Live data from Hacker News

Install Win32 OpenSSH test release

github.com

41–47 of 47 posts

Re: Install Win32 OpenSSH test release

#41
post #12

Microsoft is going about the whole SSH thing in a very backwards way. If all they did was make or back an official POSIX environment, all of this comes for free. Insisting that PowerShell be the focal point for all these changes is just bizarre. Just install msys2.

Managing Windows from the command line these days without PowerShell is severely handicapping yourself. It's not practical to divorce PowerShell from Windows command line administration.

Re: Install Win32 OpenSSH test release

#42
post #24

Earlier quoted context omitted.

A half-bad Unix on top of Windows, with its own duplicate way of handling services, storage, users, permissions and everything else, is a pretty poor setup. Powershell (particularly the way it separates data from presentation) is one of the best shells on any OS. Being able to access it from Linux is a good thing.

This "separate data from presentation" sounds like TCO-speak. Way too frequently referenced to be a genuine inspiration. It's only "half bad" (if that even) because while the whole world moved on from Windows to Unix (OSX, Linux), Microsoft dug their heels in. Think of it as paying down long overdue technical debt.

If someone created a solid port of PowerShell to nix it would be a god-send.

Re: Install Win32 OpenSSH test release

#43
post #17

Earlier quoted context omitted.

They purchased a reasonably nice POSIX environment when they bought Interix in 1999 ( https://en.wikipedia.org/wiki/Interix ). Interix was a lot of fun to use, and I really wish it still existed as a product. I used to have fanciful dreams of a POSIX-based Linux-like "distribution" of Windows that kept a lot of the things I like about the Windows NT environment (NTFS filesystem, kernel object manager, service control…

Yeah, it went through a pile of rebrands until Windows 8 when it ended up getting pulled in one of the preview releases IIRC. I've wanted similar to you just so that people could target some kinda baseline on Windows with FOSS. I mean, I get that coming from the other direction, powershell seems like a nice treat. And if you use it, colour me impressed. I know in some cases, it's the only option for doing script work…

>I mean, I get that coming from the other direction, powershell seems like a nice treat. And if you use it, colour me impressed. I know in some cases, it's the only option for doing script work on Windows machines.

Your dismissive attitude towards PowerShell makes me think you either haven't put much time into using it (if any) or haven't touched it since the 1.x days (even then the benefits over a string-based shell should have been obvious). It's a really good shell and is in a completely different league than sh/bash/zsh. It's not the best scripting language and there are still warts but until they make a solid and practical Ruby or Python based shell it's going to sit far and away from the rest.

If the many replies you've gotten haven't been enough motivation I encourage you to actually try it out for a while.

Re: Install Win32 OpenSSH test release

#45
post #23

Earlier quoted context omitted.

You could do this right now w/ w/ a "Startup Script" or using Group Policy Preferences. The authorization to logon is, presumably, tied to the "User Right" to logon interactively and shouldn't have anything to do w/ the SSH server (since it's just userland).

Authorized keys in the context of ssh means the ability to logon without password using public key authentication. Now that I'm thinking about this, anybody know how they're doing public key authentication for domain accounts at all? If you don't use a password to logon, how are you supposed to get a Kerberos ticket to use domain network resources?

Yeah-- that was a pretty braindead response. I was thinking "authorized hosts". Now I feel silly.

re: the public key authentication for domain accounts - They're calling the undocumented NtCreateToken() API in "win32auth.c". They don't need a password to create a token going that route. They've also got an LSA Security Package to do the key validation inside LSA. I'm looking at this very quickly, but I'm not seeing that they extended the AD schema to store the public key in the user's AD account. That would be the best way to handle it, ultimately-- just have the DCs use that SSH-LSA Security Package to authenticate the users against the public key stored in their AD account.

Re: Install Win32 OpenSSH test release

#46
post #17

Earlier quoted context omitted.

Yeah, it went through a pile of rebrands until Windows 8 when it ended up getting pulled in one of the preview releases IIRC. I've wanted similar to you just so that people could target some kinda baseline on Windows with FOSS. I mean, I get that coming from the other direction, powershell seems like a nice treat. And if you use it, colour me impressed. I know in some cases, it's the only option for doing script work…

>I mean, I get that coming from the other direction, powershell seems like a nice treat. And if you use it, colour me impressed. I know in some cases, it's the only option for doing script work on Windows machines. Your dismissive attitude towards PowerShell makes me think you either haven't put much time into using it (if any) or haven't touched it since the 1.x days (even then the benefits over a string-based shell…

I don't know, most of the people who are replying seem to be quite rude about it. I certainly judge software by the community and I'd hate to need a question answered by them. /s

As for actually trying it... I'd love to, but every time I do I come up against limitations. Mostly because none of the projects I use write shell scripts for powershell.

But again, that doesn't justify PS being the only one that gets any official attention on Windows, hence me mentioning msys2 earlier.

Re: Install Win32 OpenSSH test release

#47
post #46

Earlier quoted context omitted.

>I mean, I get that coming from the other direction, powershell seems like a nice treat. And if you use it, colour me impressed. I know in some cases, it's the only option for doing script work on Windows machines. Your dismissive attitude towards PowerShell makes me think you either haven't put much time into using it (if any) or haven't touched it since the 1.x days (even then the benefits over a string-based shell…

I don't know, most of the people who are replying seem to be quite rude about it. I certainly judge software by the community and I'd hate to need a question answered by them. /s As for actually trying it... I'd love to, but every time I do I come up against limitations. Mostly because none of the projects I use write shell scripts for powershell. But again, that doesn't justify PS being the only one that gets any of…

I think the rudeness is mostly a response to what seemed like dismissiveness with an apparent lack of personal experience. I had a hard time containing my incredulousness as well to be honest.

As far as official attention goes, I think Microsoft is right to stay focused. Third parties can and should feel free to build their own solutions though.

Post reply on HN