delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2002/07/23/10:52:32

Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Tue, 23 Jul 2002 08:02:59 -0700
From: David MacMahon <davidm AT smartsc DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Fwd: Re: cron and NT domains
Message-ID: <20020723080259.B1637@SmartSC.com>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20020723104728 DOT A13588 AT cygbert DOT vinschen DOT de>
Mime-Version: 1.0
User-Agent: Mutt/1.3.22.1i

On Tue, Jul 23, 2002 at 10:47:28AM +0200, Corinna Vinschen wrote:
> On Mon, Jul 22, 2002 at 07:23:30PM -0700, David MacMahon wrote:
> > So are you saying that IF one is running Win 2K or XP AND using an
> > active directory server AND the active directory server is configured to
> > disallow anonymous access, THEN cygwin apps like cron and sshd are
> > unable to switch user context to a domain user without a password?
> 
> Not only Cygwin apps will have that problem then.

Right.  I should have said "...THEN any app (including Cygwin's cron and
sshd) will be unable to switch user context to a domain user without a
password".

> > If so, shouldn't that be in a README somewhere?  If that's not what
> > you're saying, how can I fix my setup (short of asking the sysadmins to
> > change the permissions, which is out of the question)?
> 
> Use a local account for running cron jobs (not cron!).

That's what I've been doing.  When you say "not cron!", do you mean "not
a user called cron"?

> Other than that, thanks to Jason's report we already looked into this
> but AFAICS, even the changed Cygwin won't help you currently.  I'm
> thinking about a small patch which would allow you to work with only
> the user data given in /etc/passwd and /etc/group to change user context.

If that works, it would be great!  Maybe if the Access Denied error is
returned when trying to get the group info then you could revert using
the /etc/* info.

Thanks,
Dave

-- 
David MacMahon, President
Smart Software Consulting
http://www.smartsc.com

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019