RE: SFTP error 128
Igor: See if http://www.derkeiler.com/Newsgroups/comp.security.ssh/2003-06 /0117.html is of any help. I logged in as the Administrator, ran the cygwin shell, and executed these commands: chmod 755 / chmod -R 755 /usr But, I still get error 128 from a domain user account. Is there a specific command you want me to run to try to set the user permissions? Also, is the sftp subsystem enabled in /etc/sshd_config? The /etc/sshd_config has this line: Subsystem sftp/usr/sbin/sftp-server I am able to use sftp with the Administrator account, just not with a domain user. Any other ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Igor: Well, that posting was referring to permissions on *Windows* directories. Cygwin isn't standalone -- to work, it needs the standard Windows DLLs like kernel32.dll, winsock stuff, etc. I'm guessing your C:\Windows directory is accessible to local users but not domain users. I set Read, Read Execute, and List Folder Contents permissions for Domain Users on C:\ and the entire tree under C:\Windows. I am still getting SFTP Error 128. Is there any way to get some more information on why it is failing? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
On Tue, 8 Jan 2008, Neil Aggarwal wrote: Igor: See if http://www.derkeiler.com/Newsgroups/comp.security.ssh/2003-06 /0117.html is of any help. I logged in as the Administrator, ran the cygwin shell, and executed these commands: chmod 755 / chmod -R 755 /usr But, I still get error 128 from a domain user account. Is there a specific command you want me to run to try to set the user permissions? Well, that posting was referring to permissions on *Windows* directories. Cygwin isn't standalone -- to work, it needs the standard Windows DLLs like kernel32.dll, winsock stuff, etc. I'm guessing your C:\Windows directory is accessible to local users but not domain users. Also, is the sftp subsystem enabled in /etc/sshd_config? The /etc/sshd_config has this line: Subsystem sftp/usr/sbin/sftp-server I am able to use sftp with the Administrator account, just not with a domain user. Any other ideas? Try to follow through on the permission idea. The ability to use sftp as another local user (not Administrator) would support this guess. Igor -- http://cs.nyu.edu/~pechtcha/ |\ _,,,---,,_[EMAIL PROTECTED] | [EMAIL PROTECTED] ZZZzz /,`.-'`'-. ;-;;,_Igor Peshansky, Ph.D. (name changed!) |,4- ) )-,_. ,\ ( `'-' old name: Igor Pechtchanski '---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow! That which is hateful to you, do not do to your neighbor. That is the whole Torah; the rest is commentary. Go and study it. -- Rabbi Hillel -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Igor: I turned off Symantec AntiVirus' protections and tried again. I can connect to SSH using a domain account but when I try to SFTP, I still get error 128. There is nothing else running that I can think of. The profile is the default one by cygwin and there is no /etc/rc.d directory. I checked the Event Viewer. The is an event with this: Event Type: Information Event Source: sshd Event Category: None Event ID: 0 Date: 1/4/2008 Time: 11:47:50 AM User: CRCGROUP\sshd_server Computer: TCSERVER Description: The description for Event ID ( 0 ) in Source ( sshd ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: sshd: PID 5980: subsystem request for sftp. Any other ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. One common problem with ssh-based services is stray output from profile/rc scripts. Check that your login scripts don't output anything to the console that may be confusing the sftp protocol. Also check for interference from the http://cygwin.com/acronyms/#BLODA. Igor -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Ugh, top-posting... Reformatted. On Fri, 4 Jan 2008, Neil Aggarwal wrote: One common problem with ssh-based services is stray output from profile/rc scripts. Check that your login scripts don't output anything to the console that may be confusing the sftp protocol. Also check for interference from the http://cygwin.com/acronyms/#BLODA. Igor Igor: I turned off Symantec AntiVirus' protections and tried again. I can connect to SSH using a domain account but when I try to SFTP, I still get error 128. There is nothing else running that I can think of. The profile is the default one by cygwin and there is no /etc/rc.d directory. I checked the Event Viewer. The is an event with this: Event Type: Information Event Source: sshd Event Category: None Event ID: 0 Date: 1/4/2008 Time: 11:47:50 AM User: CRCGROUP\sshd_server Computer: TCSERVER Description: The description for Event ID ( 0 ) in Source ( sshd ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Everything above this line in the description is cruft that Windows inserts when it cannot interpret the message type id. sshd: PID 5980: subsystem request for sftp. This is the actual message, and it looks like a harmless information message. Any other ideas? See if http://www.derkeiler.com/Newsgroups/comp.security.ssh/2003-06/0117.html is of any help. Also, is the sftp subsystem enabled in /etc/sshd_config? Igor -- http://cs.nyu.edu/~pechtcha/ |\ _,,,---,,_[EMAIL PROTECTED] | [EMAIL PROTECTED] ZZZzz /,`.-'`'-. ;-;;,_Igor Peshansky, Ph.D. (name changed!) |,4- ) )-,_. ,\ ( `'-' old name: Igor Pechtchanski '---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow! That which is hateful to you, do not do to your neighbor. That is the whole Torah; the rest is commentary. Go and study it. -- Rabbi Hillel -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
On Thu, 27 Dec 2007, Neil Aggarwal wrote: Very good for one with such a bad attitude! I did not mean to have a bad attitude. I was just trying to state that I thought -l switch already did what you wanted to do. Now it is time to setup ssh to accept the connection you are trying to make. Anything you can do with ssh you can do with sftp. I can successfully ssh into the box using a domain account. It is only when I try to SFTP when I get the error 128. One common problem with ssh-based services is stray output from profile/rc scripts. Check that your login scripts don't output anything to the console that may be confusing the sftp protocol. Also check for interference from the http://cygwin.com/acronyms/#BLODA. Igor -- http://cs.nyu.edu/~pechtcha/ |\ _,,,---,,_[EMAIL PROTECTED] | [EMAIL PROTECTED] ZZZzz /,`.-'`'-. ;-;;,_Igor Peshansky, Ph.D. (name changed!) |,4- ) )-,_. ,\ ( `'-' old name: Igor Pechtchanski '---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow! That which is hateful to you, do not do to your neighbor. That is the whole Torah; the rest is commentary. Go and study it. -- Rabbi Hillel -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Mr Webber: I thought mkpasswd -l -d would process all local and domain accounts already. But, I tried what you suggested anyway. I executed these commands: /etc/postinstall/passwd-grp.sh.done mkpasswd -l -d /etc/passwd mkgroup -l -d /etc/group I still get SFTP error 128 when I try to connect using a domain user account. Any other ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mr Webber Sent: Tuesday, December 25, 2007 3:03 PM To: cygwin@cygwin.com Subject: RE: SFTP error 128 You need both local and domain accounts in Cygwin. Restore your local accounts (especially root) by re-running /etc/postinstall/passwd-grp.sh.done. Then add your domain accounts by APPENDING () to the passwd and group files. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Tuesday, December 25, 2007 9:59 AM To: cygwin@cygwin.com Subject: RE: SFTP error 128 Hello: I set read execute permission on C:\ for Domain Usera and set modify for Domain Users on C:\Cygwin but I am still getting this error. Any ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Sunday, December 23, 2007 11:22 AM To: cygwin@cygwin.com Subject: SFTP error 128 Hello: I have a Windows 2003 SBS server. I have set up cygwin SSHD so I can connect to it remotely. I can SSH and SFTP to the machine successfully using the Administrator account. I want to set up a couple Domain Users to be able to SFTP files up to the server. The users are in Active Directory so I first changed the security policy to allow users to log on locally. I then created the password and group files using these commands from the Cygwin shell using the Administrator account. mkpasswd -l -d /etc/passwd mkgroup -l -d /etc/group Next, I logged in as one of the users, ran the cygwin shell and ran ssh-user-config Now, from remote, I can ssh to the machine using the domain user's account. But, when I try top SFTP, I get error 128. According to something I read on the Internet, this means the domain user cannot execute the SFTP subsystem. I set permissions of read and execute for Domain Users on the entire C:\Cygwin heirarchy to no avail. Any ideas what went wrong? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Very good for one with such a bad attitude! Now it is time to setup ssh to accept the connection you are trying to make. Anything you can do with ssh you can do with sftp. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Thursday, December 27, 2007 1:51 PM To: 'Mr Webber'; cygwin@cygwin.com Subject: RE: SFTP error 128 Mr Webber: I thought mkpasswd -l -d would process all local and domain accounts already. But, I tried what you suggested anyway. I executed these commands: /etc/postinstall/passwd-grp.sh.done mkpasswd -l -d /etc/passwd mkgroup -l -d /etc/group I still get SFTP error 128 when I try to connect using a domain user account. Any other ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mr Webber Sent: Tuesday, December 25, 2007 3:03 PM To: cygwin@cygwin.com Subject: RE: SFTP error 128 You need both local and domain accounts in Cygwin. Restore your local accounts (especially root) by re-running /etc/postinstall/passwd-grp.sh.done. Then add your domain accounts by APPENDING () to the passwd and group files. