This is the mail archive of the cygwin mailing list for the Cygwin project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: sshd client can't access remote shares

On Fri, 20 Jan 2006, Steve Briggs wrote:

> I can't access network shares when I connect via sshd.

The knee-jerk response for this is usually "read the FAQ" (i.e.,
<>).  But you seem to
have covered most of it in your email.

> My /etc/password file has only domain accounts:
> Steve:unused_by_nt/2000/xp:14896:544:Steve,U-FDE\Steve,S-<blah>-4896:/temp:/bin/bash
> I've given the Win2kPro "SYSTEM" user rights to:
>    Act as part of the OS
>    Create a token object
>    Increase quotas
>    Replace a process level token
> When I'm logged into Windows as FDE\Steve:
>   DOS>net use s: /d
>   DOS>cd C:\cygwin\bin
>   DOS>SET CYGWIN=ntsec
>   DOS>bash
>   bash>net use s: '\\rem_mach\rem_share'
> this works as one would expect
> When I:
>   DOS>net use s: /d
>   DOS>cd C:\cygwin\bin
>   DOS>SET CYGWIN=ntsec
>   DOS>bash
>   bash>cygrunsrv -I sshd -p /usr/sbin/sshd -A -d
I hope this is a typo (though your sshd output indicates that it isn't).
First off, the options should be "-a -D" (otherwise sshd will detach, and
won't be under cygrunsrv's control).  Also, the "-d" option will cause
sshd to exit after the first connection.

>   bash>cygrunsrv -S sshd
> then login as Steve via sshd using password authentication
> (I have NOT set up authentication with keys), it says:
>   "debug1: permanently_set_uid 14896/544"
> It lets me login as Steve with my password, but
>   bash>"net use s: '\\rem_mach\rem_share'" immedidately gives:
>   "System error 1312 has occured."

"net helpmsg 1312" shows that this error means that "A specified logon
session does not exist. It may already have been terminated."

> This also happens with
>   bash>net use s: '\\rem_mach\rem_share' /user:Steve
> but
>   bash>net use s: '\\rem_mach\rem_share' '/user:FDE\Steve' mypassword
> works (seems to be the only combination that does work).
> It doesn't seem to matter if I ssh in from a remote machine or locally
> (bash>ssh localhost).

You should also be able to issue a "net use s: '\\rem_mach\rem_share'
/user:Steve '*'", which will prompt you for a password.

> I thought that if I used password authentication with sshd, that the
> process had all the correct user tokens to access shares on the domain?

This should be correct.

> If I don't run sshd as SYSTEM, but as Steve (with admin rights on the
> domain and local machine)
>   bash>/usr/sbin/sshd -d
> I can login as Steve via ssh and the net use command works.

Right, because you're already properly authenticated with Windows.  But
the same should happen when running sshd as a SYSTEM service and

> I need for multiple users to ssh (actually scp) in and access their home
> directories on a remote share. They can give passwords, but is
> *multiple* users.
> Any ideas why remote access doesn't work with sshd and password
> authentication?  I saw several mentions of this problem in the archives,
> but I think I've tried all the suggestions given.

I wonder if this is related to the recent WindowStation changes in
Cygwin's fhandler_console...

> I've attached the output of "cgycheck -svr".

Which looks normal, BTW -- the only weird thing is that the userid for
"Steve" is 4896, not 14896 as you indicated in your /etc/passwd quote

> Any ideas what to try next?

If you're willing to build Cygwin from CVS, try commenting out lines
149-151 of and see if that makes your problem go away.
That should tell us if my guess is correct and the WindowStation changes
were the culprit.

      |\      _,,,---,,_ |
ZZZzz /,`.-'`'    -.  ;-;;,_		Igor Peshansky, Ph.D. (name changed!)
     |,4-  ) )-,_. ,\ (  `'-'		old name: Igor Pechtchanski
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"Las! je suis sot... -Mais non, tu ne l'es pas, puisque tu t'en rends compte."
"But no -- you are no fool; you call yourself a fool, there's proof enough in
that!" -- Rostand, "Cyrano de Bergerac"

Unsubscribe info:
Problem reports:

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]