The current cyglsa-config script does not detect a failure in regtool that
cannot read the LSA Authentication Packages registry entry,
$ regtool get
/HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Lsa/Authentication\
Packages
Error (2): The system cannot find the file specified.
$ cat
/proc/registry/HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Lsa/Authentication\
Packages
$ reg query 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa' /v
'Authentication Packages'
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Authentication Packages REG_SZ msv1_0
As a consequence, cyglsa-config drops "msv1_0" from the key value because it
succeeds in setting it with the wrong set of values.
(I am not sure why my entry has type REG_SZ while I see online posts mentioning
type REG_MULTI_SZ).
Whether regtool and cyglsa-config are fixed or not, I am suggesting to document
the side effects resulting from the corrupt entry value or from the possible
bugs in the added DLL. I spent many hours trying to find the cause of these
effects. The suggested documentation addition is attached.
-- Index: ntsec.sgml
===================================================================
RCS file: /cvs/src/src/winsup/doc/ntsec.sgml,v
retrieving revision 1.24
diff -d -u -r1.24 ntsec.sgml
--- ntsec.sgml 27 May 2009 02:30:42 -0000 1.24
+++ ntsec.sgml 27 Jan 2010 20:14:26 -0000
@@ -747,6 +747,19 @@
deinstallation of the cygwin LSA authentication DLL is just a minor
inconvenience compared to that...</para>
+<para>The following are possible side effects of installing a defective LSA
DLL or incomplete implementations in the regtool utility and cyglsa-config
script. To revert the cyglsa-config installation, set the "Authentication
Packages" registry entry to a REG_SZ or REG_MULTI_SZ value of "msv1_0".</para>
+
+<itemizedlist spacing="compact">
+<listitem><para>Windows startup hangs for few minutes with the "Starting up"
panel before showing the user login panel.</listitem></para>
+<listitem><para>Network drives and USB devices do not get
connected.</listitem></para>
+<listitem><para>Minimized windows are not shown on the
taskbar.</listitem></para>
+<listitem><para>Cut-and-paste does not work across windows.</listitem></para>
+<listitem><para>Windows explorer (explorer.exe) and Internet explorer
(iexplore.exe) silently die.</listitem></para>
+<listitem><para>Clicking logged messages in the event viewer does not bring a
window with details.</listitem></para>
+<listitem><para>Device Manager does not show windows with driver
details.</listitem></para>
+<listitem><para>Attempts to start the Workstation service results in an error
message pointing to an "unknown" LSA authentication package.</listitem></para>
+</itemizedlist>
+
<para>Nevertheless, this is already a lot better than what we get by
using <command>NtCreateToken</command>, isn't it?</para>
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
