hi, Thursday, August 10, 2006, 9:58:31 AM, "Corinna Vinschen" wrote:
>> >> I am running sshd having set up the sshd service using ssh-host-config >> >> with >> >> privilege separation and with sshd running as a server owned by the local >> >> sshd_server user. >> >> All is working fine and I can log in using my keys without the need for >> >> passwords or without keys and using passwords. >> >> My problem is that if I then try and run some processes after logging in >> >> (specifically MPI ones) the system thinks I am the local sshd_server user >> >> and not the person I wish to be. >> >> >> Any ideas how I can get sshd working such that after log in I am really >> >> the >> >> user I wish to be would be much appreciated. >> >> > Patience. ;-) >> >> i just want to add one more detail: i have the same setup with sshd. >> plus, i use EFS (encrypting file system) on the sshd box. now EFS >> encrypts files ONLY for the user that writes them (and for so called >> recovery agents, but they are set up globally and all EFS files are >> decryptable for them), but not for all other users that may have >> access to the files (based on the their file privileges). >> >> so when i'm user X and log in through sshd, write some file and then >> log on locally though a console, i can't read my own file, because the >> file was encrypted for SvcCOPSSHD (the sshd user in my case). >> >> i, too, would much appreciate a solution :) > There's a working workaround: Use password login. that's what i want to avoid for practical reasons. > Otherwise only the subauthentication stuff mentioned in > http://cygwin.com/ml/cygwin-developers/2006-07/msg00013.html as Larry > already pointed out will allow what you want. There's really no gain in > repeating scenarios in which the current technique doesn't work. The > drawbacks are known for years, really. ok. did i understand correctly that subauth is not yet part of the regular cygwin distribution? or is it and has to be installed and enabled somehow? -- /chris/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
