PowerShell / PowerShell/Win32-OpenSSH

OpenSSH does not have the same rights as RDP; although I am authenticated. AU vs IU?

Open
#1,767 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
No language data
Stars
8.3k
Forks
819
PR merge metrics
No merged PRs in 30d

Description

Troubleshooting steps
https://github.com/PowerShell/Win32-OpenSSH/wiki/Troubleshooting-Steps

Terminal issue? please go through wiki
https://github.com/PowerShell/Win32-OpenSSH/wiki/TTY-PTY-support-in-Windows-OpenSSH

Please answer the following

"OpenSSH for Windows" version
((Get-Item (Get-Command sshd).Source).VersionInfo.FileVersion)
8.1.0.0

Server OperatingSystem
((Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows nt\CurrentVersion\" -Name ProductName).ProductName)
Windows Server 2019 Standard

Client OperatingSystem
Linux, macOS

What is failing
get-service

Expected output
List of services

Actual output
get-service : Cannot open Service Control Manager on computer '.'. This operation might require other privileges.

get-service works normal when I log in with RDP. However, I do not want to use RDP.

If I modify the SDDL with sc.exe sdset so that the record for AU is
(A;;CCLCRPRC;;;AU) then the get-service returns.
Obvious using RDP the user becomes an Interactive user instead of only an authenticated user.
I think that beats the purpose of SSH.
Since I am authenticated properly, security cannot be an issue.

Similar issues occur with ssh-add. the agent refuses to handle my requests.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked Troubleshooting Steps and TTY/PTY support wiki pages, then reproduce get-service and ssh-add over OpenSSH while comparing the SDDL behavior for AU and IU with an RDP session. A useful resolution would establish whether the differing permissions are intended and clearly state the required behavior or configuration.

Written by the indexing model from the issue text.

Assessment

Domain
operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.