X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=JGLj5jZwbLDgWXi3OeN72vTvO8IkM3HIGMfx/bk7lx1skNWkGCr8q
	4N364pLvoj9cq2FKFIki3RmH4GLBhZIu7Ww4fK9VikMJsqxaACiexUkvhQAGUH3+
	8pgOyNcybYeDdV9uyMeqTE7+BQMCQF6y49CCcM96JEiNfZ+8vjtyjs=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=ROrkHSmEtggm78Q3itkZevaoA6s=; b=dhP6/jUCOCPRNIswWX4eQcu/Ms7D
	3TLVeNWpYwOVGZ2EgETKqk7ZZId3S5D31c1RbuO+R3Oe7DjGsmxaE9J0e/dSvwdY
	MxR3n6bK2xNypIpQPFaDrmkPbzovD080Gwkhx4evrwrgfSrEue8KobzbuCudXfTm
	y0zGa1yxZ6xWO8U=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Mon, 14 Apr 2014 10:08:07 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Still testing needed: New passwd/group AD/SAM integration
Message-ID:	<20140414080807.GI3271@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<20140410145323 DOT GB2437 AT calimero DOT vinschen DOT de> <5346B667 DOT 3040704 AT breisch DOT org> <20140410152809 DOT GD2437 AT calimero DOT vinschen DOT de> <5346E55D DOT 6020405 AT etr-usa DOT com> <20140410190424 DOT GK2437 AT calimero DOT vinschen DOT de> <5346FCF9 DOT 5000908 AT redhat DOT com> <20140411121948 DOT GC23281 AT calimero DOT vinschen DOT de> <818978797 DOT 20140413143439 AT yandex DOT ru>
MIME-Version:	1.0
In-Reply-To:	<818978797.20140413143439@yandex.ru>
User-Agent:	Mutt/1.5.21 (2010-09-15)

--6cMF9JLEeZkfJjkP
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 13 14:34, Andrey Repin wrote:
> Greetings, Corinna Vinschen!
>=20
> > What bugs me a bit is what this means for applications which expect
> > fixed usernames.  Sshd, for instance, expects the fixed username
> > "sshd" right now when using privilege separation.  I discussed this
> > with the OpenSSH devs, and they understand the problem, but they think
> > this should be handled by a Cygwin-specific function.  So there's some
> > extra work in it for me to get OpenSSH up to speed with this change,
> > but I fear I'm not the only one.  The more configurable stuff like this
> > is, the more complicated it gets maintaining some packages.
>=20
> I really don't see a problem. Is this implementation-dependent issue?
> 99% you are operating within "current domain" and do not need to specify
> domain prefix at all.

Uh, but you're missing the situation where the machine is a domain
machine but the privilege separation account "sshd" is created in
the local SAM.  That's what the ssh-host-config script might do.
Sshd will have to use MACHINE<separator>sshd as username for privsep
in this case.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--6cMF9JLEeZkfJjkP
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5HKJ
-----END PGP SIGNATURE-----

--6cMF9JLEeZkfJjkP--

- Raw text -