X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=qYd9nkDh2M7PWrDMgs+BVprkeSW2xNv+dhtNdZPF//7exNq+38YZ1
	R/PKo8tKwh9ufX+0IiVVRUAhUFPUs6JNKGnEmiNKU7/6UrmKU7BVJVYT2WmmEIjM
	fAkW7pC/06raRkbhStmOGtk7Haak4HYs/qqTnFnEBHhsQD3fvQPebY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=Ac7Y/ZXne0EKerKvplGg6wy580o=; b=e+2vdZgMTdDbDYLKy61+V2AVRVqC
	UtznnWdu9wjFnE9sz3BoQZSkTtm/2Yd1Eco5HoTF+8CJs7+eXzkEEg6TJq6yE1Up
	vIFacEDPLUtjuu9oeBQUINJpi6nspxOFwnXaGJUxCms/sWbJdw5zU0fTAkpktNdU
	SPOnHxDWcLQKRQ4=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.4 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: plane.gmane.org
To: cygwin@cygwin.com
From: Achim Gratz <Stromeko@NexGo.DE>
Subject: Re: Testers needed:  New passwd/group handling in Cygwin
Date: Tue, 11 Mar 2014 15:07:33 +0000 (UTC)
Lines: 44
Message-ID: <loom.20140311T152430-775@post.gmane.org>
References: <87fvn7cb68.fsf@Rainer.invalid> <20140225200414.GA4238@calimero.vinschen.de> <loom.20140310T181432-804@post.gmane.org> <20140310181339.GF28681@calimero.vinschen.de> <87mwgxsyac.fsf@Rainer.invalid> <20140310191603.GH28681@calimero.vinschen.de> <87iorlsvvn.fsf@Rainer.invalid> <loom.20140311T081705-682@post.gmane.org> <20140311102007.GJ28681@calimero.vinschen.de> <loom.20140311T125212-440@post.gmane.org> <20140311130716.GB21306@calimero.vinschen.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
User-Agent: Loom/3.14 (http://gmane.org/)
X-IsSubscribed: yes

Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> You don't have to move them away.  Just set nsswitch.conf.

Did that and using the snapshot DLL from 2014-03-05 on top of a full
snapshot install from 2014-03-10.  The ACL is this:

# file: x86
# owner: gratz
# group: Domain Users
user::---
group::---
group:admin-cygwinupload:rwx
group:user-cygwinupload:rwx
mask:rwx
other:---
default:user::---
default:group::---
default:group:admin-cygwinupload:rwx
default:group:user-cygwinupload:rwx
default:mask:rwx
default:other:---

With the original passwd and group file in place and nsswitch.conf set to
either "files" or "files db" the test fails.  With just "files" getfacl
doesn't show the group ACL at all, while with "files db" I see the ACL for
both the admin and the user group (both are not in the group file).  Setting
to just "db" the ACL is shown as before and the test from Perl now succeeds!
 In fact any combination that includes "files" fails.  So, after some head
scratching I changed the uid and gid in the passwd and group files to match
the new mapping scheme and lo and behold the test is now working.  The
getfacl command starts to show the group ACL when I add them to the group
file (with the correct gid mapping), but the test still fails with "files"
only.  With the correct group entries and "files db", the test also works.

So, Perl somehow uses the gid/uid mapping and relies on those to be working,
while bash uses a code path that doesn't and probably just uses the uid/gid
directly.  I guess I could make the "files" only case work by adding some
more groups (no time for checking what that might be at the moment), again
changing the mapping (will mkpasswd do this at some point?).  Do you still
need traces or does get you a test case that works in your environment?


Regards,
Achim.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple