NTsec permissions issue over inet

Bruce Dobrin dobrin@imageworks.com
Thu May 29 00:47:00 GMT 2003


Stephen,
I was about to ask the same question

If you find a solution,  PLEASE Post,  as I'm running out of workarounds,  I
have had no luck with nosmbntsec/smbntsec on any recent version of
cygwin/inetd.  I think the last time it worked was Cygwin1.3.10.
with smbntsec

dobrin@GABLE3:/home/dobrin> cd //margalo1/vol0/vol810
//margalo1/vol0/vol810: Permission denied.
dobrin@GABLE3:/home/dobrin> echo $CYGWIN
binmode tty ntsec smbntsec

and without:

dobrin@GABLE3:/home/dobrin> cd //margalo1/vol0/vol810
//margalo1/vol0/vol810: Permission denied.
dobrin@GABLE3:/home/dobrin> echo $CYGWIN
binmode tty ntsec nosmbntsec

>From the Local cygwin window:

dobrin@GABLE3:/home/dobrin> cd //margalo1/vol0/vol810
dobrin@GABLE3:/margalo1/vol0/vol810>

Bruce Dobrin


----- Original Message ----- 
From: "Igor Pechtchanski" <pechtcha@cs.nyu.edu>
To: "Banville, Stephen" <Stephen.Banville@sycamorenet.com>
Cc: <cygwin@cygwin.com>
Sent: Wednesday, May 28, 2003 1:25 PM
Subject: Re: NTsec permissions issue over inet


> On Wed, 28 May 2003, Banville, Stephen wrote:
>
> > Hi All,
> >         I'm  not sure if this issue has been detected. I have traversed
> > through the MANY probelm reports
> > and haven't been able to find any specifics on this problem.
> >
> > The problem:
> >
> > My system that I have Cygwin running on is a Windows 2000 platform. I
have
> > set the appropriate environment variable for ntsec
> > and have created the appropriate passwd and group files from my network
> > domain. When I telnet, rsh, or ftp into my Window 2k box
> > I get the following message:
> >
> > rsh 127.0.0.1 -l sbanville
> > Password:
> > Private Cygnus Operating System(c) 5.1.0
> > UNAUTHORIZED ACCESS STRICTLY PROHIBITED
> > mkdir: cannot create directory `//netapp0/sbanville$': File exists
> > -bash: //netapp0/sbanville$/.bash_profile: Permission denied
> >
> > My NT passwd information was created by running mkpasswd -l <domain> >
> > passwd; mkgroup -d <domain> > group
> >
> > I have set Cygwin ntsec tty.
> >
> > This used to work fine in older version of Cygwin.
> >
> > It appears that the Windows box is not happy with the SID that is
created
> > from mkpasswd.
> > I have compared the SID in my passwd entry to appropriate groups that I
> > bneed to belong to.
> > There is no inconsistencies.
> >
> > After loggin in I also checked the well known groups that I belong too,
> > which also turned out to be fine.
> >
> > Can someone please tell me what the problem could be.
> >
> > Here is the ouput from cygcheck -s -r
> >
> > NOTE: I also get the folowing meesage when running cygcheck:
> >
> > cygcheck: dump_sysinfo: GetVolumeInformation() failed: 5
> > cygcheck: dump_sysinfo: GetVolumeInformation() failed: 5
> > cygcheck: dump_sysinfo: GetVolumeInformation() failed: 5
> >
> > [cygcheck output snipped]
> > Steve
>
> Steve,
>
> For the future, please *attach* the cygcheck output to avoid generating
> false positives on message archive search.
>
> The "ntsec" setting only affects local drives, AFAIK.  You need to play
> with the "smbntsec" setting for remote shares.  Make sure the user you're
> logging in as is the domain user, not a local user with the same name.
> Also, there were issues with ssh authentication and access to network
> shares -- try playing with the "Allow service to interact with the
> desktop" checkbox in service properties.
>
> ISTR some discussion on issues with ClearCase MVFS (this is just a WAG,
> though).
> Igor
> -- 
> http://cs.nyu.edu/~pechtcha/
>       |\      _,,,---,,_ pechtcha@cs.nyu.edu
> ZZZzz /,`.-'`'    -.  ;-;;,_ igor@watson.ibm.com
>      |,4-  ) )-,_. ,\ (  `'-' Igor Pechtchanski
>     '---''(_/--'  `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!
>
> "I have since come to realize that being between your mentor and his route
> to the bathroom is a major career booster."  -- Patrick Naughton
>
>
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Problem reports:       http://cygwin.com/problems.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
>


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/



More information about the Cygwin mailing list