Non-privileged use can't logon

[Corinna Vinschen]

On Mar 11 18:19, Max Rockliff wrote:
> Hi,
> 
> I'm raising this question again, after having removed CYGWIN SSHD and
> resinstalled.
> 
> I am unable to execute an SSH <user>@localhost.  I am prompted for the
> password and successfully logged on, only to receive an error message (see
> below) and the session closed immediately.
> 
> Error Message:
> 1 [main] sshd 8284 C:\cygwin\usr\sbin\sshd.exe: *** fatal error - unable to
> load C:\Windows\system32\userenv.dll, Win32 error 1114
> Connection to localhost closed.

We saw this error on and off for a couple of years and it was never
quite clear what the underlying problem is, given that we have no way to
check what the DLLs are doing.  In some cases changing cyg_server to a
domain account fixed the problem, but that's obviously not your problem.

What's new is the fact that it affects userenv.dll.  This DLL wasn't
used by Cygwin until 1.7.34, which introduced a way to merge the user's
Windows environment after switching the user context.

> My Cygwin installation is on a Vista Home Premium (yes I know it's an old
> OS), but the version I've been running for the past 3 years worked
> perfectly.
> 
> The most interesting observation is that the logon works *if* I make the
> user a member of the local Administrators group.
> 
> The Win32 1114 is a failure to initialise the dll.  The observed fact that
> logging on with an administrator user account works, suggests that it is a
> Windows privilege problem.  However, I would have thought that the privilege
> should rest with the SSHD service account, cyg_server, which is an
> Administrator and nothing to do with the user account trying to logon
> through the SSH command.

Not quite.  The environment merge occurs inside the user process started
from sshd, so only this process calls functions from userenv.dll.

Are you usually logging in with password or with pubkey authentication?

Is that 32 bit or 64 bit Vista?  If the latter, with 32 bit or 64 bit
Cygwin?

What does `icacls c:/Windows/System32/userenv.dll' print?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20150311/47af7455/attachment.sig>