This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: Seteuid "operation not permitted" error when using LSA for sshd
- From: David Koppenhofer <david at coffeefish dot org>
- To: cygwin at cygwin dot com
- Date: Thu, 2 Aug 2012 18:39:40 +0000 (UTC)
- Subject: Re: Seteuid "operation not permitted" error when using LSA for sshd
- References: <CAKXb5pJZX7kaz12C1E-GEk7ws7oc2xAxQmr8EaND3KZ3_GzCmg@mail.gmail.com> <CAKXb5pJjCBvbj1ZfU8WiEohz2QqW+edUi1Dz6anhELTk2wuZ_g@mail.gmail.com> <CAKXb5p+ETsym1MtM3Ev964XN3aTLNMabSfPkSj0KEHE53GGZeg@mail.gmail.com> <20120529125057.GD12040@calimero.vinschen.de> <loom.20120801T202919-35@post.gmane.org> <20120802091119.GA12772@calimero.vinschen.de>
> Why did you install cyglsa64 from the old snapshot? The changes to
> cyglsa are supposed to be in the Cygwin 1.7.16 package anyway.
Because I was grasping for straws, and didn't know the fix was in the current
package.
> > I rebooted the server, made sure the sshd service was running, but I still
> > receive the "sshd: PID 3064: fatal: seteuid 1000: Operation not permitted"
error.
>
> Does the service account have TCB privileges? That's a hard requirement
> for the user switch.
Ah ha! The service account does not have the "Act as part of the operating
system" permission.
However, I ended up asking the network admin to give "Create a token object" to
the service account. Since key authentication started working after that, I'll
just leave things as they are.
Thanks for your help.
David
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple