Re: NTsec permissions issue over inet

[Igor Pechtchanski <pechtcha at cs dot nyu dot edu>]

On Wed, 28 May 2003, Banville, Stephen wrote:

> Hi All,
>         I'm  not sure if this issue has been detected. I have traversed
> through the MANY probelm reports
> and haven't been able to find any specifics on this problem.
>
> The problem:
>
> My system that I have Cygwin running on is a Windows 2000 platform. I have
> set the appropriate environment variable for ntsec
> and have created the appropriate passwd and group files from my network
> domain. When I telnet, rsh, or ftp into my Window 2k box
> I get the following message:
>
> rsh 127.0.0.1 -l sbanville
> Password:
> Private Cygnus Operating System(c) 5.1.0
> UNAUTHORIZED ACCESS STRICTLY PROHIBITED
> mkdir: cannot create directory `//netapp0/sbanville$': File exists
> -bash: //netapp0/sbanville$/.bash_profile: Permission denied
>
> My NT passwd information was created by running mkpasswd -l <domain> >
> passwd; mkgroup -d <domain> > group
>
> I have set Cygwin ntsec tty.
>
> This used to work fine in older version of Cygwin.
>
> It appears that the Windows box is not happy with the SID that is created
> from mkpasswd.
> I have compared the SID in my passwd entry to appropriate groups that I
> bneed to belong to.
> There is no inconsistencies.
>
> After loggin in I also checked the well known groups that I belong too,
> which also turned out to be fine.
>
> Can someone please tell me what the problem could be.
>
> Here is the ouput from cygcheck -s -r
>
> NOTE: I also get the folowing meesage when running cygcheck:
>
> cygcheck: dump_sysinfo: GetVolumeInformation() failed: 5
> cygcheck: dump_sysinfo: GetVolumeInformation() failed: 5
> cygcheck: dump_sysinfo: GetVolumeInformation() failed: 5
>
> [cygcheck output snipped]
> Steve

Steve,

For the future, please *attach* the cygcheck output to avoid generating
false positives on message archive search.

The "ntsec" setting only affects local drives, AFAIK.  You need to play
with the "smbntsec" setting for remote shares.  Make sure the user you're
logging in as is the domain user, not a local user with the same name.
Also, there were issues with ssh authentication and access to network
shares -- try playing with the "Allow service to interact with the
desktop" checkbox in service properties.

ISTR some discussion on issues with ClearCase MVFS (this is just a WAG,
though).
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha@cs.nyu.edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor@watson.ibm.com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster."  -- Patrick Naughton


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/