1

OS: Windows 7 x64
Cygwin: 1.7.15-1
OpenSSH: 6.0p1-1


I'm attempting to install an SSH server on Windows 7. The tutorial that I'm following to do this is here: http://www.howtogeek.com/howto/41560/how-to-get-ssh-command-line-access-to-windows-7-using-cygwin/

The issue is that upon executing the net start sshd command I get the following output:

The CYGWIN sshd service is starting.
The CYGWIN sshd service could not be started.

The service did not report an error.

More help is available by typing NET HELPMSG 3534.

Here is the full output of the setup:

AdminUser@ThisComputer ~
$ ssh-host-config

*** Info: Generating /etc/ssh_host_key
*** Info: Generating /etc/ssh_host_rsa_key
*** Info: Generating /etc/ssh_host_dsa_key
*** Info: Generating /etc/ssh_host_ecdsa_key
*** Info: Creating default /etc/ssh_config file
*** Info: Creating default /etc/sshd_config file
*** Info: Privilege separation is set to yes by default since OpenSSH 3.3.
*** Info: However, this requires a non-privileged account called 'sshd'.
*** Info: For more info on privilege separation read /usr/share/doc/openssh/README.privsep.
*** Query: Should privilege separation be used? (yes/no) yes
*** Info: Note that creating a new user requires that the current account have
*** Info: Administrator privileges.  Should this script attempt to create a
*** Query: new local account 'sshd'? (yes/no) yes
*** Info: Updating /etc/sshd_config file

*** Query: Do you want to install sshd as a service?
*** Query: (Say "no" if it is already installed as a service) (yes/no) yes
*** Query: Enter the value of CYGWIN for the daemon: []
*** Info: On Windows Server 2003, Windows Vista, and above, the
*** Info: SYSTEM account cannot setuid to other users -- a capability
*** Info: sshd requires.  You need to have or to create a privileged
*** Info: account.  This script will help you do so.

*** Info: You appear to be running Windows XP 64bit, Windows 2003 Server,
*** Info: or later.  On these systems, it's not possible to use the LocalSystem
*** Info: account for services that can change the user id without an
*** Info: explicit password (such as passwordless logins [e.g. public key
*** Info: authentication] via sshd).

*** Info: If you want to enable that functionality, it's required to create
*** Info: a new account with special privileges (unless a similar account
*** Info: already exists). This account is then used to run these special
*** Info: servers.

*** Info: Note that creating a new user requires that the current account
*** Info: have Administrator privileges itself.

*** Info: No privileged account could be found.

*** Info: This script plans to use 'cyg_server'.
*** Info: 'cyg_server' will only be used by registered services.
*** Query: Do you want to use a different name? (yes/no) no
*** Query: Create new privileged user account 'cyg_server'? (yes/no) yes
*** Info: Please enter a password for new user cyg_server.  Please be sure
*** Info: that this password matches the password rules given on your system.
*** Info: Entering no password will exit the configuration.
*** Query: Please enter the password:
*** Query: Reenter:

*** Info: User 'cyg_server' has been created with password '[CENSORED]'.
*** Info: If you change the password, please remember also to change the
*** Info: password for the installed services which use (or will soon use)
*** Info: the 'cyg_server' account.

*** Info: Also keep in mind that the user 'cyg_server' needs read permissions
*** Info: on all users' relevant files for the services running as 'cyg_server'.
*** Info: In particular, for the sshd server all users' .ssh/authorized_keys
*** Info: files must have appropriate permissions to allow public key
*** Info: authentication. (Re-)running ssh-user-config for each user will set
*** Info: these permissions correctly. [Similar restrictions apply, for
*** Info: instance, for .rhosts files if the rshd server is running, etc].


*** Info: The sshd service has been installed under the 'cyg_server'
*** Info: account.  To start the service now, call `net start sshd' or
*** Info: `cygrunsrv -S sshd'.  Otherwise, it will start automatically
*** Info: after the next reboot.

*** Info: Host configuration finished. Have fun!

AdminUser@ThisComputer ~
$ net start sshd
The CYGWIN sshd service is starting.
The CYGWIN sshd service could not be started.

The service did not report an error.

More help is available by typing NET HELPMSG 3534.

Note that on the line *** Query: Enter the value of CYGWIN for the daemon: [] I haven't entered anything. Tutorials often say to use ntsec or ntsec tty here but those options are removed from the latest version of OpenSSH. I've tried using them anyway and the result is the same.

The file /var/log/sshd.log is empty. If I try just running the command /usr/sbin/sshd I get the output /var/empty must be owned by root and not group or world-writable.. The /var/empty directory has the following permissions: drwxr-xr-x+ 1 cyg_server root 0 May 29 15:28 empty. Google searches on this error did not turn up any working fixes. One person seems to have solved it by using the command chown SYSTEM /var/empty but that did not fix it in my case.

2
  • More info: UAC is disabled and I've tried installing Cygwin for "Just Me" and "All Users".
    – Coder6841
    May 29, 2012 at 23:07
  • More info: I've also tried all of the suggestions in the comments from this topic.
    – Coder6841
    Jun 3, 2012 at 3:50

3 Answers 3

3

Try disabling privilege separation in /etc/sshd_config

1
  • 1
    I've tried removing everything and starting from scratch with privilege separation off but I still get the same error when trying to start the service. However, running the command /usr/sbin/sshd does actually work so I'm accepting this answer. Thanks!
    – Coder6841
    Oct 18, 2012 at 1:31
2

Under Cygwin, /var/empty must be owned by the user running sshd. (Unless you disable privilege separation!)

From a helpful email to the Cygwin mailing list in 2012 by Corinna Vinschen

Usually sshd tests if /var/empty is owned by uid 0. On Cygwin, where there's usually no user with uid 0, the code has been modified to test if /var/empty is owned by the user running sshd. So, if you start sshd on the command line, you have to chown /var/empty to the current user account. Same goes for the ssh-related files under /etc. The error message is the vanilla upstream error message. It hasn't been changed for Cygwin to keep the Cygwin-related upstream patchset small.

0

In my case I had a conflict with another service. I installed Bitvise trial to try out hosting a SSH server.

When I installed Cygwin OpenSSH, I need to shutdown Bitvise service to be able to start up Cygwin sshd.

1
  • I haven't restarted Bitvise. I used it as a test run to see if I need to setup a SSH server to accomplish a certain task. It didn't make sense to have two SSH servers running on the same port. I brought this up to suggest that other services may conflict with OpenSSH.
    – EEberhart
    Aug 16, 2017 at 21:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .