X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=L7Rt2AndnVh3xEbwJ9V/9tgTJG18DVWxM6ILGM9lLK2CywvUECmnE
	iznuPePoakLgUXnqVmfuMb4358Q41K0VrROF6gUerX80zDkNUFzR4D6fVrLyFl4g
	QFgxxyvNljIxjj8aq43glaWkld/gcZv+r6c8uOt/VP/rG1InQ0KMP8=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=dnWWa6/FrAmzruBT4UsFHZ3i8ng=; b=UQytl080RDJGbnPa1lYLt3NdgzDg
	6a4AOSgjMslTd+CooKXOuyv8PqsY9GTLgGMuDbueqx/u3OT6XswQBbVo+600T1NP
	BpjAXdy9IiEc9kMeBX1fKvohHX9BcyceHuvyemFfjYhMx2JVfk+MF/F2R6XSAW8P
	NXf7+ctEGRA51FI=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 7 Jan 2015 18:41:22 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.34-003 (Christmas/New Year release)
Message-ID:	<20150107174122.GB4190@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<announce DOT 20141217131626 DOT GR10824 AT calimero DOT vinschen DOT de> <87oaqynpzq DOT fsf AT Gertrud DOT fritz DOT box>
MIME-Version:	1.0
In-Reply-To:	<87oaqynpzq.fsf@Gertrud.fritz.box>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--qcHopEYAB45HaUaB
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Dec 20 19:19, Achim Gratz wrote:
> Corinna Vinschen writes:
> > The major change in this new release will be the new method to read
> > account (passwd and group) information from the Windows user databases
> > directly, without the requirement to generate /etc/passwd and /etc/group
> > files to generate Unix-like uid and gid.
>=20
> I've just set up a box with Win8.1 Core as a build machine.  I've used
> the SAM desc schema and removed /etc/passwd and /etc/group and it works
> great.
>=20
>=20
> Here's one thing I still think warrants some improvement (in an AD
> environment, at least):
>=20
> Previously I've always used /etc/fstab.d/<user> for mounting the users'
> home directory onto /home/<usr>.  That worked except for login via ssh
> publickey since at the time ssh checks for the authorized keys that
> mount isn't set up yet.  So I've copied those files into a different
> directory and told sshd to look there, which means I had to set up each
> user manually on the server.  I could now replace that mapping via AD,

No, you couldn't.  The cygwinFstab attribute exists in the schema,
but the functionality isn't implemented yet (and won't be for a while).

> but that would produce some rather unwieldy and long paths for certain
> users.  So, instead of specifying the users' home directory directly I
> would like to mount or auto-mount /home/<user> to the actual (network)
> home directory.

Hmm.  That's tricky.  There's no automatism for that yet.  Nsswitch.conf
only describes how to create the passwd entry for a user.  It does not
add any mechanism to run at user context switch.  And not everybody
would like to have something like that so it needs configuration.

I'm not opposed to stuff like that if it simplifies admin's job, but on
one hand we should evaluate first if there's a way to script that,
rather than to hardcode it into the Cygwin DLL, and on the other hand
it's not something I'd like to add for the first cut of 1.7.34...

> Another thing is that the Cygwin home directory is always a
> sub-directory of the windows home in our environment, so it would be
> useful if there was a placeholder for the windows home directory (%H or
> some such) for the /path override or even the schema entries to use.

Not unreasonable but tricky.  %H would be an absolute path which
collides with the current implementation in terms of the leading slash.
Hmm.

> > For your convenience I wrote new documentation.  Since this is a TEST
> > prerelease, the new documentation is not part of the official docs yet.
> > Rather have a look at
> >
> >   https://cygwin.com/preliminary-ntsec.html
>=20
> > - When spawning a process under another user account, merge the user's
> >   default Windows environment into the new process' environment.
>=20
> I think this change pulls in additional environment variables with
> windows path components when starting programs via cygserver/sshd that
> are not a login shell (and perhaps when the user's login shell isn't
> bash, so that profile doesn't get run), most notably PATH, TMP and TEMP.
> If these variables are used later on by programs expecting a POSIX path
> there, then things break.

Did you try it?  The idea was that these variables are converted to POSIX
on the way in...


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--qcHopEYAB45HaUaB
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=9gij
-----END PGP SIGNATURE-----

--qcHopEYAB45HaUaB--

- Raw text -