search for: privilegeseparationaccount

Hi, Right now, the unprivileged account for privilege separation is only configurable at compile time (SSH_PRIVSEP_USER). I'd like to ask if it would be acceptable to have the account runtime configurable by adding something like PrivilegeSeparationAccount foo to sshd_config. The reason I'm asking is this. I'm working on a long overdue change to Cygwin which is supposed to get rid of the /etc/passwd and /etc/group files. Rather, the Windows account databases (SAM and AD)are asked directly for account information, and UID/GID values as wel...