This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Public key authentication not working when I do "ssh localhost"


On 5/18/2013 10:59 PM, Naveen Narayanan wrote:
<snip>
There are a couple of issues as well: - The group is displayed as
mkgroup. - The user "navenara" does not exist in the localhost, I
guess. It was not displayed in "net user sshd". "navenara" is a Domain
account. Could this be causing the public key authentication issue?
<snip>

Yes.  Public key authentication requires switching the user context,
which requires the user running 'sshd', 'cyg_server' in this case, to have
certain Windows privileges to do this.  But this user, created by
ssh-host-config, is a local user, not a domain.  So it can't switch
to the domain user context.  Your choices are create a local account
and use that, create a domain account with privileges to run 'sshd',
or don't use public key authentication.  If you're interested in learning
more about how the Windows security model is used in Cygwin, see this
section in the Users Guide:

<http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview>

If you'd like to remove 'mkgroup' as your group, run
'mkgroup -l -d >/etc/group'.  That should grab your domain groups
so that you see the proper one for your user.

--
Larry

_____________________________________________________________________

A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]