comment it by prepending a `#' character.

> What about '/etc/ssh_host_dsa_key'?
> If they are too open it says that this is bad, but when they are more
> secure, then it can't load it because it is not allowed.
> what chmod values do I need?
> 
> /source/NT_Admin >sshd -d
> debug1: sshd version OpenSSH_2.3.0p1
> debug1: Seeding random number generator
> error: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> error: @         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
> error: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> error: Bad ownership or mode(0600) for '/usr/local/etc/ssh_host_key'.

The ownership has to be either the user which starts sshd or the
user with Cygwin uid 0. If you have read the ntsec documentation
you know that the Cygwin uid need not to be the same as the WinNT
RID.

The above mode is ok: 0600 = -rw------- which is recommended. So I
assume the ownership isn't correct.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                        mailto:cygwin@sources.redhat.com
Red Hat, Inc.
mailto:vinschen@redhat.com

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe@sourceware.cygnus.com


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]