This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: second exec channel cannot access windows share (open-ssh)
- From: "Larry Hall (Cygwin)" <reply-to-list-only-lh at cygwin dot com>
- To: cygwin at cygwin dot com
- Date: Fri, 04 Oct 2013 13:16:28 -0400
- Subject: Re: second exec channel cannot access windows share (open-ssh)
- Authentication-results: sourceware.org; auth=none
- References: <524E6D9C dot 3040809 at asperasoft dot com>
- Reply-to: cygwin at cygwin dot com
On 10/4/2013 3:26 AM, gaillard wrote:
Hi,
My company uses cygwin to enable client users to access an application through
open-ssh server via an ssh exec-channel. After the session connects fine, the
firstly created exec channel is able to access the mounted shares installed on
the box (in my test a Windows Server 2008 R2).
The issue comes when opening the second exec channel that is not able to access
the shares.
From the tests I made the second channel is not impersonating the user
correctly
since it happears the application process runs as "Local System" which would
explain the issue.
The open-ssh service is installed under a special user account that runs
with the
following settings in local security policy:
- adjust memory quotas for a process
- create a token object
- logon as a service
- replace a process level token
I tried to add this but without success:
- impersonate a client after authentication
I've also read the doc "Using Windows Security in Cygwin" but I'm unsure of the
correct diagnostic for the problem: wrong setting (do I need to use LSA
authentication)
or is it a bug?
Any advice will be appreciated.
If you have passwords on your shares (and it sounds like you do), then
your only real altrernative is the third option as described in the
Users Guide:
<http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd3>
--
Larry
_____________________________________________________________________
A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple