Home / server / Questions

Questions[cygwin-sshd](server)

Martin Hope
Muposat
Asked: 2016-05-13 06:49:24 +0800 CST
  • 2

I run an Openssh sshd service from Cygwin. When an RSA connection is established:

$ ssh Administrator@ZETA

Last login: Wed May 11 13:58:50 2016 from 10.1.1.140

-- there is no error message.

However, when I use an inline command:

$ ssh Administrator@ZETA "echo hi"

hi

-- the command works, but on ZETA the Windows Event Log now says:

sshd: PID 7068: error: get_socket_address: getnameinfo 2 failed: Unknown error

Calling this often fills the Event Log with errors.

Starting sshd on command line in debug mode:

 /usr/sbin/sshd -ddd

-- produces no error. It also runs under different user and I had to chown administrator /var/empty for it to work.

Trying to start sshd in debug mode as Windows service, as recommended in https://cygwin.com/ml/cygwin/2014-03/msg00488.html fails:

$ /usr/bin/cygrunsrv -I sshd -d "CYGWIN sshd_debug" -p /usr/sbin/sshd -a "-D -d -d -d" -y tcpip

/usr/bin/cygrunsrv: Error installing a service: OpenService: Win32 error 1073: The specified service already exists.

ssh cygwin cygwin-sshd freesshd
Martin Hope
Oswald
Asked: 2012-07-17 12:56:21 +0800 CST
  • 8

I would like to force users into a specific command when they log in from outside my LAN via SSH to my LAN. My idea was, to use ForceCommand in a Match conditional block, that matches all addresses except for the ones in my LAN.

I have tried the following, according to man 5 sshd_config:

  • Match Address !192.168.1.0/24 allowed users from anywhere to execute any command.
  • Match Address !192.168.* allowed users from anywhere to execute any command.
  • Match !Address 192.168.* prevented execution of any command by means of sshd refusing to start.

Negating a pattern using ! is described in man 5 ssh_config (Section "Patterns"). How can this be applied to addresses?

ssh cygwin-sshd
Martin Hope
nocto
Asked: 2012-04-01 22:57:25 +0800 CST
  • 4

I have a server running Windows 2003 that is using Cygwin's SSHD. Where do I save my public key to in order to allow key-based auth? The Linux equivalent is ~/.ssh/authorized_keys.

cygwin cygwin-sshd
Martin Hope
sorin
Asked: 2011-12-14 07:35:21 +0800 CST
  • 7

I installed Cygwin and sshd on Windows 7 but I'm not able to make it work.

I followed the guide from http://www.noah.org/ssh/cygwin-sshd.html but I still get:

$ cygrunsrv -S sshd
cygrunsrv: Error starting a service: QueryServiceStatus:  Win32 error 1062:
The service has not been started.

Configuration details:

  • Windows 7 in a domain running with a domain user that has local administrative priviledges
  • netstat -a -b reports nothing running on port 22
  • C:\cygwin\var\log\sshd.log is empty
  • After I installed cygwin and sshd, I run ssh-host-config -y
  • Already tried to add SYSTEM account to the 3 directories, no change.
  • Already tried a full system reboot, no change

Update: Windows logs complains about Possible duplicate cygwin1.dll

cygwin cygwin-sshd
Martin Hope
mark
Asked: 2011-10-26 14:00:43 +0800 CST
  • 3

Given:

  1. vm - a WinXPsp3 virtual machine hosted by a Win7sp1 physical machine
  2. alice is the user on vm
  3. srv - a Win2008R2sp1 server
  4. bob is the user on srv
  5. quake - a linux server
  6. mark is the user on quake
  7. Both vm and srv have the same new installation of cygwin (1.7.9) and openssh.
  8. Firewall service is disabled on vm (and its host) and on srv
  9. All the machines can be pinged from all the machines.
  10. ssh mark@quake works OK from both vm and srv.
  11. ssh bob@srv works OK from both quake and vm.
  12. ssh alice@vm works on the vm itself only, but it fails on the other two machines:
alice@vm ~
$ ssh alice@vm
alice@vm's password:
Last login: Tue Oct 25 23:42:09 2011 from vm.shunra.net

[mark@Quake ~]$ ssh -vvv alice@vm
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to vm [172.30.2.60] port 22.
debug1: connect to address 172.30.2.60 port 22: Connection timed out
ssh: connect to host vm port 22: Connection timed out

bob@Srv ~
$ ssh -vvv alice@vm
OpenSSH_5.9p1, OpenSSL 0.9.8r 8 Feb 2011
debug1: Reading configuration data /etc/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to vm [172.30.2.60] port 22.
debug1: connect to address 172.30.2.60 port 22: Connection timed out
ssh: connect to host vm port 22: Connection timed out

I used ssh-host-config both on vm and srv to configure the ssh to run as a windows service. Besides that I did nothing else.

Can anyone help me troubleshoot this issue?

Thank you very much.

EDIT

The virtual machine software is VMWare Workstation 7.1.4. I think the problem is in its settings, but I have no idea where exactly. The Network Adapter is set to Bridged.

EDIT2

All the machines are located in the company lab, I think all of them are on the same segment, but I may be wrong. Below is the ipconfig /all output for each machine (skipping the linux server). I have deleted the Tunnel adapters to keep the output minimal. If anyone thinks they matter, do tell so and I will post them as well. In addition ping output is given to show that DNS is correct.

Something else, may be relevant, may be not. Doing psexec to srv works OK, whereas to vm failes with Access Denied.

srv:

C:\Windows\system32>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : srv
   Primary Dns Suffix  . . . . . . . : shunra.net
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : shunra.net

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Client)
   Physical Address. . . . . . . . . : E4-1F-13-6D-F3-00
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 172.30.6.9(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.248.0
   Default Gateway . . . . . . . . . : 172.30.0.254
   DNS Servers . . . . . . . . . . . : 172.30.1.1
                                       172.30.1.2
   NetBIOS over Tcpip. . . . . . . . : Enabled

C:\Windows\system32>ping vm

Pinging vm.shunra.net [172.30.2.60] with 32 bytes of data:
Reply from 172.30.2.60: bytes=32 time=1ms TTL=128
Reply from 172.30.2.60: bytes=32 time=4ms TTL=128
Reply from 172.30.2.60: bytes=32 time<1ms TTL=128
Reply from 172.30.2.60: bytes=32 time<1ms TTL=128

Ping statistics for 172.30.2.60:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 4ms, Average = 1ms

C:\Windows\system32>

vm:

C:\>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : vm
        Primary Dns Suffix  . . . . . . . : shunra.net
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : shunra.net
                                            shunranet

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : shunranet
        Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
        Physical Address. . . . . . . . . : 00-0C-29-8F-A0-0B
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 172.30.2.60
        Subnet Mask . . . . . . . . . . . : 255.255.248.0
        Default Gateway . . . . . . . . . : 172.30.0.254
        DHCP Server . . . . . . . . . . . : 172.30.1.1
        DNS Servers . . . . . . . . . . . : 172.30.1.1
                                            172.30.1.2
        Lease Obtained. . . . . . . . . . : Tuesday, October 25, 2011 18:16:34
        Lease Expires . . . . . . . . . . : Wednesday, November 02, 2011 18:16:34

C:\>ping srv

Pinging srv.shunra.net [172.30.6.9] with 32 bytes of data:

Reply from 172.30.6.9: bytes=32 time=1ms TTL=128
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128

Ping statistics for 172.30.6.9:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 1ms, Average = 0ms

C:\>

vm-host (the host machine of the vm):

C:\>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : vm-host
   Primary Dns Suffix  . . . . . . . : shunra.net
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : shunra.net

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
   Physical Address. . . . . . . . . : 6C-F0-49-E7-E9-30
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::f59d:7f6e:1510:6f%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 172.30.6.7(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.248.0
   Default Gateway . . . . . . . . . : 172.30.0.254
   DHCPv6 IAID . . . . . . . . . . . : 242020425
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-CC-39-80-6C-F0-49-E7-E9-30
   DNS Servers . . . . . . . . . . . : 172.30.1.1
                                       194.90.1.5
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VMware Network Adapter VMnet1:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet1
   Physical Address. . . . . . . . . : 00-50-56-C0-00-01
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::cd92:38c0:9a6d:c008%16(Preferred)
   Autoconfiguration IPv4 Address. . : 169.254.192.8(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 352342102
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-CC-39-80-6C-F0-49-E7-E9-30
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VMware Network Adapter VMnet8:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet8
   Physical Address. . . . . . . . . : 00-50-56-C0-00-08
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::edb9:b78c:a504:593b%17(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.5.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 369119318
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-CC-39-80-6C-F0-49-E7-E9-30
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

C:\>ping srv

Pinging srv.shunra.net [172.30.6.9] with 32 bytes of data:
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128
Reply from 172.30.6.9: bytes=32 time<1ms TTL=128

Ping statistics for 172.30.6.9:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\>ping vm

Pinging vm.shunra.net [172.30.2.60] with 32 bytes of data:
Reply from 172.30.2.60: bytes=32 time<1ms TTL=128
Reply from 172.30.2.60: bytes=32 time<1ms TTL=128
Reply from 172.30.2.60: bytes=32 time<1ms TTL=128
Reply from 172.30.2.60: bytes=32 time<1ms TTL=128

Ping statistics for 172.30.2.60:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\>

EDIT3

I have just checked - the vm-host is able to ssh to the vm machine! I still do not know how to leverage this discovery to solve the problem.

ssh cygwin cygwin-sshd