X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=x9Bn5PNl0uYubX2cT1xQUpvl0uIPMdsw+ZvihooD41Lztjen3WYZt
	GUCSLki0uf2j7CS0ZiZFbrD9Wu9/roOfFhJQ8+9/Gb2rgsEcjvbTUgWTqXw5TyhU
	qLRXjfXEUz3bi8fkGbwPwq3f1EYyTgKid+KZ2cjv2PwZb8jeiELmMw=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=SukFF/26nW5sgwguOg3HDLvKlvM=; b=suy+nK/dNLUb7AwsGUYYhSlURu0H
	FD7Aga5bXhaD46VB6RT7tPpsB/plMLKbpyL+YoFNR9Ha+YibXCKXKT10zlZNIbSR
	OzWJ46tE3o6r2e3CTH/RpkJoxd9TT+x+U8k9jQTk7UbXDnrdpQE7ey7z0Xe2PJVl
	LzTrCOHRIgk/ZWc=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 25 Feb 2015 18:34:32 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: gid doesn't display correctly on SAMBA share using AD
Message-ID:	<20150225173432.GP437@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<54EDF1DB DOT 20708 AT intersystems DOT com> <20150225161849 DOT GG437 AT calimero DOT vinschen DOT de> <54EDFD84 DOT 2030605 AT intersystems DOT com> <20150225172022 DOT GL437 AT calimero DOT vinschen DOT de> <54EE05B3 DOT 4050304 AT intersystems DOT com>
MIME-Version:	1.0
In-Reply-To:	<54EE05B3.4050304@intersystems.com>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--TZnptnJ1LMdlZxI8
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 25 12:26, Len Giambrone wrote:
>=20
> On 02/25/2015 12:20 PM, Corinna Vinschen wrote:
> >On Feb 25 11:51, Len Giambrone wrote:
> >>On 02/25/2015 11:18 AM, Corinna Vinschen wrote:
> >>>On Feb 25 11:01, Len Giambrone wrote:
> >>>>[...]
> >>>>The username displays correctly, but the group name does not:
> >>>>
> >>>>$ ls -la foo
> >>>>-rw-rw-r-- 1 build Unix_Group+999 0 Feb 25 10:52 foo
> >>>>
> >>>>And this is confirmed by running getent:
> >>>>
> >>>>$ getent passwd build
> >>>>build:*:1065765:1049089:U-ISCINTERNAL\build,S-1-5-21-112145844-187267=
5854-1690816760-17189:/home/build:/bin/bash
> >>>>
> >>>>$ getent passwd group
> >>>>
> >>>>I've read
> >>>>https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch-ge=
cos
> >>>>'til I'm blue in the face, and I think this should work.
> >>>>What am I missing?  How can I debug?
> >>>If your admin changed your user account to have a gidNumber 999 only,
> >>>then that won't help,  Consider:  Cygwin tries to find a group with
> >>>gidNumber set to 999.  How is it supposed to evaluate the right
> >>>gidNumber value from some arbitrary user account?
> >>>
> >>>What Cygwin needs to get the right connection between a Windows group
> >>>and a gidNumber value is that the *group* entry in AD itself has the
> >>>gidNumber set to the right value.
> >>>
> >>>I don't know if that's really the problem in your case, but that seems
> >>>the most likely.
> >>>
> >>>Please report back.  I'm excited that I'm not the only one interested
> >>>in getting this connection between unix and windows ids working :)
> >>It worked.  :)  Now I just have to persuade my admin to populate uidNum=
ber
> >>and gidNumber for all our current and new users...
> >I'm glad to read that.  Thanks for your feedback!
>=20
> If I can't get my admin to cooperate, then I have to resort to using
> mkpasswd/mkgroup -U.  But this gives output like this:
>=20
> $ ls -la foo
> -rw-rw-r-- 1 Unix_User+build Unix_Group+releng 0 Feb 25 10:52 foo
>=20
> Is that expected? (The Unix_User+/Unix_Group+ prefix).

Yes, that's expected.  After all, they are users different from your
Windows account, see the SIDs.  If you don't want the prefix, you can
still override this by manually dropping the prefixes, along the lines
of what you could already do in the former implementation.  Should be a
last resort, of course.  The other, better way not restricted to Cygwin
is to install Samba's winbind.  It just doesn't help for existing UNIX
accounts, afaics.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--TZnptnJ1LMdlZxI8
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=KqGk
-----END PGP SIGNATURE-----

--TZnptnJ1LMdlZxI8--

- Raw text -