X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=ec/bB7HVLdQVUZYtK8jy3GTt1oqPBjgVqcsGnYuJbheLtupiz8xwb
	FirzvZTephgCbXoQZYcttNOTd9ezQu+mKyHIAE6rRe8ws6Rd54DLApNOITCGU8g2
	flIV+vQAguykf04HZfif0Ey4HhV3pTWZJazmwV9qzmt1ugFlcEXHm4=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=Jkkp5J0P9Hp2EsZxOBnOG49rbiI=; b=N4DURHR9FldnJWEMXvYDdPJv8d7t
	TXDR5SEXpePHBGfIqEMhjnSzcgEF/5H7JVRktBGlsF/NFjCKKAModD94KEPqSJs8
	3Ri6sBMez8PBYuHHt5mZ7yWWI/DjBJHfCXXBafqRmO/Hr+WLHcMRhWsJR5DlCpfX
	/yDQjIeCMEcONrU=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Tue, 24 Mar 2015 21:34:17 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: update trouble 1.7.35
Message-ID:	<20150324203417.GB32703@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<33EC3398272FBE47B64EE3B3E98F69A76C40CC25 AT DE011520 DOT schaeffler DOT com> <20150323193842 DOT GM3017 AT calimero DOT vinschen DOT de> <loom DOT 20150324T142454-956 AT post DOT gmane DOT org> <20150324140333 DOT GA17861 AT calimero DOT vinschen DOT de> <33EC3398272FBE47B64EE3B3E98F69A76C414FBD AT de011521 DOT schaeffler DOT com> <20150324155024 DOT GA21272 AT calimero DOT vinschen DOT de> <33EC3398272FBE47B64EE3B3E98F69A76C41502F AT de011521 DOT schaeffler DOT com> <20150324164850 DOT GY3017 AT calimero DOT vinschen DOT de> <33EC3398272FBE47B64EE3B3E98F69A76C415077 AT de011521 DOT schaeffler DOT com>
MIME-Version:	1.0
In-Reply-To:	<33EC3398272FBE47B64EE3B3E98F69A76C415077@de011521.schaeffler.com>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--PmA2V3Z32TCmWXqI
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 24 17:56, Lemke, Michael  ST/HZA-ZSW wrote:
> On Tuesday, March 24, 2015 5:49 PM Corinna Vinschen wrote:
> >> Note that "they" did a domain switch here at some point.  My installat=
ion=20
> >> is really old and the passwd certainly is from before that domain chan=
ge.
> >
> >That explains it.  Please recreate your /etc/passwd and /etc/group
> >files with mkpasswd and mkgroup, or, even better, just discard them.
> >
>=20
> I just created new ones.  I like passwd/group much better than AD, sorry.=
=20=20
> Just like real unix before the invention of yellow pages and nis.

Yeah, but real unix these days is NIS+ or FreeIPA, or... even AD :)

> This=20
> way I can easily give different shells to different users (not that it is
> really important at the moment).

You can do that in AD as well.  Or, as long as all users want the same
shell, you can simply use `db_shell: /bin/tcsh'.

> In nsswitch.conf I put=20
> passwd: files db
> group: files db

That's the default setting.  You can simply remove nsswitch.conf in this
case, which should result in a slightly faster startup because Cygwin
doesn't have to scan YA file.

> and ls listings seem to look fine.  Login is also possible again
> with correct tcsh shell.

I'm glad to read that.

> >The problem is the domain switch which also changed the SID of your user
> >account.  The old SID, which you also have in your passwd, is not
> >returned by the server anymore.  But it's stored in your SID history in
> >AD and when asking for it you get an answer.
>=20
> So, to sort of sum this up: the new cygwin doesn't deal well with=20
> contradicting entries in passwd and AD.=20

Basically, yes.  More to the point, your user token and your passwd
file contradict each other.  The user and owner entry in your
user token is your new SID.  The old SID only shows up in the token's
group list, afaik.

> >Downside: Cygwin can't handle the old SIDs from your SID history quite
> >correctly.=20=20
>=20
> Actually, with "files db" it seems to handle it quite well.  I get the sa=
me
> username for both kind of files.  There are still lots of files in my
> home I created before the domain switch.

Ok, I just can't guarantee that it always works.  The SID history stuff
is a weird solution for a weird problem.

> >Trying to support them as well would slow down the user and
> >group lookups a lot.  If you can live with what we just found out and
> >the solution I suggested, I'd be rather happy :}
> >
>=20
> Yes, I am happy now.

Then I am, too :)


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--PmA2V3Z32TCmWXqI
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=km7v
-----END PGP SIGNATURE-----

--PmA2V3Z32TCmWXqI--

- Raw text -