X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=uucZtKGqqfBbokAVhv1pEpNotvWDwzyQN6G+95T8KirfmnCAYzgLi
	e+h5+r//qRCSGoQ1V+mk4rXZGi9sC8sOkE5Gv63QL9fDoEt8CFB+Ox8cYmdmexPt
	kFI/UOJd33z/meNs68dpd1MhWkY5nCFEiOlHhth8lSYUSgK0kduDAQ=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=+r/P5T2eIJsfGFOoDovWEKLGufI=; b=vPKhYiyAeqXvwId5yw0YQPRYpoaf
	9a3qm9mewPGjptyCxUH19DaaQdXqx8XLrqq5AFzmwlBbMuDWyWqAZOzlasFbtckR
	zH3Ayyu/7x4XVSx3c46hSGp1bxYanoscao/lGvx1J6ptHPY4mH91udHOHzKuVde3
	E6C7fxTEg3MwJFk=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 22 Oct 2014 15:54:24 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.33-0.1
Message-ID:	<20141022135424.GB18857@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<announce DOT 20141022092323 DOT GH32374 AT calimero DOT vinschen DOT de> <C9D37D92E903B347A31B9CF82643BA28072F9229 AT 046-CH1MPN1-043 DOT 046d DOT mgd DOT msft DOT net>
MIME-Version:	1.0
In-Reply-To:	<C9D37D92E903B347A31B9CF82643BA28072F9229@046-CH1MPN1-043.046d.mgd.msft.net>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--aVD9QWMuhilNxW9f
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Oct 22 13:35, Habermann, Dave (DA) wrote:
> Read through https://cygwin.com/preliminary-ntsec.html and in general
> found it to be quite useful.  I'm hoping to do some testing perhaps
> later this week or early next.  I have a couple of questions:
>=20
> 1) Any thoughts about the rough timing of this "going live"?

I'm heading for "at some arbitrary day in November".

> 2) The documentation says (as I read it): Well-known/builtin accounts
> named as in Windows, then (for domain member) "Local machine accounts
> of a domain member machine get a Cygwin user name the same way as
> accounts from another domain: The local machine name gets prepended".
> As I read this, cyg_serv account (under which I currently run SSHD)
> would now have a new name MYMACHINE+cyg_serv.  Am I reading this
> correctly?  Is there some reconfiguration I'll need to do to get SSHD
> to run properly?

In theory, no.  The last OpenSSH update, 6.7p1-1, alreadyd contained
the upstream fix to work with local sshd accounts which have the
machine name prepended.

> 3) I also read "Cygwin implements the Solaris API to access Windows
> ACLs in a Unixy way" (although your email says "Revamp Solaris ACL
> implementation to more closely work like POSIX ACLs are supposed to
> work").  So is it Solaris or is it POSIX, and if Solaris then I wonder
> why since it seems that everywhere else you've tried to be as POSIX as
> possible.

Solaris ACLs *are* POSIX ACLs :)

The difference is not how these ACLs look like, but only in the API
used to access the ACLs.

The Solaris API was finished and working at the time I implemented this
POSIX ACL support in Cygwin, while the POSIX draft 1003.1e was still in
the works, and our role model Linux didn't even now how to spell ACL.
These days, Linux implements the POSIX 1003.1e draft, (which, funny
enough, has been withdrawn long ago), while Solaris and Cygwin provide
the original Solaris API.

What has chnaged with 1.7.33 is that the handling of POSIX ACLs is
now much more aligned with how they are implemented on Solaris or=20
Linux.  Especially the CLASS_OBJ stuff didn't exist before, but now
it gets emulated.

> Thanks for all your hard work on this, I will certainly be one of the
> benefactors (12 Mb group file, takes hours to refresh so not done
> since this time last year).

Cool, thank you!

I'm really looking forward to this release.  The account handling
changes is something I had on the TODO list for ages, and the new
SEH-based internal exception handling is a great benefit for the 64 bit
version.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--aVD9QWMuhilNxW9f
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=b15n
-----END PGP SIGNATURE-----

--aVD9QWMuhilNxW9f--

- Raw text -