delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2014/07/30/09:47:42

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:date:from:to:subject:message-id:reply-to
:mime-version:content-type; q=dns; s=default; b=HMtL0H+0bCW+a6je
UOuoO5rfHvoqsLAzMQBL+m3joN90BfDzK6ESwqcpROs9bAZ8Nbl8G7IXUNWW2zSX
gq5gQ6fRAINlJoWn8gDMssR/qHouQA9eXGlK2gHSJic8XmtpWD268Omvg7Q0LapV
Uc8PIE6Iybsji9PlYpWyiK+SKKw=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:date:from:to:subject:message-id:reply-to
:mime-version:content-type; s=default; bh=c4t0WzSD9Vfu1JtpNAkPj4
Qmn/o=; b=AZZyD/WtITBFxuXERTWUwJOEOLWbzlTggzd2jC9pkWRthmMB5XDBWO
bBLA7f5eg2Z3wNJc6kgcc9ILtqMJAfLK06PEmIVBJfOgZhM2D4SYb8/3NJV3D1nn
k25HcgqGKjUIQipHtqTHMx5IaJmFtrPMCU15BIIGakCqEaynFUiEI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-4.6 required=5.0 tests=AWL,BAYES_50 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Wed, 30 Jul 2014 15:47:16 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Simplify AD integration?
Message-ID: <20140730134716.GM25860@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
User-Agent: Mutt/1.5.23 (2014-03-12)

--16qp2B0xu0fRvRD7
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi folks,


here's a set of question to those of you interested in the new
passwd/group functionality.  This already has been discussed partially,
but there was no conclusion.

Right now, there's a lot of variability in the user names, based on the
/etc/nsswitch.conf settings db_prefix and db_separator.

The separator char is a '+' by default but can be replaced with other
ASCII chars.  db_prefix allows three styles of user naming conventions:

  Default is 'auto':

    builtin accounts;   "+SYSTEM", "+LOCAL", etc.
    primary domain      "corinna", "cgf", ...
    other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

  If set to 'primary':

    builtin accounts;   "+SYSTEM", "+LOCAL", etc.
    primary domain      "MYDOMAIN+corinna", "MYDOMAIN+cgf", ...
    other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

  If set to 'always':

    builtin accounts;   "NT AUTHORITY+SYSTEM", "BULTIN+LOCAL", etc.
    primary domain      "MYDOMAIN+corinna", "MYDOMAIN+cgf", ...
    other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

"Primary domain" here is either the primary domain of the machine or the
local SAM if the machine is no domain member.  "Other domain" here is
either a trusted domain or the local SAM for domain machines.

Together with the variable separator char this is an awful lot of
variability, which has the potential side effect to complicate the
code *and* debugging.

Also, the leading '+' for builtin accounts results in some downsides,
one of them for instance the fact that `chown +x' assumes that x is a
numerical uid or gid.  Thus `chown +SYSTEM ...' fails.  On the other
hand it simplifies the account handling inside of Cygwin.

So I'd like to ask a few questions to which I'd like to have some brief
answers, kind of like a poll, to get a better idea how we should
proceed:

1. Shall we remove the leading '+' from the builtin account names
   or shall we keep it?

2. Shall we stick to '+' as the separator char or choose another one?
   If so, which one?

3. Shall we keep the `db_prefix' variability or choose one of
   the prefixing methods and stick to it?  If so, which one, auto,
   primary, or always?

Bonus question:

4. Should Cygwin downcase all usernames when generating the Cygwin
   username, so, if your Windows username is 'Ralph', your Cygwin
   username will be 'ralph'?


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--16qp2B0xu0fRvRD7
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=ujaM
-----END PGP SIGNATURE-----

--16qp2B0xu0fRvRD7--

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019