[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cygwin
Subject:    Re: sshd win2003 CYGWIN_NT-5.2 1.7.7(0.230/5/3)
From:       "Larry Hall (Cygwin)" <reply-to-list-only-lh () cygwin ! com>
Date:       2011-08-31 18:03:39
Message-ID: 4E5E777B.6060700 () cygwin ! com
[Download RAW message or body]

On 8/26/2011 11:08 AM, Drew Patten wrote:
> # ls -ld /var/empty
> drwxr-xr-x+ 1 cyg_server root 0 Mar  9 14:39 /var/empty
>
> # ls -ld /etc/ssh*
> -rw-r--r-- 1 ????????   root 1555 Aug 26 07:56 /etc/ssh_config
> -rw------- 1 cyg_server None  668 Mar  9 14:39 /etc/ssh_host_dsa_key
> -rw-r--r-- 1 cyg_server None  613 Mar  9 14:39 /etc/ssh_host_dsa_key.pub
> -rw------- 1 frtest     root  227 Aug 25 14:48 /etc/ssh_host_ecdsa_key
> -rw-r--r-- 1 frtest     root  178 Aug 25 14:48 /etc/ssh_host_ecdsa_key.pub
> -rw------- 1 cyg_server None  988 Mar  9 14:39 /etc/ssh_host_key
> -rw-r--r-- 1 cyg_server None  653 Mar  9 14:39 /etc/ssh_host_key.pub
> -rw------- 1 cyg_server None 1675 Mar  9 14:39 /etc/ssh_host_rsa_key
> -rw-r--r-- 1 cyg_server None  405 Mar  9 14:39 /etc/ssh_host_rsa_key.pub
> -rw-r--r-- 1 ????????   root 3185 Aug 26 07:56 /etc/sshd_config
>
> # cat /var/log/sshd.log
> /var/empty must be owned by root and not group or world-writable.

Have you compared ownerships between working and non-working machines?
Absent that (or assuming that doesn't yield results for some reason),
I'd recommend changing the owners of '/etc/ssh_config' and
'/etc/sshd_config' to 'cyg_server' (my group for these files is 'None'
but I doubt that's of any significance.)  Check '/var/empty' with
'getfacl'.  Mine reads this way:

$ getfacl /var/empty
# file: /var/empty
# owner: cyg_server
# group: root
user::rwx
group::r-x
group:SYSTEM:rwx
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

[prev in list] [next in list] [prev in thread] [next in thread]