Re: How do I run sshd as a particular user?

[Alfred von Campe <alfred at von-campe dot com>]

On Mar 28, 2008, at 11:28, Dave Korn wrote:
> Alfred von Campe wrote on 28 March 2008 12:30:
>
> > I have tried various ways to get the sshd service started as a domain
> > user (instead of the default local user "sshd_server") and can not
> > get it to work.  What is the correct syntax to specify a domain user
> > with cygrunsrv?  This is what I have tried:
> >
> >    cygrunsrv -I sshd -u "DOMAINNAME\USERNAME" -w PASSWORD -d "CYGWIN
> > sshd" -p /usr/sbin/sshd -a -D -e "CYGWIN=bin tty smbntsec" -y tcpip
>
>   That's the windows domain user syntax sure enough.  There aren't  
> any shell
> metacharacters in the password by any chance are there?

Nope, just upper and lowercase letters, numbers, and a dash.  I also  
ensured that the user had all the user rights as described in the  
openssh.README file (well, all except for Increase Quota, which for  
some reason was not defined on this system, and must not really be  
required since the sshd_server account also did not have that right  
and it is able to start the service).  The result is the same, the  
service starts and immediately stops.  There is nothing obvious in  
the logs.  I am not really a Windows person, so I've been working  
with one of our IT guys on this, but he is out today and I will be  
out tomorrow and Friday, so this will have to wait until next week.

Again, the problem I am trying to solve is to be able to kick off  
builds remotely and automatically on this Windows server.  To do  
this, we need password-less login, and to that end, we have exchanged  
ssh keys and have this working.  However, by exchanging ssh keys the  
user is never fully authenticated on the domain, so there is no  
access to network drives.  Is there any other way to have  
passwordless ssh access yet still be fully authenticated on the  
domain?  I thought starting the service as a domain user would  
accomplish this, but alas, I have not been able to do that.  So if  
there is any other way to achieve our goal, I'd be happy to try it.

Thanks,
Alfred


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/