X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=kgtpcC+n+Ck6V7luGy13iDGL3Kx8JjeKhqdkv8zVG/eA8rdKYznmk
	7N/VO6N5ASvhmJx9HcWCsprK/WTmsLbMLRKFeAVfsvgB0x4pVZAlbvtzi7vcFo2i
	7qpD1S2RiFn7OGLD1YMDY/Nn/nbx0tmjs1ue8C96bPUG5QtQ7g8x80=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=V9p+eBhWff+AhWXETciRwknBDjQ=; b=kFeVS88uudEYRoURy9dUnBCNqoZ3
	tnfOxl94DkjAHqq2opaGP9McC2Y8pOo0coCCpvB865XBsndLecfdHrj2pxROo7dx
	kqmVGdnBGUYWaE73UOV1vS6z/kV+BpQGqcXb4aypu4XW43WxemQtkwfzJYt0ZVdR
	V292MyMUQedbTJQ=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.9 required=5.0 tests=AWL,BAYES_00,SPAM_BODY1 autolearn=no version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 21 Jan 2015 21:43:21 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.34-003 (Christmas/New Year release)
Message-ID:	<20150121204321.GC19127@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<20150108171825 DOT GB15791 AT calimero DOT vinschen DOT de> <8761cez7qi DOT fsf AT Rainer DOT invalid> <20150112103834 DOT GA15213 AT calimero DOT vinschen DOT de> <1317243972 DOT 20150112155044 AT yandex DOT ru> <20150112142131 DOT GK15791 AT calimero DOT vinschen DOT de> <462951490 DOT 20150113065357 AT yandex DOT ru> <20150113090938 DOT GR15791 AT calimero DOT vinschen DOT de> <1408516413 DOT 20150121024550 AT yandex DOT ru> <20150121093743 DOT GA8272 AT calimero DOT vinschen DOT de> <20150121102026 DOT GB8272 AT calimero DOT vinschen DOT de>
MIME-Version:	1.0
In-Reply-To:	<20150121102026.GB8272@calimero.vinschen.de>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--eRtJSFbw+EEWtPj3
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan 21 11:20, Corinna Vinschen wrote:
> On Jan 21 10:37, Corinna Vinschen wrote:
> > On Jan 21 02:45, Andrey Repin wrote:
> > > The setup: A Win7 machine - member of a NT4-style domain. (No AD yet.)
> > > [...]
> > I'm wondering if that's a side effect of using a NT4 domain.  This isn't
> > supported in Cygwin anymore for quite some time.  After all AD has
> > replaced NT4 15 years ago.  All the LDAP calls to fetch the AD attribut=
es
> > won't work in an NT4 domain, for instance.
> >=20
> > But even if all the calls to the DB fail, the /path scheme shouldn't be
> > affected.
>=20
> But it is...  I just inspected the code in CYgwin fetching the extra info
> for domain accounts.  Due to the way this works - a single ldap call to
> fetch all AD attributes - the evaluation only takes place after the LDAP
> call was successful.  This is independent of using non-AD schemes, basica=
lly
> like this:
>=20
>    if (is_domain_account)
>      {
>        [...]
>        if (cldap->fetch_ad_account ())
> 	 {
> 	   gid =3D posix_offset + cldap->get_primary_gid ();
> 	   home =3D cygheap->pg.get_home (cldap);
> 	   shell =3D cygheap->pg.get_shell (cldap);
> 	   gecos =3D cygheap->pg.get_gecos (cldap);
> 	 }
>=20
> The reason here is that we have to fetch the gid value anyway, so the
> code is relying on the ldap call.  The get_home(), get_shell(), get_gecos=
()
> methods get the full content fetched from AD and only then creates the
> pw_dir, pw_shell and pw_gecos values based on the content of nsswitch.con=
f.
>=20
> So, yes, this is a direct result of not supporting NT4 domains anymore.

FTR, Andrey and I were tackling this problem off-list, and I now added a
small, non-intrusive piece of code to allow fetching account info from
an NT4 domain.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--eRtJSFbw+EEWtPj3
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=7jnF
-----END PGP SIGNATURE-----

--eRtJSFbw+EEWtPj3--

- Raw text -