This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Where can I find the official cygwin openssh documentation?


On 12/2/2012 2:43 PM, David T-G wrote:
Christopher, et al --

...and then Christopher Faylor said...
%
% On Sun, Dec 02, 2012 at 11:50:08AM -0500, Mike Richardson wrote:
% >I'm trying to set up an openssh server on Windows using cygwin.  I
...
%
% The "recommended" procedure is to follow the defaults when running those
% scripts unless you have specific needs which require something
% different.

I don't know that I need anything different, but I've had trouble with
sshd ever since Vista.  I'm still nailing down the details for a proper
trouble report, but I'm currently wrestling with a Win 7 laptop and have
only gotten as far as running as my privileged "root" account -- which
means I can only log in as root rather than switching.

If you're having trouble with switching the user context, it sounds to me like you're running 'sshd' as 'root' and that's not going to allow you to change user context by default. Details on what's happening in Windows to permit this can be found in the Users Guide here:

<http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview>

So, you're left with 2 choices:

  1. Rework the permissions of your 'root' user to match that of
     XP's 'SYSTEM' user or the 'cyg_server' user that gets created
     when you run 'ssh-host-config' on post XP OSs plus change all
     the ownerships and permissions on various files and directories
     that 'sshd' accesses to be either 'SYSTEM' or 'cyg_server' (see
     'ssh-host-config' for details).

  2. Just blow away your installation, reinstall, and run 'ssh-host-config'
     and, optionally, 'ssh-user-config', to get things set up properly.

Either should work, though (1) opens a potential security risk by creating
another user on the system with elevated rights.  It also requires you to
understand and configure more yourself.

--
Larry

_____________________________________________________________________

A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]