PowerShell / PowerShell/Win32-OpenSSH
OpenSSH does not have the same rights as RDP; although I am authenticated. AU vs IU?
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 8.3k
- Forks
- 819
- PR merge metrics
- No merged PRs in 30d
Description
Troubleshooting steps
https://github.com/PowerShell/Win32-OpenSSH/wiki/Troubleshooting-Steps
Terminal issue? please go through wiki
https://github.com/PowerShell/Win32-OpenSSH/wiki/TTY-PTY-support-in-Windows-OpenSSH
Please answer the following
"OpenSSH for Windows" version
((Get-Item (Get-Command sshd).Source).VersionInfo.FileVersion)
8.1.0.0
Server OperatingSystem
((Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows nt\CurrentVersion\" -Name ProductName).ProductName)
Windows Server 2019 Standard
Client OperatingSystem
Linux, macOS
What is failing
get-service
Expected output
List of services
Actual output
get-service : Cannot open Service Control Manager on computer '.'. This operation might require other privileges.
get-service works normal when I log in with RDP. However, I do not want to use RDP.
If I modify the SDDL with sc.exe sdset so that the record for AU is
(A;;CCLCRPRC;;;AU) then the get-service returns.
Obvious using RDP the user becomes an Interactive user instead of only an authenticated user.
I think that beats the purpose of SSH.
Since I am authenticated properly, security cannot be an issue.
Similar issues occur with ssh-add. the agent refuses to handle my requests.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the linked Troubleshooting Steps and TTY/PTY support wiki pages, then reproduce get-service and ssh-add over OpenSSH while comparing the SDDL behavior for AU and IU with an RDP session. A useful resolution would establish whether the differing permissions are intended and clearly state the required behavior or configuration.
Written by the indexing model from the issue text.
Assessment
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100