X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=MrXcGOF+84WwrNF3rpCTut1tAUl/eJjQLxkI+H7Wpjy9V3SVbBz8q
	DMq6h5utOgDKJLySrGu6wrFKulhscNDj9XM9yAThPQhDJgyo1rfWU/1LogyIG8Ar
	Mm8AcrELnrlzwuReTu+uEKqf5J9qJSs/2wiVPw/5/rqXILmEuOvFAo=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=s46KphlnLB6nTP7IeA+b17CkGkU=; b=qEJreFuOjVo5ISMj4YwNb8CjpRt6
	kUO63ISvPLJk3TtLXOzFopBLsnhzNVRgpacBZaQKvE731lszmmXD0W7Atp+GFS9H
	99Wivw7+Qg8pE+9DQwW5aRIRXNLOMbNZ899PyVH3ARoNX4vxv/obcZOfWVOIHWQ6
	xjvwsKZ4/xaHUfA=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Mon, 14 Apr 2014 10:35:14 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Still testing needed: New passwd/group AD/SAM integration
Message-ID:	<20140414083514.GL3271@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<20140410145323 DOT GB2437 AT calimero DOT vinschen DOT de> <1723507354 DOT 20140413141847 AT yandex DOT ru>
MIME-Version:	1.0
In-Reply-To:	<1723507354.20140413141847@yandex.ru>
User-Agent:	Mutt/1.5.21 (2010-09-15)

--vk/v8fjDPiDepTtA
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 13 14:18, Andrey Repin wrote:
> Greetings, Corinna Vinschen!
> > * cygserver now provides system-wide passwd/group entry caching.
>=20
> >   All processes started *after* cygserver will try to fetch passwd
> >   and group entries from cygserver.  While this is probably a bit
> >   slow at the start, the longer cygserver runs, the more information
> >   is present and later started processes will get the information
> >   with all due speed.
>=20
> Does this mean that I could benefit from running cygserver in local
> environment?
> Specifically, if I'm using Cygwin tools outside Cygwin shell?

Yes.  As long as cygserver is running, it caches and is available to
all processes.  The overhead is a single bidirectional communication=20
via a named pipe per passwd/group entry.

> > Especially two problems cropped up in discussions with local Cygwin
> > users:
>=20
> > * Support for Cygwin user names different from the Windows username.
>=20
> I think I said it before, but I'll just repeat that I don't see this as a
> feature.
> Confusion option, at best. The worst case you've just outlined below.

Yeah, the discussion so far didn't really sway me from removing this
option.

> > * db_separator in /etc/nsswitch.conf
>=20
> >   Is it really such a good idea to have a configurable separator
> >   char in user and group names?  Is it important that it is
> >   configurable?  Is '+' a good choice for the default separator?
> >   Wouldn't the backslash a better and, perhaps, only choice?
>=20
> The "+" as a separator was conceived in *NIX because backslash has a long

in *NIX?  Do you mean SFU or is there other precedent of the '+
character I'm not aware of?

> history of being a way-too-meaningful escape character.
> (Though, you know it, I'll just say it for other interested parties.)
> I don't have an opinion on it, but I tend to favor native semantics, mean=
s,
> the backslash.
> If anyone are familiar with modern state of preferred domain separator
> in Samba 4, would that effect the decision?

Quoting from the smb.conf man page:

   winbind separator (G)

       This parameter allows an admin to define the character used when
       listing a username of the form of DOMAIN \user. This parameter is
       only applicable when using the pam_winbind.so and nss_winbind.so
       modules for UNIX services.

       Please note that setting this parameter to + causes problems with
       group membership at least on glibc systems, as the character + is
       used as a special character for NIS in /etc/group.

       Default: winbind separator =3D '\'

       Example: winbind separator =3D +

We don't have the glibc/NIS problem, of course.  I'm not going to
comment on this, I'd really like to see what you guys think.  Obvious
choices are:

- Keep "db_separator", + as default
- Keep "db_separator", \ as default
- Remove "db_separator", fixed character +
- Remove "db_separator", fixed character \
- Something entirely different.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--vk/v8fjDPiDepTtA
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=seEK
-----END PGP SIGNATURE-----

--vk/v8fjDPiDepTtA--

- Raw text -