Shankar Unni wrote:
Dave Korn wrote:

cygcheck.out: CYGWIN = 'ntsec'
  Perhaps you need smbntsec as well?

Thanks! That did it..

Alas, that didn't *quite* do it.

I finally figured out that I had to uninstall and re-install (ssh-host-config) the sshd service, with CYGWIN=ntsec smbntsec. The permissions on files look OK now, but there's still a problem:

My login groups are incomplete. When logged in via remote desktop, my groups are:

$ id
uid=13555(sunni) gid=11552(etdev) groups=544(Administrators),555(Remote Desktop Users),545(Users),16244(BusinessSignatures e),16487(Development Organiza),16381(DL- Global Employees),10513(Domain Users),16562(EntrustEmp),11552(etdev),11269(RAS-VPN Users),14162(RWC-Remote Users),11284(Terminal Server Users)

But when logged in via sshd, my groups are:
$ id
uid=13555(sunni) gid=11552(etdev) groups=544(Administrators),555(Remote Desktop Users),545(Users),11552(etdev)

Basically, all my CORP domain group memberships are missing except my primary login group (the user is a CORP domain user, as is the etdev group). Notice the missing groups with ids > 10000..

(This causes all sorts of subtle permissions problems on certain files with more restrictive ACLs. Like all my ClearCase views :-/).

How do I get my sshd login session to contain all the Domain group memberships as well?


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Reply via email to