PowerShell / PowerShell/Win32-OpenSSH
sshd can not find users while same users can login using RDP
Open
@vthiebaut10 is already working on this.
Since Feb 27, 2023.
Area-ssh
More info needed
- Dominant language
- No language data
- Stars
- 8.3k
- Forks
- 819
- PR merge metrics
- No merged PRs in 30d
Description
Prerequisites
- Write a descriptive title.
- Make sure you are able to repro it on the latest version
- Search the existing issues.
Steps to reproduce
Installing sshd version v9.1.0.0p1-Beta from https://github.com/PowerShell/Win32-OpenSSH/releases/download/v9.1.0.0p1-Beta/OpenSSH-Win64-v9.1.0.0.msi, then configuring does not lead to a remote shell, because sshd does not find the user if run as SYSTEM as service.
Expected behavior
Logging in with an user able to login using RDP shall lead to the shell configured.
Actual behavior
Logging in succeeds, but then waits until timeout, because the token for the user logging in can not be generated
Error details
9696 2023-02-15 20:45:17.665 debug3: mm_getpwnamallow: entering [preauth]
9696 2023-02-15 20:45:17.665 debug3: mm_request_send: entering, type 8 [preauth]
9696 2023-02-15 20:45:17.665 debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
9696 2023-02-15 20:45:17.665 debug3: mm_request_receive_expect: entering, type 9 [preauth]
9696 2023-02-15 20:45:17.665 debug3: mm_request_receive: entering [preauth]
9696 2023-02-15 20:45:17.665 debug3: mm_request_receive: entering
9696 2023-02-15 20:45:17.665 debug3: monitor_read: checking request 8
9696 2023-02-15 20:45:17.665 debug3: mm_answer_pwnamallow: entering
9696 2023-02-15 20:45:17.665 debug2: parse_server_config_depth: config reprocess config len 2271
9696 2023-02-15 20:45:17.665 debug3: checking match for 'Group administrators' user <domain>\\<user> host ::1 addr ::1 laddr ::1 lport 22
9696 2023-02-15 20:46:42.020 error: lookup_principal_name: User principal name lookup failed for user '<domain>\\<user>' (explicit: 1722, implicit: 1722)
9696 2023-02-15 20:46:42.020 debug1: generate_s4u_user_token: LsaLogonUser() failed. User '<domain>\\<user>' Status: 0xC0000062 SubStatus 0.
9696 2023-02-15 20:46:42.020 debug3: get_user_token - unable to generate token for user <domain>\\<user>
Environment data
Name Value
---- -----
PSVersion 5.1.17763.3770
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.17763.3770
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
Version
v9.1.0.0p1-Beta
Visuals
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.