X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=hn1zqG9Jra7W51wH601TWiyuVL8GfZCBBB++NxXIFUMRcp7WtFnm4
	aVsvzLHhJHdFa66Hl3wxk2C2OFKIxtMa9WTL0elW7wiIMYTDY2HXyyyYgtM8w/Eo
	hyhFQf9YYMch2Jy60v0jYgJiRHMlicDbgty9xTh4zQ+TIUX1gx8KbQ=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=QnflmFDwksHD38lLN1wvZ+fLpqE=; b=inTfdn4YHGPK/uwnU22vw2SfjV3i
	Y1pF6bDP2UecUEIS/viUaAoxyhC3DpTPabuvV44wHOEfiGc+d7wV8HqRpVwUFMS/
	meFTtms423HG+IWPm92iMLsUInXXDrtSDuVhJhRm30WuZAh8MD6wva1gy7Ayd/yj
	MPzRNSokucO9a2I=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 25 Feb 2015 17:18:49 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: gid doesn't display correctly on SAMBA share using AD
Message-ID:	<20150225161849.GG437@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<54EDF1DB DOT 20708 AT intersystems DOT com>
MIME-Version:	1.0
In-Reply-To:	<54EDF1DB.20708@intersystems.com>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--dfOvyYudzT1RPUKx
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 25 11:01, Len Giambrone wrote:
> Using the latest cygwin:
>=20
> $ cygcheck -c cygwin
> Cygwin Package Information
> Package              Version        Status
> cygwin               1.7.34-6       OK
>=20
> I've asked my admin to update the uidNumber and gidNumber in AD.  He has
> done so:
>=20
> DistinguishedName :
> CN=3Dbuild,OU=3DGroupAccounts,OU=3DUsers,OU=3DCambridge,DC=3Discinternal,=
DC=3Dcom
>=20
> Enabled           : True
>=20
> gidNumber         : 999
>=20
> GivenName         : build
>=20
> Name              : build
>=20
> ObjectClass       : user
>=20
> ObjectGUID        : 0901b540-b044-437f-a167-53e1453eab94
>=20
> SamAccountName    : build
>=20
> SID               : S-1-5-21-112145844-1872675854-1690816760-17189
>=20
> Surname           :
>=20
> uidNumber         : 56191
>=20
> UserPrincipalName : build AT iscinternal DOT com
>=20
>=20
> The username displays correctly, but the group name does not:
>=20
> $ ls -la foo
> -rw-rw-r-- 1 build Unix_Group+999 0 Feb 25 10:52 foo
>=20
> And this is confirmed by running getent:
>=20
> $ getent passwd build
> build:*:1065765:1049089:U-ISCINTERNAL\build,S-1-5-21-112145844-1872675854=
-1690816760-17189:/home/build:/bin/bash
>=20
> $ getent passwd group
>=20
> I've read
> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch-gecos
> 'til I'm blue in the face, and I think this should work.
> What am I missing?  How can I debug?

If your admin changed your user account to have a gidNumber 999 only,
then that won't help,  Consider:  Cygwin tries to find a group with
gidNumber set to 999.  How is it supposed to evaluate the right
gidNumber value from some arbitrary user account?

What Cygwin needs to get the right connection between a Windows group
and a gidNumber value is that the *group* entry in AD itself has the
gidNumber set to the right value.

I don't know if that's really the problem in your case, but that seems
the most likely.

Please report back.  I'm excited that I'm not the only one interested
in getting this connection between unix and windows ids working :)


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--dfOvyYudzT1RPUKx
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBAgAGBQJU7fXpAAoJEPU2Bp2uRE+g1fUQAKXXBkn9mxyzTkK39meT6pOZ
PBnuVa9DUnflbKDmA8BIj6YTW5vZjAe2XlPkirQx4rgzQY+vgFZSaia4ldAUPSJ8
+32UdbJHFzD9vPxAwLQDf9IyEwQz7Zd9y0AcKPQ9PHUhvij0QMNLoNNrt7pOAWTo
O3vudz0kVt3IrbKRqs7WoeQk9UvsHpXloZ8SExfKpyb2disG+zz3rs4LtyghlTdy
VL6oDT7E+7wZKKxgiPMYThrEaUYsJ87jbb84fFGeqaGP4davkKWd14gOWjxnioxf
1ImOZT6Md4Hp7D7T5mxfjhTXuJm4g36ernwHJ5ICEVoThJfb3zr/Vh2R2EXQt9Vg
4IHFYyNcv6YfuGGcUua7zNcJemLIm1E+q5yxmhrkqXrNmrN2EWzw8ua6n4Uwm1sb
pktIkiCrTMpbAOqbSy9ywxPfE6vB5x9vJ9PLvhr64H8wgAbF/J4nn+IVHmtm7ymh
v7HgSrcZSNP6+shLSiI0zazZsqiL82gMk4kp/ve6D86zU88kXeiha6rZHlDd4IgZ
1CV1n2qHF/mlpE7HNUssGvwB/sH7EPkXVsRyes2qTBYF6sULUXuGB0rRY/laRM2z
Fh46ZOTnKjXmCBhTsAxv/pkkozN8JSvunQHc7+leJSVPmB5HpX+rPy+M5iV5+jbp
Bf3WRviYublQwcqXFeuC
=YKvs
-----END PGP SIGNATURE-----

--dfOvyYudzT1RPUKx--

- Raw text -