X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=gDPDnBr57ti1wmHEerzGIswjnvWd71BuWkMz2k9aHfZCGSU8BLt5Q
	OhvYmw76FRsWnQqD6VPMD7SBBO5A3tDe41FogsfwJNjdCRe4tZsPVb5QTS4l6MUZ
	WxuovCOFj0kObfdIwRLyRUUxHxso0tP7ZCYbiHh1YBZqa1hEjovPIk=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=vSqH0HXlosoXxRs6E0okDviAtAk=; b=aR+xMCOM/rQ7+aV36x6UnMoTXILr
	D7m+wfrQJGACmOHOIcb87xI7hhRihm9HSXDQL2IafaxIDJhaLwC6wPZwK9T+eLhZ
	HFhVleqNCW9vghfK2JcVmR03Owx+MD1ZGFjoYpbCR33ULMqbJGuWfE7Pe41keBH2
	Jnwh0+QMe7Nuacw=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Spam-SWARE-Status:	No, score=-105.7 required=5.0 tests=AWL,BAYES_00,GIT_PATCH_2,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=Red, Hx-languages-length:2047, backslashes
X-HELO:	mout.kundenserver.de
Date:	Mon, 27 Aug 2018 11:09:09 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: incompat in cygwin choice of using '+' as domain and user separator.
Message-ID:	<20180827090909.GA4733@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<5B7DE56E DOT 6060109 AT tlinx DOT org> <20180823081135 DOT GN3348 AT calimero DOT vinschen DOT de> <5B8370CA DOT 5080209 AT tlinx DOT org>
MIME-Version:	1.0
In-Reply-To:	<5B8370CA.5080209@tlinx.org>
User-Agent:	Mutt/1.9.2 (2017-12-15)

--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug 26 20:32, L A Walsh wrote:
> On 8/23/2018 1:11 AM, Corinna Vinschen wrote:
> ...
> > No, that's a wrong assumption.  Think about it.  The ACL given to
> > acl_to_text is the binary form, so it doesn't contain user or group
> > names, only uids and gids.  The usernames are only generated in the
> > output.
> ---
> 	Rats.  Of course, you're right.  	Then I nominate the problem being that=
 it
> can't convert from domain "Unknown"-user + "Unknown"-group to something it
> can store in tar.

The problem with unknown SIDs is that there's no bijective
transformation between SID <-> uid/gid.  You get the uid/gid -1 and
then... what?  How do you restore the information?  There's no SID for
uid/gid -1.

> As far as duplication, I have /etc/passwd+/etc/group files that mirror my
> accounts on the linux-based PDC (samba 3.x).

What for?  This should work automatically and you would get rid of those
dreaded backslashes in the account names.  Using passwd/group files also
have a higher probability of account overlap with weird results.

Passwd and group files should only be used if you have very specific
problems to solve (like offline usage or see below), otherwise just use
the values you get from the account DBs.

> In this case, that user+group appear to correspond
> to non-existent users. (S-1-5-21-oldsystem-ID-1001 + -1005).
> The domain/system part appears to be from some previous
> value for the machine's "sid"?  Not sure how to deliberately
> reproduce that, but maybe you have a tool to create an
> invalid acl entry for a user like: Unknown+User:*:4294967295:4294967295:S=
-1-5-21-3457732827-2369206082-2151550420-1001
> in /etc/passwd.
> and something similar in /etc/group?

If you want to keep the old, unknown accounts, just add them to
your passwd and group files (one of those special problems).
Alternatively remove them from all ACLs.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=3s5r
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--

- Raw text -