> > The user who runs the ssh-host-setup command is being denied terminal
> > services login, which when you are running the setup over terminal
> > services is a bit of a worry! I don't get kicked off the moment it
> > happens but it needs manually correctly before log out or access to
> > the box remotely will be lost.

> The script denies access to the user running the service, not the user
> running ssh-host-config.  Hopefully you don't use the service starter
> account for normal logon purposes.

Alas I don't know of any other way to get what I need done. In order to support 
an automated system login we use an SSH key based login rather than passwords. 
This unfortunately means that there is no "real" login, the user does not have 
access to the network drives and that is kind of essential for what we are 
doing. The only workaround I have found is to have privelege separation off and 
have the sshd service be the same user as the login. That way the priveleges 
are passed to the logged in shell and it works. The only time the password is 
necessary is when the install is done or the password is changed. The remaining 
problem is terminal services being disabled, which although undoable is a bit 
of a pain to do across hundreds of machines.

If there is another way to get key based logins and network access (real 
logins) working then that would be great to know about. Otherwise a way to 
workaround to stop ssh-host-config from disabling terminal services for that 
user would also be useful.




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Reply via email to