This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: Public key authentication not working when I do "ssh localhost"
- From: "Larry Hall (Cygwin)" <reply-to-list-only-lh at cygwin dot com>
- To: cygwin at cygwin dot com
- Date: Sat, 18 May 2013 23:28:56 -0400
- Subject: Re: Public key authentication not working when I do "ssh localhost"
- References: <CAO6Meo_rcDOdU_41k0BQOq5J2Tk0RWpvvSiLMi5bSWWHnB9X0Q at mail dot gmail dot com>
- Reply-to: cygwin at cygwin dot com
On 5/18/2013 10:59 PM, Naveen Narayanan wrote:
<snip>
There are a couple of issues as well: - The group is displayed as
mkgroup. - The user "navenara" does not exist in the localhost, I
guess. It was not displayed in "net user sshd". "navenara" is a Domain
account. Could this be causing the public key authentication issue?
<snip>
Yes. Public key authentication requires switching the user context,
which requires the user running 'sshd', 'cyg_server' in this case, to have
certain Windows privileges to do this. But this user, created by
ssh-host-config, is a local user, not a domain. So it can't switch
to the domain user context. Your choices are create a local account
and use that, create a domain account with privileges to run 'sshd',
or don't use public key authentication. If you're interested in learning
more about how the Windows security model is used in Cygwin, see this
section in the Users Guide:
<http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview>
If you'd like to remove 'mkgroup' as your group, run
'mkgroup -l -d >/etc/group'. That should grab your domain groups
so that you see the proper one for your user.
--
Larry
_____________________________________________________________________
A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple