This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Cygwin ssh session privileges differ from console privileges?


Hi,

I am having a problem with the privileges on a Cygwin ssh session. It
seems as though the Cygwin ssh session does not have all the
privileges of a console session, logged in as the same user. This is
happening on cygwin v1.5.10-3 under Win2K SP4. The openssh version is
v3.9p1-1.

The problem occurred when I attempted to run Oracle sqlplus remotely,
for the purpose of doing database administration. Locally, there was
no problem running in either a command prompt or a cygwin prompt (the
same mechanism of course):

Administrator@myserver ~
$ id -a
uid=500(Administrator) gid=513(None) groups=0(root),513(None),544(Administrators),545(Users),1002(ORA_DBA)


 Administrator@myserver ~
 $ sqlplus /nolog

SQL*Plus: Release 9.2.0.1.0 - Production on Thu Sep 2 20:08:42 2004

Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

 SQL> connect / as sysdba
 Connected.
 SQL>

However, the same is not true of the remote Cygwin ssh session:

 Administrator@mydesktop ~
 $ ssh Administrator@myserver
 Last login: Thu Sep  2 20:20:14 2004 from mydesktop

Administrator@myserver ~
$ id -a
uid=500(Administrator) gid=513(None) groups=0(root),513(None),544(Administrators),545(Users),1002(ORA_DBA)


 Administrator@myserver ~
 $ sqlplus /nolog

SQL*Plus: Release 9.2.0.1.0 - Production on Thu Sep 2 20:40:29 2004

Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

 SQL> connect / as sysdba
 ERROR:
 ORA-01031: insufficient privileges

I would expect that they would be the same, but understand that there
might be quirks associated with sshd launching a login session as the
authenticated user. Is there a plausible explanation as to why there
is a difference?

Please note, I attempted this both with and without Cygwin sshd
privilege separation enabled. It made no difference.

Regards,
Shaddy

P.S. I am digest subscribed, but prefer direct replies. Thanks in
advance.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]