Windows Server 2012R2 64bit and 32bit Cygwin sshd

[Corinna Vinschen]

On Aug 19 13:37, Achim Gratz wrote:
> I've run strace on both the 32bit and the 64bit sshd and here's the
> difference between the two, right after sshd gets an exception 5 from the DC:
> 
> 32bit
> --- Process 5820, exception 00000005 at 75BF1D4D
> 43239 4372793 [waitproc] sshd 2400 pinfo::maybe_set_exit_code_from_windows:
> pid 5820, exit value - old 0x0, windows 0x5, cygwin 0x8000500
> 
> 64bit
> --- Process 484, exception 00000005 at 00007FFA4F5D5BF8
>  9907 4522411 [main] sshd 484 seterrno_from_win_error:
> .../cygwin-snapshot-20140819-1/winsup/cygwin/sec_auth.cc:263
> windows error 5

This is a call to the Win32 API call NetUserGetGroups creating an
exception due to an "access denied".  The difference between 32 and 64
bit is probably a result of the differences in exception handling, and
given that an ExceptionCode 5 will be ignored by Cygwin's exception
handler, it's probably the next handler in the chain.

Are you running sshd under a local cyg_server account or under a domain
cyg_server account?  Is it possible that this is a local cyg_server
account, and as a non-domain account actually gets an "access denied"
when trying to request AD user information?

If your cyg_server is a local account I'd suggest to try with an
AD account per https://cygwin.com/faq/faq.html#faq.using.sshd-in-domain

Other than that I have a funny idea how to workaround this problem from
inside Cygwin.  If you want to give it a try, I'll send you a pointer
to a 32 bit DLL via PM.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20140819/f0b4fa9f/attachment.sig>