This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

RE: Non-privileged use can't logon


Ok.  Let's see if I can answer all your questions.

I'm logging on with a password
I'm running 32bit Vista Ultimate - Windows6.06.6002, Service Pack 2 (sorry, I think I said Home Premium before)
I installed the 32 Cygwin using setup-x86.exe
icacls c:/Windows/System32/userenv.dll produces the following
	c:/Windows/System32/userenv.dll NT SERVICE\TrustedInstaller:(F)
              	           		  BUILTIN\Administrators:(RX)
                       	       	  NT AUTHORITY\SYSTEM:(RX)
                          	        BUILTIN\Users:(RX)

For comparison the following is the output from an ls -l command on the same file, but it appears o be similar.
	$ ls -l c:/Windows/System32/userenv.dll
	-rwxr-xr-x 3 Max None 108544 Apr 11  2009 c:/Windows/System32/userenv.dll

The local Windows account I'm using is call 'st' and it is a member of the Users group (which appears to have Read eXecute privilege, exactly the same as the local group, Administrators.  Hmmmm...

Any ideas?

Thx
Max

-----Original Message-----
From: cygwin-owner@cygwin.com [mailto:cygwin-owner@cygwin.com] On Behalf Of Corinna Vinschen
Sent: Wednesday, 11 March 2015 7:17 PM
To: cygwin@cygwin.com
Subject: Re: Non-privileged use can't logon

On Mar 11 18:19, Max Rockliff wrote:
> Hi,
> 
> I'm raising this question again, after having removed CYGWIN SSHD and 
> resinstalled.
> 
> I am unable to execute an SSH <user>@localhost.  I am prompted for the 
> password and successfully logged on, only to receive an error message 
> (see
> below) and the session closed immediately.
> 
> Error Message:
> 1 [main] sshd 8284 C:\cygwin\usr\sbin\sshd.exe: *** fatal error - 
> unable to load C:\Windows\system32\userenv.dll, Win32 error 1114 
> Connection to localhost closed.

We saw this error on and off for a couple of years and it was never quite clear what the underlying problem is, given that we have no way to check what the DLLs are doing.  In some cases changing cyg_server to a domain account fixed the problem, but that's obviously not your problem.

What's new is the fact that it affects userenv.dll.  This DLL wasn't used by Cygwin until 1.7.34, which introduced a way to merge the user's Windows environment after switching the user context.

> My Cygwin installation is on a Vista Home Premium (yes I know it's an 
> old OS), but the version I've been running for the past 3 years worked 
> perfectly.
> 
> The most interesting observation is that the logon works *if* I make 
> the user a member of the local Administrators group.
> 
> The Win32 1114 is a failure to initialise the dll.  The observed fact 
> that logging on with an administrator user account works, suggests 
> that it is a Windows privilege problem.  However, I would have thought 
> that the privilege should rest with the SSHD service account, 
> cyg_server, which is an Administrator and nothing to do with the user 
> account trying to logon through the SSH command.

Not quite.  The environment merge occurs inside the user process started from sshd, so only this process calls functions from userenv.dll.

Are you usually logging in with password or with pubkey authentication?

Is that 32 bit or 64 bit Vista?  If the latter, with 32 bit or 64 bit Cygwin?

What does `icacls c:/Windows/System32/userenv.dll' print?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]