X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=rxUPFoxhNxKo9cuXGyDgmb/QUyX9E72DLCq4Sy8AMNDULMyE3Y5L2
	TOf3pmVnU/kJBfhayeK/vbnn4I2BgorHCRu9F2wCQ8gHGFi6KtkGOcFNAjtVHhB6
	n0qYHLCr9t10c2QSMHM+sP0mYsaRg3kZ5y0NeLzSIkYAheBwImEoCg=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=twRfID1mW3G9J0V7W9j1dJIO7k8=; b=JTtz1KUmmihR1o+6xxlY1QsSSeUf
	PERBgTj9gSlX45+fzdxBjyVvxr4omN+cbVY6vFkVHIMfw8/qVIlgqIUKSUuIcoLD
	pzo6ds53g88SFaGgCKPCtMjGZy1seYYb6nqRcNOzi9hatOdoGLg4WIkXpon/K0SH
	TcRhJiOCY8MbkeQ=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 30 Jul 2014 17:01:00 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Simplify AD integration?
Message-ID:	<20140730150100.GO25860@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<20140730134716 DOT GM25860 AT calimero DOT vinschen DOT de> <loom DOT 20140730T161203-159 AT post DOT gmane DOT org>
MIME-Version:	1.0
In-Reply-To:	<loom.20140730T161203-159@post.gmane.org>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--/rDaUNvWv5XYRSKj
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jul 30 14:38, Achim Gratz wrote:
> Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > 1. Shall we remove the leading '+' from the builtin account names
> >    or shall we keep it?
>=20
> I'd rather keep it since it's a good reminder where that comes from.
>=20=20
> > 2. Shall we stick to '+' as the separator char or choose another one?
> >    If so, which one?
>=20
> WJFFM at the moment, so I don't see a pressing need for variability.
>=20
> > 3. Shall we keep the `db_prefix' variability or choose one of
> >    the prefixing methods and stick to it?  If so, which one, auto,
> >    primary, or always?
>=20
> I'd rather keep this, although "auto" is all I use at the moment.  BTW,
> would it be possible to recognize PRIMARYDOMAIN+user and (auto) user be
> recognized as the same thing when auto is in effect?  The ability to
> explicitly specify the prefix even though it isn't necessarily displayed
> would most likely remove much of the potential need for variability in th=
at
> department

I'm not sure if that would work as expected. Cygwin explicitely tests
if the account name follows the current rule.  I'm not so sure what
effects it would have, if getpwnam could return another username as
the one given as parameter (apart from the case difference).

(and defuse the booby trap in chown).

Well, hmm.  If we allow to specify "NT AUTHORITY+SYSTEM" or
"BUILTIN+Administrators" even in "auto" or "primary" mode...

Unfortunately this won't help in all cases.  I used a broken example :(
The "LOCAL" account and a few others have NO domain.  Thus, they are
simply +-prefixed ("+LOCAL"), even in 'db_prefix: always' mode.

Tricky.

> If you keep it, then there's an obvious candidate missing: "local+other",
> which should prefix all accounts except the primary domain ones.

Do you mean

  builtin accounts;   "NT AUTHORITY+SYSTEM", "BUILTIN+Administrators", ...
  primary domain      "corinna", "cgf", ...
  other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

?

> So it'd be
> better to simply flag which groups to prefix, I'd think ("local", "primar=
y",
> "other") and specify this like symbolic modes in chmod, perhaps?
>=20
> > Bonus question:
> >=20
> > 4. Should Cygwin downcase all usernames when generating the Cygwin
> >    username, so, if your Windows username is 'Ralph', your Cygwin
> >    username will be 'ralph'?
>=20
> I'd be in favor of this since I've already had two users that wouldn't see
> their home directories until I figured out that they'd have their names
> capitalized in AD...  as long as Windows is unable to distinguish users
> based on the case there shouldn't be a problem.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--/rDaUNvWv5XYRSKj
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=8oDl
-----END PGP SIGNATURE-----

--/rDaUNvWv5XYRSKj--

- Raw text -