X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=h/eD4z4bDZN714ydkSd8G7cPajvAMtxMkQCMD1aE7cbJvT96yIxCX
	uQPKS3HKuoAe3tumVzncPRX5F3eSeowNYXRgzIcS1DweI8FBB5VaTnATtS9CeBFJ
	ePGvqS1re84BXh5c5aSzWRPk0l33Qy+SmEUn6x/MyYfstLLS78MMQw=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=rLsloPo5xH06O5MJJ8KNGtS8DmI=; b=EFHHIn1ivW7z+46R18fjpjYRFiaJ
	YogJXQm/QD9luvH51FleGg1cYPT4LHtlpgBUXh3gCyaQDtBa+hxizekvlNyUfQPQ
	SGGjDPVAS14ncE8N5uzelPDwaLpcdHsEHoHjhMHMJnCUJNaLYKcfhRZe7Rjkohec
	J/ZRO0jOSiALgwI=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Fri, 7 Nov 2014 11:16:59 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.33-0.6
Message-ID:	<20141107101659.GU28195@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<announce DOT 20141105164319 DOT GA31314 AT calimero DOT vinschen DOT de> <545B17B8 DOT 5010509 AT t-online DOT de> <20141106164915 DOT GG28195 AT calimero DOT vinschen DOT de> <545BBF4B DOT 4020400 AT t-online DOT de> <20141106185019 DOT GK28195 AT calimero DOT vinschen DOT de> <545BD14A DOT 8080803 AT t-online DOT de> <20141106200635 DOT GP28195 AT calimero DOT vinschen DOT de> <20141106204222 DOT GQ28195 AT calimero DOT vinschen DOT de> <545C68BA DOT 3050007 AT t-online DOT de>
MIME-Version:	1.0
In-Reply-To:	<545C68BA.3050007@t-online.de>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--KM+e2hnYAO+MCJ5e
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov  7 07:37, Christian Franke wrote:
> Corinna Vinschen wrote:
> >On Nov  6 21:06, Corinna Vinschen wrote:
> >>On Nov  6 20:51, Christian Franke wrote:
> >>>Corinna Vinschen wrote:
> >>>>On Nov  6 19:34, Christian Franke wrote:
> >>>>>But why does
> >>>>>   mkpasswd -l (no host) -- adds a prefix
> >>>>>   mkpasswd -l THISHOST -- does not add a prefix
> >>>>>when the machine is in a domain? Not consistent, IMO.
> >>>>That's right.  The reason is that the machine name is treated as a
> >>>>foreign machine.  In theory, this should always generate names
> >>>>with prefixed machine name, but this is an entirely different
> >>>>code path in mkpasswd/mkgroup.  I guess this should be fixed.
> >>>>
> >>>>I wouldn't be unhappy about help...
> >>>I would only fix it back to the old behaviour (mkpasswd -l =3D no pref=
ix),
> >>>sorry :-)
> >>>
> >>>At my real job we run several build & test machines which are members =
of a
> >>>domain but use various local test user accounts (with no collision with
> >>>domain users due to name space rules). Loosing the ability to use
> >>>prefix-less local user names would break various existing test scripts
> >>>(which are also used on Linux).
> >>>
> >>>Generated emails would have a from address with HOST+USER name part wh=
ich
> >>>might give interesting results if the mail system somehow interprets t=
he
> >>>NAME+EXTENSION address syntax...
> >>>
> >>>So there are use cases where prefix-less local user names are needed. =
This
> >>>should be still supported, e.g. by mkpasswd -l, IMO.
> >>But then... why not keep mkpasswd -L and use that instead?
> >On second thought, it's completely wrong to allow printing local
> >accounts from another machine without prefix.
>=20
> I agree.
>=20
> >In theory there should be only one option -l [machine], which prints the
> >local accounts of the current machine unprefixed (standalone machine) or
> >prefixed (domain machine), and always prefixed for a foreign machine.
> >The -L option can just go away.
>=20
> I disgree.
>=20
> Why not keep the old behavior of -l/-L for user names of current machine =
for
> those uses cases which rely on it?

You are always free to change the passwd/group files manually:=20=20

  $ mkpasswd -l | sed -e 's/^[^:]*+//' > /etc/passwd

Does a system tool really have to generate a scheme which might lead
to collisions?  The Administrator account is only one of them:

  $ mkpasswd -l -d | sed -e 's/^[^:]*+//' | grep Administrator:
  Administrator:*:197108:197121:U-LOCAL_MACHINE\Administrator,[...]
  Administrator:*:1049076:1049089:U-DOMAIN\Administrator,[...]

> Those users who are happy with prefixed
> local user names and non-prefixed domain user names would simply no longer
> need to use mkpasswd (which is good).
>=20
> Package search shows 156 usr/bin/*-config scripts. How many of these use
> mkpasswd?

I don't know, but I'm trying to fix up at least the ones I have under
control.  The other will follow over time.

> BTW: None of my Linux machines have local user names with own HOSTNAME as
> prefix :-)

Your Linux machines usually don't have to maintain user and group accounts
from various account DBs.  This is all nice and easy in a single domain
scenario, but as soon as you maintain multiple domains, you will have
name collisions.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--KM+e2hnYAO+MCJ5e
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=50IY
-----END PGP SIGNATURE-----

--KM+e2hnYAO+MCJ5e--

- Raw text -