X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=qVE7VTDHXzba1dB4lJLo7ZIUhxKbjjpZzs+rseE0J3/Ruy4UQNr1V
	ls8sCcURYDJh08ROkSIP9txMnC6nDBy9yleA+swwS6pqpX1+AWzb/vo5CTf6Hedt
	6Asa4DHjZE2VvVmu3+Q/8AQ7AkKKHHCR9N6X5cQZKIpJhdbSE7O3Lg=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=t5cr8il+CHhXN2V/Ixkxl8qq7dA=; b=GUqaMtXM+WY18LFb4vWcJ0Gl+bJP
	o8QWJu61tDREMCmr8q/6jw6v5UnjVzGgaOnOQlco8Io1MrUdjPdS0DKAc5z3qB6v
	uCdt1BPDcoWW2lkXqFJXfRnyeHJh/cSs7lz3PoM6prgPV9DNuqVHsQYVRlgTukgB
	jjnvLfBZvDb/HuM=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Fri, 20 Mar 2015 19:10:11 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: mkpasswd: option to force the 'primary' domain?
Message-ID:	<20150320181011.GB12906@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<550C0B53 DOT 6080201 AT thales-esecurity DOT com>
MIME-Version:	1.0
In-Reply-To:	<550C0B53.6080201@thales-esecurity.com>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--OwLcNYc0lM97+oe1
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 20 11:58, Tim Magee wrote:
> Now then,
>=20
> Since Cygwin 1.7.34 dropped, mkpasswd has been problematic for us.  Our
> problem is with the way user names pulled from outside the primary domain
> get decorated.  My question is: will there ever be a way to tell
> mkpasswd/mkgroup "make <some non-primary domain> the one whose users get
> undecorated names"?
>=20
> We have Windows machines in one AD domain, and all our users in a differe=
nt
> AD domain.  According to the 'POSIX accounts, permissions and security'
> page, the machine's domain is considered the primary one. "mkpasswd -d" w=
ill
> generate undecorated names for that domain, and decorated names for any
> other named domain.
>=20
> We use SSH-based tools a great deal here, and we use Cygwin to make our
> Windows machines behave like members of our POSIX machine community, so
> having our usernames appear the same on all machines is very desirable.
>=20
> I think I can recreate the pre-1.74 behaviour with a little seddery, but =
I'd
> bet folding money that my seddery isn't future-proof.  So, are
> mkpasswd/mkgroup ever likely to get an option to force the "undecorated
> users" domain?

I'm not planning this.  The idea is that mkpasswd/mkgroup create account
names compatible with the "db"-based accounts and everyhing else is left
to post-creation manipulation.

Having said that, the new account handling is supposed to be stable on
the user level for quite some time, ideally at least as many years as
the old /etc/passwd&/etc/group-only based code.  Therefore using some
sed script to filter the output of mkpasswd/mkgroup if you dislike the
new account handling is the way to go.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--OwLcNYc0lM97+oe1
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=eWau
-----END PGP SIGNATURE-----

--OwLcNYc0lM97+oe1--

- Raw text -