Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Wed, 20 Mar 2002 10:10:53 +0000
Message-ID: <2995-Wed20Mar2002101053+0000-starksb@ebi.ac.uk>
From: David Starks-Browning <starksb@ebi.ac.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Corinna Vinschen <cygwin@cygwin.com>
Subject: Re: Telneting/ftping to cygwin
In-Reply-To: <20020319160607.W29574@cygbert.vinschen.de>
References: <01C1C6BD.CE90CFC0.rafael.botejara@sema.es>
	<3C88E12D.2E6DBDCC@iee.org>
	<20020308192353.Q13590@cygbert.vinschen.de>
	<3C8C8487.60308@pace.co.uk>
	<20020311124504.K29574@cygbert.vinschen.de>
	<2077-Mon11Mar2002135448+0000-starksb@ebi.ac.uk>
	<20020318170848.GA24475@redhat.com>
	<6272-Tue19Mar2002124114+0000-starksb@ebi.ac.uk>
	<20020319160607.W29574@cygbert.vinschen.de>

On Tuesday 19 Mar 02, Corinna Vinschen writes:
> > I've made several superstitious changes to /etc/passwd, /etc/group,
> > but the bottom line is I can now login (telnet and ssh) only with
> > ntsec set.  If I disable ntsec, I get the usual:
> > 
> > 	System Process - Application Error : The application failed to
> > 	initialize properly (0xc0000022).  Click on OK to terminate
> > 	the application.
> > 
> > But only with a domain account.  If I login to a local account, it
> > succeeds, even without ntsec.
> 
> Both accounts are correct in /etc/passwd?
> The primary groups of the accounts are both in /etc/group?

Yes and yes.  AFAICT.  Certainly enough so that it works with ntsec.

I don't know if it's related, but I notice some differences with "id",
depending on whether ntsec is on or off, when I login, via the NT
console, to my domain user account.

Here are excerpts from my /etc/passwd and /etc/group files:

/etc/group
~~~~~~~~~~
Everyone:S-1-1-0:0:
None:S-1-5-21-2063797194-1668831906-355810188-513:513:
Users:S-1-5-32-545:545:
Domain Users:S-1-5-21-1516261886-1165125591-538272213-513:10513:

/etc/passwd
~~~~~~~~~~~
starksb::11024:10513:David Starks-Browning,U-EBI\starksb,S-1-5-21-1516261886-1165125591-538272213-1024:/d/starksb:/bin/bash
BRYCE\starksb::1004:513:David Starks-Browning (Local Administrator),S-1-5-21-2063797194-1668831906-355810188-1004:/d/starksb:/bin/bash

(The entries were created very long ago, but I added 10K manually to
the domain uid & gid to match the latest output of mkpasswd.)

When I login as EBI\starksb via the NT console, "id" reports
differently depending on the value of ntsec:

ntsec on
~~~~~~~~
uid=11024(starksb) gid=10513(Domain Users) groups=0(Everyone),545(Users),10513(Domain Users)

ntsec off
~~~~~~~~~
uid=11024(starksb) gid=10513(Domain Users) groups=10513(Domain Users)

When ntsec is off, "id" does not report membership in the local groups
Users and Everyone.  Again, I have no idea whether this is relevant,
but I thought I would report it.

Hope this is useful.

Regards,
David


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/