delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2025/04/10/03:52:45

DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 53A7qiHa3152590
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 53A7qiHa3152590
Authentication-Results: delorie.com;
dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=Pkd3bW03
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 128333839C4D
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
s=default; t=1744271563;
bh=V00GzRqJlsqNUzlkx0THzs/wGYaDK8qbDKYYW9CCemk=;
h=Date:To:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:
List-Help:List-Subscribe:From:Reply-To:From;
b=Pkd3bW03AhbWmFNNVPdekksZUcXD+INQCXZalh8gdMYB/7qpc7cI4XFaGJZfZnPx/
kGOX9uTF14J6HwcqWdRKrBfTccudRBLvxNNkZBn3GgFT8rsjwjPvssD+4QvkYaZXPo
xIrdHDSUwqU7spPYs4uGcGeuwe89ZGGwvtTqeVPs=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 1779F3856942
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 1779F3856942
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1744271539; cv=none;
b=f2Hsh94z1SRio5twlDKqOeVBkdHscmFI1xdmHcgFMA0+MaPyRxr90hwYemcEoibuoeJE4eW60Gv3BjgkaUsO2JgGt0Bh8zvT+gfC7BlmJbrWzuxPalWtyW6E9j8Em9kFDBhlP/frHa1wTFCvHFcgldtiDQ+W4VqoQZfX60a5To0=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
t=1744271539; c=relaxed/simple;
bh=6vnchKWHe+XcKToCZ4qUGURvbSVjfIL2a6cblSxcbKg=;
h=DKIM-Signature:Date:From:To:Subject:Message-ID:MIME-Version;
b=DbOswwfCcyht40EUZrT5yucW3MoJNzY751lys2MZzQOMJ9H2Wq15g9mdorh7FAeSEhzT2/H1KENqPi9DgpAscF8mf2L3A2iiT6A4dLbOGb16x0tqh+NABF7Zr2eoY2EfWbSIhcImif2MWHMklehCvVmVBLF/HIbk9FjyZ0DYFlU=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 1779F3856942
Date: Thu, 10 Apr 2025 09:52:18 +0200
To: cygwin AT cygwin DOT com
Subject: On dropping Capability SIDs
Message-ID: <pbli6jecn5go2h7heebwivkwz6xf5h2stvq5fxna4u6pql6uht@7xpentpxjiak>
X-Accept-Language: ca, es, eo, ru, en, jbo, tokipona
MIME-Version: 1.0
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: =?utf-8?q?Llu=C3=ADs_Batlle_i_Rossell_via_Cygwin?= <cygwin AT cygwin DOT com>
Reply-To: =?utf-8?B?TGx1w61z?= Batlle i Rossell <viric AT viric DOT name>
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id 53A7qiHa3152590

Hello,

I saw this change to cygwin to ignore S-1-15-3-* SIDs:
https://www.cygwin.com/cgit/newlib-cygwin/commit/?id=271f187b7b59a6645e24e9c36b60ba31f6527556

I think, though, that the current code doesn't completely skip
resolving those never-resolving SIDs.

I'm annoyed by those SIDs because they slow down any 'stat()' syscall,
specially with active directory. Here are strace microsecond times
(500ms):

387924  540348 [main] stat 1327 pwdgrp::fetch_account_from_windows:
LookupAccountSid(S-1-15-3-65536-3323407561-2172269196-3486974656-4132058316-2250862433-3856296919-434318741-3760235072),
Win32 error 1332
186045  726814 [main] stat 1327 pwdgrp::fetch_account_from_windows:
LookupAccountSid(S-1-15-3-65536-3323407561-2172269196-3486974656-4132058316-2250862433-3856296919-434318741-3760235072),
Win32 error 1332

That slows down a lot things like TAB-completion executing, depending on
the latency of the AD connection.

I think that the early part of fetch_account_from_windows should filter
out S-1-15-3-* SIDs as well, instead of asking AD.

What do you think? I never built cygwin and I don't know many of the
implications if I tried to make the change on my own, so I hope someone
aware can, if possible, prepare the patch. It should not be difficult for
the acquainted.

Regards,
Lluís.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019