Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Message-Id:	<5.1.0.14.0.20010708171355.02c86118@pop-server.cfl.rr.com>
X-Sender:	psusi AT pop-server DOT cfl DOT rr DOT com
X-Mailer:	QUALCOMM Windows Eudora Version 5.1
Date:	Sun, 08 Jul 2001 17:17:19 -0400
To:	Corinna Vinschen <cygwin AT cygwin DOT com>
From:	Phillip Susi <psusi AT cfl DOT rr DOT com>
Subject:	Re: I can't find command su.exe
In-Reply-To:	<20010708194325.D8578@cygbert.vinschen.de>
References:	<000201c1065d$c01ce990$6464648a AT ca DOT boeing DOT com>
	<0DAEDF148988D411BB980008C7E65D2E03A14C18 AT esealnt416>
	<000201c1065d$c01ce990$6464648a AT ca DOT boeing DOT com>
Mime-Version:	1.0

How is it worked out?

If you just use LogonUser(), not only do you have to have the users 
password, but you also have to have the TCB privilege, which is 
silly.  Unless you have a service that runs as system and accepts logon 
requests from clients, and gives them back the token?

I was actually thinking of writing a replacement authentication dll that 
would punt to the standard one unless a special username syntax was 
entered, something like administrator!luser, and if the administrator 
password was correct, it would log on as luser.  This would be nice because 
if you installed it on a domain controller, it would handle logon requests 
from all clients in the domain, for local and remote access, not just local.

At 07:43 PM 7/8/2001 +0200, you wrote:
>On Fri, Jul 06, 2001 at 08:13:26AM -0700, Michael A. Chase wrote:
> > ----- Original Message -----
> > From: "David Larsson (ERA)" <David DOT Larsson AT era DOT ericsson DOT se>
> > To: <cygwin AT cygwin DOT com>
> > Sent: Friday, July 06, 2001 01:00
> > Subject: RE: I can't find command su.exe
> >
> >
> > > OK, so what's the differenses between cygwin su and any other *nix su?
> >
> > Currently there _isn't_ a Cygwin su and there can't be until some 
> issues get
> > worked out about how to match the UNIX security model to WinNTs (very
> > different) and Win9x (none).  It is being worked on, but I wouldn't expect
> > anything until summer is over.
>
>The issues are worked out as far as I can see. However, `su' would
>still need some minor tweaking to support changing user context with
>and without password and to solve an issue concerning environment
>variables. I will probably not have the time to do that in the next
>few weeks but I could give some advice if somebody volunteers.
>
>Corinna
>
>--
>Corinna Vinschen                  Please, send mails regarding Cygwin to
>Cygwin Developer                                mailto:cygwin AT cygwin DOT com
>Red Hat, Inc.

   -->Phillip Susi
      psusi AT cfl DOT rr DOT com


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -