delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2015/02/18/06:07:30

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:reply-to:date:from:to:subject:message-id
:mime-version:content-type; q=dns; s=default; b=edyn8ZG5BSS1B+8k
G3QbuGewDcD3SnA/8d7KEL3R5TmN57ZFXIT+AkLNQskrzhQJcPPvL88QsH7G/aX4
dc16fkRjg6FWZTC6CflggDw73r9yJy+KLWocACTjHKTbT5JskwUXqCTKJlRZsdRW
sR5ky2LwJhVqViMAbotGor81Ukw=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:reply-to:date:from:to:subject:message-id
:mime-version:content-type; s=default; bh=rmSrTtN5fCY2Fv4glzrh7A
/SvBg=; b=NgYRoydcQCM4CdnzVfi1wGPGMZ5kxbWNPS1SYYEItVkS0NxZYbxSc0
hlANwwq0uBl0DEw3cXii0rmWasyT34/TNmD7iUWO2eITfgGAIeZKw5R2dnhvWzWx
Z4gR3t+mLRbgD5NRcwm/FTBwImVYDIt6wtP7K0mQ0M3uSNsCYL/8w=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-HELO: localhost.localdomain
Reply-To: cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=1.7 required=5.0 tests=AWL,BAYES_50,EXECUTABLE_URI,KAM_EXEURI,SPAM_BODY1 autolearn=no version=3.3.2
Date: Wed, 18 Feb 2015 11:59:37 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.35-0.3
Message-Id: <announce.20150218105937.GA28211@calimero.vinschen.de>
MIME-Version: 1.0
User-Agent: Mutt/1.5.23 (2014-03-12)

Hi Cygwin friends and users,


I released another very early TEST version of the next upcoming Cygwin
release.  The version number is 1.7.35-0.3.

This release introduces a revision of the LDAP calls done to fetch
information from the DC.  By limiting the search scope, the calls should
now be faster even in bigger environments.  Please give it a try with
activated "db" settings for passwd and group entries in /etc/nsswitch.conf

  passwd: db
  group: db

Please report back your experience, especially if you're suffering
from "slow startup" problems.

====================================================================
If you're not familiar with the new account information handling
introduced in Cygwin 1.7.34, I suggest to read the new documentation
at https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping
====================================================================

The essential changes in this test release are:

- Trying to speed up LDAP searches by limiting the search scope.

- The default settings for db_home, db_shell, and db_gecos in case
  there's no /etc/nsswitch.conf file, or if they are not mentioned 
  in /etc/nsswitch.conf, are now set to just the fallback, which is

    db_home: /home/%U
    db_shell: /bin/bash
    db_gecos: <empty>

  This means, if you don't set these values in /etc/nsswitch.conf,
  there's no reason for Cygwin to access the DC via LDAP.

- Next, I revamped the code fetching values over LDAP to do the actual
  fetching only if it's really required.  So far, the LDAP call was made
  all the time, even if the settings in /etc/nsswitch.conf didn't
  require that.

- Last but not least, the primary group of the current user account is
  not read anymore from the LDAP call, but simply from the current user
  token of the user.

- Group account requests don't access LDAP at all, unless values
  for the UNIX gid <-> Windows SID mapping are required (see
  https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nfs and
  https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-samba
  for an explanation).

All in all, that *should* have the desired effect to avoid all LDAP
calls to the DC for the current user account and its primary and
supplementary group accounts in the default case, even if you only
use the "db" setting for passwd and groups in /etc/nsswitch.conf:

  passwd: db
  group: db

The only downside for other scenarios is that the default settings
in /etc/nsswitch.conf don't catch the "cygwin desc" settings for
db_home, db_shell, and db_gecos anymore by default.  If you want to
use them, you now have to tweak /etc/nsswitch.conf, but most more
complex scenarios will require that anyway.


Other changes in this release:
==============================

- New APIs: cabsl, cimagl, creall, finitel, hypotl, sqrtl.

- Fix /proc/cpuinfo multicore info on Intel CPUs.
  Addresses: https://cygwin.com/ml/cygwin-apps/2015-02/msg00077.html
        
- Generate unique inode number for /dev/tty under all circumstances.
  Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00211.html
        
- Fix handling of PATH search in execlp and other calls to honor mount flags.
  Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00119.html

- Remove a debug message accidentally printed to the terminal window
  if an application calls fcntl(F_SETFL) erroneously.

- Regression in 1.7.34: acl(SETACL, ...) overwrote the incoming acltent_t
  array for bookkeeping purposes while iterating over its entries.  This
  broke reusing the acl in the calling application (e.g. setfacl).
  Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00304.html

- 64 bit: Export forgotten symbol __mempcpy.
  Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00394.html


To install 32-bit Cygwin use https://cygwin.com/setup-x86.exe
To install 64 bit Cygwin use https://cygwin.com/setup-x86_64.exe

If you're already running a 32 bit version of Cygwin on 64 bit Windows
machines, you can continue to do so.  If you're planning a new install
of Cygwin on a 64 bit Windows machine, consider to use the new 64 bit
Cygwin version, unless you need certain packages not yet available in
the 64 bit release.


Have fun,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019