DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=dAJbqwtdYapKlZIm
	JDTnLHPJ+rmvu7ZYhsdMFTV1Nl2/Sebclvz6XFtjS1ysthmcLYrm+Ux/z+LgVYJ7
	AaWr3/W3cXTbrWWJGAOlBVcOA9Z5n4Y4OeoMIi26vorZMtSn66CQu72SBZOmZmZc
	l89BPuF8G/Q1zCz+hVUgteo43gs=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Thu, 13 Feb 2014 15:39:18 +0400
From: Andrey Repin <anrdaemon@yandex.ru>
Reply-To: Andrey Repin <cygwin@cygwin.com>
Message-ID: <399125515.20140213153918@mtu-net.ru>
To: Corinna Vinschen <cygwin@cygwin.com>
Subject: Re: get rid of getpwent? (Was: cygwin-1.7.28 getpwent header declaration changes ?)
In-Reply-To: <20140213100025.GB24159@calimero.vinschen.de>
References: <52F92D58.9030408@etr-usa.com> <52F95D1D.4050108@tiscali.co.uk> <4510121021.20140211062515@mtu-net.ru> <52FAB14C.8060800@tiscali.co.uk> <52FABAF5.2060701@etr-usa.com> <52FAD730.9090507@redhat.com> <20140212090804.GM2821@calimero.vinschen.de> <52FB9E51.7030607@cornell.edu> <20140212195931.GA2246@calimero.vinschen.de> <20140212213729.GA5589@ednor.casa.cgf.cx> <20140213100025.GB24159@calimero.vinschen.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Greetings, Corinna Vinschen!

>> >There's only one tiny problem.  Whatever I think about the full
>> >enumerate being right or wrong, I have this vague feeling that I'd like
>> >to have this implemented fully at one point.  My cat disapproves, but we
>> >can't agree on everything, I guess.  Another configuration option in
>> >/etc/nsswitch.conf might comfort her.
>> 
>> I don't know if this has been mentioned but would a cache help here,
>> i.e., nscd?  I think that's how Linux deals with this type of situation.

> Caching is wonderful for the usual requests for single entries from the
> DB, and for this we have already two caches, the LSA cache and Cygwin's
> own cache.  But caching doesn't help at all when enumerating.

> There's also the problem to rely on an external program.  If it turns
> out that the current implementation is too slow, I'm prepared to add
> caching to cygserver to have a system-wide caching server, but Cygwin
> shouldn't *require* that cygserver runs.  And either way, it still
> wouldn't help when enumerating all accounts.

Another rock in the direction of caching. Caching security-relevant data 'en
masse' is usually a not-so-good idea, and should be considered very carefully.
Even for Linux, common recommendation is to disable nscd to improve security
and reliability of the accounting data.


--
WBR,
Andrey Repin (anrdaemon@yandex.ru) 13.02.2014, <15:36>

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple