Advanced Forum Search

  • Problems during install of copSSH 1.3.6
    Post date: Tuesday, December 20, 2005 - 17:03

    Hallo Tevfik,
    First of all may I thank you for putting together this installer for openssh on Windows! I've tried three times before to get sshd running under cygwin and have never quite managed it. It is now running nicely!

    That said, I *did* run into a problem during the install. The SvcCOPSSH user account did not get created because the default password did not match my PCs password rules. The error in the log was:

    "Creating service account SvcCOPSSH
    The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.

    More help is available by typing NET HELPMSG 2245.

    The user name could not be found.

    More help is available by typing NET HELPMSG 2221."

    The problem was that the installer did *not* detect this error and stop. Instead it continued and generated lots of errors since this account did not exist. I ended up using the errors generated to guide me as to what commands should have been run. So, I created the user manually and completed the rest of the install by hand.

    I realise that the default password is pretty secure and this is an "edge case". However, may I suggest that you try and increase the level of error checking in the install process?

    Takk!
    Jonathan.

  • I/ error with huge file
    Post date: Thursday, December 15, 2005 - 23:29

    Hi,i get an I/O error while rsync'ing the latest
    Wikipedia DVD (size is 7.5 GB).

    Can anyone tell me, why ???

    Greez
    Daniel

  • cygrunsrv not starting
    Post date: Thursday, December 15, 2005 - 22:46

    I had sshd under cygwin installed and running as a service fine. Now when I try to start the service I get the following error
    $ net start sshd
    The CYGWIN sshd service is starting.
    The CYGWIN sshd service could not be started.

    The service did not report an error.

    More help is available by typing NET HELPMSG 3534.

    or

    $ cygrunsrv -S sshd
    cygrunsrv: Error starting a service: QueryServiceStatus: Win32 error 1062:
    The service has not been started.

    Can someone please help me with this issue. It seems to be a permissions problem.

  • Problems with NAT and PKA
    Post date: Wednesday, December 14, 2005 - 12:39

    Hello,

    our SSH-Server (Windows 2003 with COPSSH) stops to work with public-key-authentication after a reboot. The problem appears since the client IP-Address is NATted.

    When the client(solaris) removes his private key file from his home-directory, it works fine with password-authentication.

    We found no other way to recover from that error than de- and reinstalling the copssh-Server Software. „Strictmodes=no“ also didn’t help.

    What could be wrong, or have you ever heard of a similar problem.

    Example:
    /usr/local/bin/ssh -v sbi_local@100.8.32.240
    OpenSSH_4.1p1, OpenSSL 0.9.7g 11 Apr 2005
    debug1: Reading configuration data /usr/local/etc/ssh_config
    debug1: Connecting to 10.8.32.240 port 22.
    debug1: Connection established.
    debug1: identity file /usr/sap/TEC/.ssh/identity type -1
    debug1: identity file /usr/sap/TEC/.ssh/id_rsa type -1
    debug1: identity file /usr/sap/TEC/.ssh/id_dsa type 2
    debug1: Remote protocol version 2.0, remote software version OpenSSH_4.2
    debug1: match: OpenSSH_4.2 pat OpenSSH*
    debug1: Enabling compatibility mode for protocol 2.0
    debug1: Local version string SSH-2.0-OpenSSH_4.1
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client aes128-cbc hmac-md5 none
    debug1: kex: client->server aes128-cbc hmac-md5 none
    debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024

  • FAQs
    Post date: Saturday, December 10, 2005 - 20:22

    I understand your arguments. A new FAQ addressing access to files/drives/resources outside the copSSH root directory, is now available.

  • Installation observations
    Post date: Saturday, December 10, 2005 - 19:54

    A few things I observed when installing Copssh_1.3.6 on a Windows XPsp2 system.
    There were a couple of errors in the log:

    umount: /tmp: No such file or directory
    mount: warning - /usr/bin does not exist.
    C:\Program Files\0 Net\misc\copssh\bin on /usr/bin type system (binmode)
    C:\DOCUME~1\TOMMET~1\LOCALS~1\Temp on /tmp type system (binmode)
    C:\Program Files\0 Net\misc\copssh on / type system (binmode)

    though perhaps they are normal, as it appears those directories got mounted on the subsequent lines.

    And further down:

    Delete file: C:\Program Files\0 Net\misc\copssh\_tmp.cmd
    Delete file: C:\Program Files\0 Net\misc\copssh\etc\passwd.new
    Generate some required directories and files
    /usr/bin/mkdir: cannot create directory `/tmp': File exists
    Generate host keys

    another error regarding /tmp.

    And post installation there was a _tmp2.cmd file left in the application directory.

    Also of note here is that the installation paused for about 30 seconds on the "Generate host keys" step. Similarly the step where setperms.cmd is ran seemed to take a bit. Overall the installation on this system seemed quite slow compared to an installation I did earlier on an XP Home system. (Though a contributing factor is that my firewall on this system put up a warning every time the installer tried to execute another process, which it seems to do very frequently.)

    Account expires Never
    Password last set 12/10/2005 11:32 AM
    Password expires 1/22/2006 10:19 AM

    Although I see an expiration date, I see "Account expires: Never", so I presume you've tweaked the copSSH installer in the same way the cwRsync installer was tweaked to make sure the service account doesn't expire.

    Other than that, the installation appeared successful.

    -Tom

  • Windows-specific documentation
    Post date: Saturday, December 10, 2005 - 19:52

    The installer creates a shortcut to the official OpenSSH documentation. I'd recommend labeling that link differently, or instead linking to a documentation page on your site, which in turn could have a link to the official OpenSSH documentation.
    The problem I faced was that immediately after installation I wanted to find documentation that told me specifically about copSSH and how it was different from the normal OpenSSH distribution. (The README wasn't detailed enough.)

    Speaking of the README, I'd recommend adding at least a few paragraphs describing the pseudo-chroot environment, why it is set up that way, and perhaps explaining what the purpose of each of the directories are, for those who aren't familiar with the UNIX conventions. It'd be good to mention any other Windows specific stuff as well.

    In the usage section I'd also cover how you restrict access to the file system, as well as how you let users "break out" of the pseudo-chroot environment.

    -Tom

  • Permission problems when accessing a network path
    Post date: Saturday, December 10, 2005 - 19:50

    When logged in to a machine via copSSH (1.3.6) and attempting to access a network resource, I get (after a 20 second delay):
    -bash-3.00$ ls //ntdesk/spool
    ls: //ntdesk/spool: Permission denied

    Yet when running the Bash shell directly on that machine as the same user, I get:

    bash-3.00$ ls //ntdesk/spool
    RECYCLER
    System Volume Information

    According to this (ran locally):

    bash-3.00$ ls -al //ntdesk
    total 0
    dr-xr-xr-x 1 Tom Metro mkpasswd 0 Dec 10 13:34 .
    dr-xr-xr-x 1 Tom Metro mkpasswd 0 Dec 10 13:34 ..
    drwxr-xr-x 1 Tom Metro mkpasswd 0 Dec 5 13:17 spool

    I should have access to it.

    Running that remotely produces:

    -bash-3.00$ ls -al //ntdesk
    ls: reading directory //ntdesk: Bad file descriptor
    total 0
    dr-xr-xr-x 1 Tom Metro None 0 Dec 10 13:38 .
    dr-xr-xr-x 1 Tom Metro None 0 Dec 10 13:38 ..

    I tried touching a file, both remotely (test) and locally (test2), to see if there were any differences in the user or group ownership, but they look the same:

    -rw-r--r-- 1 Tom Metro mkpasswd 0 Dec 10 13:29 test
    -rw-r--r-- 1 Tom Metro mkpasswd 0 Dec 10 13:29 test2

    However the same directory listing when viewed remotely appears as:

    -rw-r--r-- 1 Tom Metro None 0 Dec 10 13:29 test
    -rw-r--r-- 1 Tom Metro None 0 Dec 10 13:29 test2

    So it appears group IDs are being mapped to names differently in the two scenarios. And a group name of "mkpasswd" seems suspicious (there is no group of that name in /etc/group).

    My /etc/passwd entry:

    Tom Metro::1003:513:Tom Metro,U-STARBUG\Tom Metro,:/home/Tom Metro:/bin/bash

    Seems to say I should be a member of the group None:

    None:S-1-5-21-1078081533-484763869-1957994488-513:513:

    and them I'm explicitly listed as a member of Users:

    Users:S-1-5-32-545:545:Tom Metro,ASPNET,SvcCOPSSH,sshd

    Maybe the space in the user name is fouling something up? (I tweaked the activate-user.sh script to permit spaces (I can send you the patch), as was discussed in another thread. It ran without errors.)

    -Tom

  • ability to copy service account password to the clipboard
    Post date: Saturday, December 10, 2005 - 18:40

    As I mentioned over in this cwrsync thread:

    Speaking of the generated password, can you display it in a control that can be selected and copied to the clipboard? Rather error prone to transcribe it by hand.

    The same suggestion applies to copSSH.

    Also, what are some scenarios under which knowing the service account password would be useful?

  • XP to XP to Linux based Nitix Server Question
    Post date: Saturday, December 10, 2005 - 09:15

    I am new to this whole linux based windows apps scene. I need to know how to set up an XP to XP local backup/replication solution using csRsync. I do not understand the command line switches used in these posts or where to start. Can someone point me to a tutorial or post addressing this?
    Also, the XP machine being backed up to above will need to be replicated over tne Internet to a Linux based server running a product called Nitix. This is explained in their documentation but I may choose to axe the linux for a 2003 server. Could I use cwRsync on both ends of this?

  • putty and copssh
    Post date: Tuesday, December 6, 2005 - 18:33

    copssh is amazing in theory butis there any "how to" concerning
    the use of putty and copssh

    i tried to import the keys from copssh
    to puttygen but no luck
    when i connect copssh says "server refused our key"
    Thanks in advance

  • copSSH and ZoneAlarm Pro 6?
    Post date: Monday, December 5, 2005 - 15:25

    ... Has anyone out there gotten copSSH to work with Zone Alarm Pro 6.1? I cannot seem to get Zone Alarm to allow copSSH to punch a port open to use. No one on the ZA board seems to know the answer...

  • SSH - Multi Users - Multi Key ?
    Post date: Monday, December 5, 2005 - 01:40

    Hello,
    Imagine a Win2003 server used as rsync server.
    You have several users (in different site) and you want to secure the connection to avoid a user try to connect on other module.

    How do you do if you want to use SSH ?

    1. use a login & pswd through the tunnel ? How ?
    2. use only a key, each user has his own one ? How ?

    Any ideas are welcome.

    Thanks,

    David

  • activating domain users
    Post date: Saturday, December 3, 2005 - 04:09

    I have four physical locations that I want to install copSSH to: California
    Virgina
    Sweden
    Korea
    All servers belong to the same domain.
    Each is on a different subnet.
    All servers are on Win2k.
    Each physical site has two DCs.
    All sites replicate with each other fine.

    I am able to install and activate a domain user in California and Virgina, but not Sweden or Korea.

  • Broken upload prep utility
    Post date: Friday, December 2, 2005 - 16:13

    Tev,I'm pretty sure that your upload prep utilty is broken - or your use of subinacl is incorrect. Much to my disappointment, when I ran the utility on my Inetpub folder in Windows, not only did it strip all non-svcwrsync , non-administrator users from the ACL, it applied inheritable permissions to folders that previously were not set to inherit! After fixing the problem, I was determined to fix the problem - or find the correct subinacl command. This should be what you're using - it is a grant only command, and I've tested it thoroughly - you should too, of course (running server 2.0.4, btw on win2k server sp4).

    First, recursively give the svcwrsync user full permissions on each subfolder and file (you can skip the verbose listing, of course):

    subinacl /verbose=1 /subdirectories target\* /grant=svcwrsync=F

    where target it what gets pull from the target field in the gui.

    Then, change the permissions on the folder itself:

    subinacl /verbose=1 /file target /grant=svcwrsync=F

    And then you're good to go. Also, I don't know if this is a bug, but it seems like one: when you browse to a target dir to prep for upload using the gui, it appends "\upload" to the path. This does not seem to be the intended behavior, as it's making a folder UNDER my target the target.

    Other than that, thank you for making a great set of apps, I've just started some additional testing with them - and please correct me if I'm wrong on anything (but I did have a set of broken web server permissions to prove that the upload prep tool is not working as intended).

  • sFTP successful check
    Post date: Thursday, December 1, 2005 - 20:28

    With the DOS ftp command, you can send the output to a log file and then scan the log file to see if the FTP was successful.How can I verify the FTP was successful using sFTP?
    We are running sFTP in a Windows environment from a DOS batch file.

    Terry

  • RADIUS authentication possible?
    Post date: Thursday, December 1, 2005 - 11:26

    Hi,
    Would it be possibel to have the ssh server forward the authentication request to a RADIUS server? This would be ideal for using One-Time-Password authentication with hardware tokens.
    We have been investigation for using PAM, but there is very little information on PAM with Cygwin on the net. For PAM there are pluggins available for RADIUS authentication.
    Or could there be native support for simple RADIUS authentication within the SSH server?

    If PAM is the way forward, are there any resources available for doing this on CYGWIN?

    Many thanks,

  • Rsync does not utilise Backup Operators rights to copy files
    Post date: Friday, November 25, 2005 - 01:49

    Hi,
    I have discovered that rsync is not copying the home directories on our server, even though rsync is being executed via a user that is a member of the Backup Operators group.

    If you want to backup a data volume on a windows server, you normally make the backup user a member of the Backup Operators group, so that the backup user has access to all the files on the volume for the purposes of copying the files.

    On a server where I am using rsync, the user home directories are private (i.e. administrators do not have access). This does not affect the backup program that we use to archive the files. However when we run rsync (using the credentials of a user in the Backup Operators group) rsync does not appear to obtain elevated privileges to read the home directories.

    From the investigation that I have done, it seems that to be able to take advantage of the elevated privileges provided by the Backup Operators group, when reading files from the NTFS filesystem you need to use specific "backup" API's.

    In other words if you logon to a computer as a member of the Backup Operators group, and try to xcopy all the files on a volume it won't work. Because xcopy does not use the relevant API's necessary to obtain read access to all files on the filesystem.

    Presumably this is the same reason that rsync cannot access all files on the filesystem when being run via a user that is a member of the Backup Operators group?

    Can anyone confirm and/or is there a workaround.

    Thanks
    VW

  • Tunnelling SMB over SSH
    Post date: Thursday, November 24, 2005 - 00:32

    Hi Tev,
    I was wondering whether you had experience with forwarding SMB ports over SSH. I have found a couple of articles, which I have followed:

    http://www.blisstonia.com/eolson/notes/smboverssh.php
    http://www.bitvise.com/file-sharing.html

  • rsync+ssh hanging during transfers?
    Post date: Wednesday, November 23, 2005 - 18:13

    Hi guys,
    My server is running cwRsync 2.0.4. on a Windows 2003 Server machine. My client machine is running Red Hat Linux 8.0. I'm using the SSH package from the cwRsync installer, and using the default "svcwrsync" user to connect to my Windows server.

    The command I'm using from my Linux box is:

    rsync --progress -ave "ssh -i cwrsync.key" svcwrsync@10.0.0.50:/cygdrive/f/Noddy .

    It will connect to the server, and find the directory that it wants. I have some files (previously transferred via a different method) that already exist on the client, so it doesn't need to download them again. But when it finds a new file, it either downloads the first chunks of the file, or doesn't download any of the file. :( For example:

    # rsync --progress -ave "ssh -i cwrsync.key" svcwrsync@10.0.0.50:/cygdrive/f/Noddy .
    receiving file list ...
    214 files to consider
    Noddy/
    Noddy/Noddy_data.mdb
    32768 0% 390.24kB/s 0:04:35

    My rsyncd.conf on the server looks like this:

    use chroot = false
    strict modes = true
    hosts allow = *
    log file = rsyncd.log
    pid file = rsyncd.pid

    path = /cygdrive/f/Maintenance
    read only = true
    transfer logging = yes

    I am trying to do this across a ~1Mbit/second 802.11b wireless connection. I've used rsync under Linux (client AND server) before so I know it's not a connection speed problem... thanks!

    Chris

  • Re-copying files after file list
    Post date: Wednesday, November 23, 2005 - 13:59

    Using cwrsync for a local file backup, I am seeing that each time it is run, it is copying some of the files that haven't changed, as well as new ones that have.
    Is there any reason why it should re-copy those files?

  • Access Denied using the right password?
    Post date: Tuesday, November 22, 2005 - 21:29

    Hello everyone now I'm having a new problem.
    Im getting access denied for all my users even though I know I'm using the correct password.
    Ive tried making a new user and trying to see if the password worked on that and it didnt. It's like its not properly checking what the password is or something.

    Could anyone give me a clue on what it might be? This is the error on the event log:

  • cwRsync and Netware RSYNC Working!
    Post date: Tuesday, November 22, 2005 - 13:12

    I tried the cygwin_rsyncd with the Netware RSYNC to backup my Novell servers and had trouble with pathing issues on my Windows 2k3 backup server. This flavor, cwRsync, worked in just a few minutes of tinkering.
    If anybody else is trying this give a holler. We can trade tips.

    Travis

  • File list
    Post date: Tuesday, November 22, 2005 - 10:51

    Where does cwRsync build it's file list? Can I see it anywhere whilst it is being bult?

  • Forwarding SIGINT to child processes
    Post date: Monday, November 21, 2005 - 19:42

    I am trying to replace RSH based automation with SSH. (How) Does the SSH protocol support forwarding of signals like SIGINT to child processes. Currently ^C is killing the local ssh client and leaving the still-running process bereft of a reader.

    Marc

Pages

Release news

static link?