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Tuesday, December 25, 2007 9:59 AM To: cygwin@cygwin.com Subject: RE: SFTP error 128 Hello: I set read execute permission on C:\ for Domain Usera and set modify for Domain Users on C:\Cygwin but I am still getting this error. Any ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Sunday, December 23, 2007 11:22 AM To: cygwin@cygwin.com Subject: SFTP error 128 Hello: I have a Windows 2003 SBS server. I have set up cygwin SSHD so I can connect to it remotely. I can SSH and SFTP to the machine successfully using the Administrator account. I want to set up a couple Domain Users to be able to SFTP files up to the server. The users are in Active Directory so I first changed the security policy to allow users to log on locally. I then created the password and group files using these commands from the Cygwin shell using the Administrator account. mkpasswd -l -d /etc/passwd mkgroup -l -d /etc/group Next, I logged in as one of the users, ran the cygwin shell and ran ssh-user-config Now, from remote, I can ssh to the machine using the domain user's account. But, when I try top SFTP, I get error 128. According to something I read on the Internet, this means the domain user cannot execute the SFTP subsystem. I set permissions of read and execute for Domain Users on the entire C:\Cygwin heirarchy to no avail. Any ideas what went wrong? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Very good for one with such a bad attitude! I did not mean to have a bad attitude. I was just trying to state that I thought -l switch already did what you wanted to do. Now it is time to setup ssh to accept the connection you are trying to make. Anything you can do with ssh you can do with sftp. I can successfully ssh into the box using a domain account. It is only when I try to SFTP when I get the error 128. Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
Hello: I set read execute permission on C:\ for Domain Usera and set modify for Domain Users on C:\Cygwin but I am still getting this error. Any ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Sunday, December 23, 2007 11:22 AM To: cygwin@cygwin.com Subject: SFTP error 128 Hello: I have a Windows 2003 SBS server. I have set up cygwin SSHD so I can connect to it remotely. I can SSH and SFTP to the machine successfully using the Administrator account. I want to set up a couple Domain Users to be able to SFTP files up to the server. The users are in Active Directory so I first changed the security policy to allow users to log on locally. I then created the password and group files using these commands from the Cygwin shell using the Administrator account. mkpasswd -l -d /etc/passwd mkgroup -l -d /etc/group Next, I logged in as one of the users, ran the cygwin shell and ran ssh-user-config Now, from remote, I can ssh to the machine using the domain user's account. But, when I try top SFTP, I get error 128. According to something I read on the Internet, this means the domain user cannot execute the SFTP subsystem. I set permissions of read and execute for Domain Users on the entire C:\Cygwin heirarchy to no avail. Any ideas what went wrong? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
RE: SFTP error 128
You need both local and domain accounts in Cygwin. Restore your local accounts (especially root) by re-running /etc/postinstall/passwd-grp.sh.done. Then add your domain accounts by APPENDING () to the passwd and group files. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Tuesday, December 25, 2007 9:59 AM To: cygwin@cygwin.com Subject: RE: SFTP error 128 Hello: I set read execute permission on C:\ for Domain Usera and set modify for Domain Users on C:\Cygwin but I am still getting this error. Any ideas? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Aggarwal Sent: Sunday, December 23, 2007 11:22 AM To: cygwin@cygwin.com Subject: SFTP error 128 Hello: I have a Windows 2003 SBS server. I have set up cygwin SSHD so I can connect to it remotely. I can SSH and SFTP to the machine successfully using the Administrator account. I want to set up a couple Domain Users to be able to SFTP files up to the server. The users are in Active Directory so I first changed the security policy to allow users to log on locally. I then created the password and group files using these commands from the Cygwin shell using the Administrator account. mkpasswd -l -d /etc/passwd mkgroup -l -d /etc/group Next, I logged in as one of the users, ran the cygwin shell and ran ssh-user-config Now, from remote, I can ssh to the machine using the domain user's account. But, when I try top SFTP, I get error 128. According to something I read on the Internet, this means the domain user cannot execute the SFTP subsystem. I set permissions of read and execute for Domain Users on the entire C:\Cygwin heirarchy to no avail. Any ideas what went wrong? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
