This is the mail archive of the
mailing list for the Cygwin project.
Re: telnet to host running inetd, login always with SYSTEM account
- From: "kobi cohen arazi" <kobi at mivzak dot com>
- To: cygwin at cygwin dot com
- Cc: pechtcha at cs dot nyu dot edu
- Date: Sun, 11 Aug 2002 11:36:02 +0200
- Subject: Re: telnet to host running inetd, login always with SYSTEM account
>> Hi Guys,
>> If I need to send more
>> information, please let me know and I'll do it.
>> cygcheck.out is below.
>> uname -a is
>> CYGWIN_NT-5.0 DUFAY 1.3.12(0.54/3/2) 2002-07-06 02:16 i686 unknown
>> win2000, p-3, 256 MB memory.
>> using bash.
>> inetd, sshd installed as services.
>> I have done mkpasswd -l >> /etc/passwd
>> and mkgroup -l >> /etc/group
>> When trying to login using telnet or ftp to my localhost,
>> No matter what is the login name, It always login as SYSTEM.
>> I cannot understand what went wrong, that is because it used to work,
>> but one of the cygwin upgrading probably mess it up.
>> Looking at /etc/passwd and /etc/group , I can see that everything is OK.
>> Why the login is always on SYSTEM account even when trying to login
>> with different username ?
>> Is it configurable someplace ?
>> Any help will be appreciated.
>> Thanks a lot.
>> Keep the good job,
>Is your CYGWIN environment variable set in the system environment or the
>user environment? I have a feeling the CYGWIN of the telnetd process
>doesn't include "ntsec"...
Thanks for your quick reply.
I have discover the following after playing around with /etc/passwd
and /etc/group :
when making the following:
mkpasswd -l > /etc/passwd
mkpasswd -d >> /etc/passwd
mkgroup -l > /etc/group
mkgroup -d >> /etc/group
everything is fine concerning the inetd, i.e. I can telnet and ftp to
the machine running the inetd . (By the way CYGWIN=ntsec is set as
But : the problem is when going to a network directory on our company
domain (recall that I am using win2000 and having a network mapping to
other computers on the local net), and creating a file, the owner of
the file is written as SID. (I can see that using the windows explorer
...). Using ls -lna , I can see that my group is 513 (NONE).
That kind of owner SID makes lots of problems, because I cannot chmod
of that file as if I am not the owner of that file. Same is happening
when using the windows explorer when trying to look at the security
When creating file on my local NTFS drive, I am the owner, but looking
at the security tab of windows explorer, I can see the SID-513 is also
Reading the FAQ and the "NT Security and the ntsec usage" document, I
followed the instructions and did the following:
In 'passwd' file I have changed my group from 513 (none) to 547 (Power
I have deleted the SID as well as 'domain\myname' as Instructed in the file (It may be
the cause of the problem!)
And in 'group' file, I have deleted the SID of the 547 group (Power
users) as well.
Now, When creating a file on a network directory (which I have a
*full* permissions in it), I can see that I am the owner and I can do
*anything* with that file including see my the security tab in the win
explorer or chmod of that file. However, Telnet to the inetd process
doesn't work well. (Recall that I have deleted my SID and 547 group's
SID). When telneting, The users name logon is *always* SYSTEM. It
seems that is cannot obtain my SID, and the result is login with the
SYSTEM account !
I guess something is wrong with the way I've handle it. If anyone can
see what's is wrong and help me, I'll be grateful.
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html