Cygwin ssh session privileges differ from console privileges?

Shaddy Baddah shaddy_baddah@hotmail.com
Thu Sep 2 14:11:00 GMT 2004


Hi,

I am having a problem with the privileges on a Cygwin ssh session. It
seems as though the Cygwin ssh session does not have all the
privileges of a console session, logged in as the same user. This is
happening on cygwin v1.5.10-3 under Win2K SP4. The openssh version is
v3.9p1-1.

The problem occurred when I attempted to run Oracle sqlplus remotely,
for the purpose of doing database administration. Locally, there was
no problem running in either a command prompt or a cygwin prompt (the
same mechanism of course):

  Administrator@myserver ~
  $ id -a
  uid=500(Administrator) gid=513(None) 
groups=0(root),513(None),544(Administrators),545(Users),1002(ORA_DBA)

  Administrator@myserver ~
  $ sqlplus /nolog

  SQL*Plus: Release 9.2.0.1.0 - Production on Thu Sep 2 20:08:42 2004

  Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.

  SQL> connect / as sysdba
  Connected.
  SQL>

However, the same is not true of the remote Cygwin ssh session:

  Administrator@mydesktop ~
  $ ssh Administrator@myserver
  Last login: Thu Sep  2 20:20:14 2004 from mydesktop

  Administrator@myserver ~
  $ id -a
  uid=500(Administrator) gid=513(None) 
groups=0(root),513(None),544(Administrators),545(Users),1002(ORA_DBA)

  Administrator@myserver ~
  $ sqlplus /nolog

  SQL*Plus: Release 9.2.0.1.0 - Production on Thu Sep 2 20:40:29 2004

  Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.

  SQL> connect / as sysdba
  ERROR:
  ORA-01031: insufficient privileges

I would expect that they would be the same, but understand that there
might be quirks associated with sshd launching a login session as the
authenticated user. Is there a plausible explanation as to why there
is a difference?

Please note, I attempted this both with and without Cygwin sshd
privilege separation enabled. It made no difference.

Regards,
Shaddy

P.S. I am digest subscribed, but prefer direct replies. Thanks in
advance.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/



More information about the Cygwin mailing list