This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: seteuid 1019: Operation not permitted
- From: "Larry Hall (Cygwin)" <reply-to-list-only-lh at cygwin dot com>
- To: cygwin at cygwin dot com
- Date: Sun, 16 Feb 2014 01:03:56 -0500
- Subject: Re: seteuid 1019: Operation not permitted
- Authentication-results: sourceware.org; auth=none
- References: <CAMhuX2DV8tHVuJpnziRBTh0qV7xAThDVUuVXaTYGArb3fVtgCw at mail dot gmail dot com> <CAMhuX2BdtykgR1dWQ3hW4gWVyU18S1O_1mz=JYKhV3NbjiC_4A at mail dot gmail dot com>
- Reply-to: cygwin at cygwin dot com
On 2/15/2014 7:08 PM, Evan Rowley wrote:
Everyone!
I finally figured out what the problem was here.
A group policy was in effect on the Windows machine. The group policy
is supposed to enforce the baseline security configuration as defined
by the Center for Internet Security (CIS) Benchmark for Windows
Servers. One particular Local User Security Policy setting was
disabled. It was "act as part of the operating system" - apparently
this is needed in order for SSHD in Cygwin to work.
Yeah, this is mentioned in the closely related FAQ entry
<http://cygwin.com/faq.html#faq.using.sshd-in-domain>. The need for
it is also spelled out in the
/usr/share/csih/cygwin-service-installation-helper.sh script used by
/usr/bin/ssh-host-config. I know, it's not real
obvious that this is a requirement when you're installing or why. And
when it's not unavailable the complaints that ensue aren't that easy
to immediately track back to this security policy.
I have this vague recollection that this particular policy is only
necessary to support public key authentication, though I didn't test that.
Regardless, that's small consolation if public key authentication is what
you're looking for. ;-)
--
Larry
_____________________________________________________________________
A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple