OpenSSH access to join the "Local Account" group

Tom Moore moortom@gmail.com
Thu Jan 28 20:28:00 GMT 2016


Hi,

I have a couple of Windows 7 machines set up as OpenSSH servers.  Both are
current with windows updates.   Both machines have identical cygwin
versions (2.0.4-1).  I have tried to make the sshd configuration identical
on these two machines, following the instructions on
http://www.howtogeek.com/howto/41560/how-to-get-ssh-command-line-access-to-windows7-using-cygwin


I have set up the client machines, generated rsa keys, and copied the
public keys into the authorized_keys file on the server.  Now I can log in
to both machines without providing a password.  So far so good.

When I ssh log in to machine A and check the id that I am logged in with, I get:

uid=197608(User) gid=197121(None) groups=197121(None),114(Local account and
member of Administrators
group),544(Administrators),545(Users),4(INTERACTIVE),66049(CONSOLE
LOGON),11(Authenticated Users),15(This Organization),113(Local
account),4095(CurrentSession),262154(NTLM Authentication),405504(High
Mandatory Level)

which is what I need in order to interact with some other resources on the
system.

When I ssh log in to machine B and check the id I get:

uid=197608(Owner) gid=197121(None) groups=197121(None),11(Authenticated
Users),66048(LOCAL),66049(CONSOLE LOGON),4(INTERACTIVE),15(This
Organization),545(Users),4095(CurrentSession),544(Administrators),405504(High
Mandatory Level)

However, if on my local client if I remove the private key from the .ssh
directory and ssh login again, this time having to specify a password, my
session will join the "Local account" group as I want.

Is there a configuration that I am missing in order to get machine B to
join the "Local account" group when I log in using an rsa key?  What could
be different between the two machines?

Cheers,

Tom

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list