This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Struggling to setup sshd with Windows Vista


> QUOTE:
>
> You've got some indeterminate state of brokenness here. Delete the sshd
> user, delete the service, delete /var/empty, delete the sshd config
> files, recreate known good passwd and group files, and then just run
> "ssh-host-config -y" and let it create everything correctly. That is
> all you should ever need to do. Messing with things manually just leads
> to trouble unless you understand what's going on.
>
> ENDQUOTE
>
> Let me just make sure I know what you are telling me to do, since I
> already did this and it didnt make a difference.  As an administrator,
> I:
> 1. Delete the sshd user -- Ok I manually edited the /etc/passwd file
> and deleted this user
> 2. Delete the service - Ok cygrunsrv -R sshd
> 3. Delete the sshd config files - rm /etc/ssh*config, rm /etc/ssh*pub
> rm /etc/ssh*key
> 4. Recreate known good passwd and group files - I never modified the
> /etc/group file.  I recreated the /etc/passwd file I had prior by just
> removing the sshd user.  Is there something else I should be doing?
> 5. ssh-host-config -y  -- End result is the same. When I do a
> net start sshd
> $ net start sshd
> System error 1069 has occurred.
>
> The service did not start due to a logon failure.
>
> /var/log/sshd.log reveals:
> $ more sshd.log
> Privilege separation user sshd does not exist
>
>
> So how do I create the sshd user? Is there anything I am missing??
> This is my first time running into problems.  Ive repeated this
> process on XP boxes like 20 times without incidence.  Its even easier
> on Ubuntu.  However getting this up and running on Vista is a fiasco.
>


I stand corrected.  I am finding a few differences with the described
setup above (but the service fails to start):
I know have sshd and sshd_server users.  The /etc/group file is unchanged:

$ more /etc/passwd
SYSTEM:*:18:544:,S-1-5-18::
Administrators:*:544:544:,S-1-5-32-544::
Administrator:unused_by_nt/2000/xp:500:513:U-Darien\Administrator,S-1-5-21-22494
56148-3830241392-4138796912-500:/home/Administrator:/bin/bash
Guest:unused_by_nt/2000/xp:501:513:U-Darien\Guest,S-1-5-21-2249456148-3830241392
-4138796912-501:/home/Guest:/bin/bash
IUSR_NMPR:unused_by_nt/2000/xp:1000:513:IUSR_NMPR,U-Darien\IUSR_NMPR,S-1-5-21-22
49456148-3830241392-4138796912-1000:/home/IUSR_NMPR:/bin/bash
klal:unused_by_nt/2000/xp:1001:513:U-Darien\klal,S-1-5-21-2249456148-3830241392-
4138796912-500:/home/klal:/bin/bash
sshd:unused_by_nt/2000/xp:1002:513:sshd privsep,U-Darien\sshd,S-1-5-21-224945614
8-3830241392-4138796912-1002:/var/empty:/bin/false
sshd_server:unused_by_nt/2000/xp:1003:513:sshd server account,U-Darien\sshd_serv
er,S-1-5-21-2249456148-3830241392-4138796912-1003:/var/empty:/bin/false

Also the ownership of the /var/empty directory has changed:
drwxr-xr-x+  2 sshd_server Administrators    0 Dec 23 14:02 .

Should either the sshd or sshd_server user be part of the Administrator group?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]