Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSH-Agent installed through MSI is missing required privileges #1914

Closed
bagajjal opened this issue Mar 18, 2022 · 3 comments
Closed

SSH-Agent installed through MSI is missing required privileges #1914

bagajjal opened this issue Mar 18, 2022 · 3 comments
Assignees
Milestone

Comments

@bagajjal
Copy link
Collaborator

bagajjal commented Mar 18, 2022

This problem is specific to MSI installation only.

Problem statement
If you install the V8.9 through MSI then ssh-agent doesn't have all the required privileges. This effects the FIDO / PKCS11 scenarios because the ssh-agent fails to create ssh-sk-helper.exe / ssh-pkcs11-helper.exe.

Work around
Please use zip payload for installation instead of MSI package.

Code snippets
Install-sshd.ps1 has the required privileges. Code here.

MSI is missing the required privileges. Code here

@shareefj
Copy link

@bagajjal This fix only seems to be present in the 32-bit MSI. Running the 64-bit installer results in the same error.

@crrodriguez
Copy link

have the same issue as @shareefj , win64 msi does not set proper privileges and the agent is unable to work.. which command exactly should I use to fix it ?

@tgauth
Copy link
Collaborator

tgauth commented Aug 2, 2022

can run the following in a command prompt or PowerShell:
sc.exe privs ssh-agent SeAssignPrimaryTokenPrivilege/SeTcbPrivilege/SeBackupPrivilege/SeRestorePrivilege/SeImpersonatePrivilege

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants