X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=yL9mHhH4mXN+ZLKR
	RcylbwPGsfdS+43plTDcBD4iH0IOes8p/Et30xzRd4hpXXwQuPXo9PdH2DbAtdPR
	sMsmO7rSUmLcX+U4P07mcWpbTezTw00Hc2wA0dOCWXK2KNP+5TcIrXYa+GI5ZxEX
	A3b7iiD3nkZCFwjXFF7bAJylbtY=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=X47byWEL7rw4t9H/EcGGKL
	qgHCg=; b=Osg7HDVfTOxqHgR/BerRLZoeJMVkgeegtEwXa8slftYuhEy2fkA4NI
	IP36k2qXQPG1xDo8yRl2M9g5BO2G+InbDecOlsxvOZgs1hpnYnLk9LKAlmEjs0lA
	dxot1bR+ThYU87OZw2mpAcNL8XPO6xE3eZGcB3TmSMUA/mY/68k6g=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-3.3 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,KAM_THEBAT,SPF_SOFTFAIL autolearn=no version=3.3.2
X-HELO:	smtpback.ht-systems.ru
Date:	Sun, 13 Apr 2014 14:18:47 +0400
From:	Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To:	cygwin AT cygwin DOT com
Message-ID:	<1723507354.20140413141847@yandex.ru>
To:	Corinna Vinschen <cygwin AT cygwin DOT com>
Subject:	Re: Still testing needed: New passwd/group AD/SAM integration
In-Reply-To:	<20140410145323.GB2437@calimero.vinschen.de>
References:	<20140410145323 DOT GB2437 AT calimero DOT vinschen DOT de>
MIME-Version:	1.0
X-IsSubscribed:	yes

Greetings, Corinna Vinschen!

> The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again.
> It contains the latest crazy ideas in terms of the user and group
> account creation without requiring the /etc/passwd and /etc/group
> files.

> Not a lot has changed since we made a break to test for 1.7.29,
> but there's one important change I'd like to point out:

> * cygserver now provides system-wide passwd/group entry caching.

>   All processes started *after* cygserver will try to fetch passwd
>   and group entries from cygserver.  While this is probably a bit
>   slow at the start, the longer cygserver runs, the more information
>   is present and later started processes will get the information
>   with all due speed.

Does this mean that I could benefit from running cygserver in local
environment?
Specifically, if I'm using Cygwin tools outside Cygwin shell?

> I attached the latest incarnation of the documentation for this
> major change to this mail.

> However!

> After sweating about some of the details I created in my scrubby mind
> back in January/February, I'm not so sure anymore if some if was really
> such a bright idea.

> Especially two problems cropped up in discussions with local Cygwin
> users:


> * Support for Cygwin user names different from the Windows username.

I think I said it before, but I'll just repeat that I don't see this as a
feature.
Confusion option, at best. The worst case you've just outlined below.

>   Fixing this problem leads to terrible performance.  Obviously Cygwin
>   doesn't know if "yoghurt" is a local or an AD account.  Or, FWIW, an
>   account in some trusted domain.  Finding "kefir" in the SAM of the
>   local machine requires to enumerate *all* accounts, until the account
>   with
>   
>     <cygwin name="kefir" .../>
> 
>   is found.  Even worse in AD.  An ldap query is required which searches
>   for an account with uid="kefir".  The uid attribute is not indexed by
>   default.  Same for all trusted domains.


> * db_separator in /etc/nsswitch.conf

>   Is it really such a good idea to have a configurable separator
>   char in user and group names?  Is it important that it is
>   configurable?  Is '+' a good choice for the default separator?
>   Wouldn't the backslash a better and, perhaps, only choice?

The "+" as a separator was conceived in *NIX because backslash has a long
history of being a way-too-meaningful escape character.
(Though, you know it, I'll just say it for other interested parties.)
I don't have an opinion on it, but I tend to favor native semantics, means,
the backslash.
If anyone are familiar with modern state of preferred domain separator
in Samba 4, would that effect the decision?


--
WBR,
Andrey Repin (anrdaemon AT yandex DOT ru) 13.04.2014, <14:11>

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -