X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=dvRRWlvOf7Pu9xQLTZqZReEg4dMS+2iYxHAxoegQifaQlN3O/sbXc
	NwguposlPpOoUrwOC7NWZgCmaR9aRVOY9UNtXyUgJsNi23PKfvkhMF/gr/4fKIEO
	qjBkceWT77dIFDeY1aI3ETpHn4WhxzoQiCMa8NYF5zLgE/rTCspt0U=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=0cLPsAgA1f6tpwUdUIAtdoYMrMs=; b=yCd1RXm2MUsGERlyE9oFRWruQ5Bv
	4WbuHHoZasSncAfoGXElZa5BNQtGbQ2BZW3RDGSSYsB/xGBBz3NcmeWXH82pvOMV
	36WTdFadmyoYCy9DfAIfIu3kuWFIZeViqN52meofgb7UFPCkMk7h4cBwCaMw0fSn
	AVySeflkUPnbbMs=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.4 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: plane.gmane.org
To: cygwin@cygwin.com
From: Achim Gratz <Stromeko@NexGo.DE>
Subject: Re: Testers needed:  New passwd/group handling in Cygwin
Date: Tue, 11 Mar 2014 17:05:47 +0000 (UTC)
Lines: 33
Message-ID: <loom.20140311T172511-742@post.gmane.org>
References: <loom.20140310T181432-804@post.gmane.org> <20140310181339.GF28681@calimero.vinschen.de> <87mwgxsyac.fsf@Rainer.invalid> <20140310191603.GH28681@calimero.vinschen.de> <87iorlsvvn.fsf@Rainer.invalid> <loom.20140311T081705-682@post.gmane.org> <20140311102007.GJ28681@calimero.vinschen.de> <loom.20140311T125212-440@post.gmane.org> <20140311130716.GB21306@calimero.vinschen.de> <loom.20140311T152430-775@post.gmane.org> <20140311154750.GP28681@calimero.vinschen.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
User-Agent: Loom/3.14 (http://gmane.org/)
X-IsSubscribed: yes

Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > With the original passwd and group file in place and nsswitch.conf set to
> > either "files" or "files db" the test fails.  With just "files" getfacl
> > doesn't show the group ACL at all,
> 
> How does it look with any non-AD integrated Cygwin?

... doesn't show the group ACL until I add them to the group file.  That
part is consistent with the AD enabled snapshot.  Actually... if I create a
group file with those two groups added, the access again doesn't get
granted.  Which finally reveals that I also need to have the administrators
group present in that file (which mkpasswd had been doing) -- then it works.
 I can even leave out the two ACL groups again and it still works.

> Hmm.  So you're saying that the groups in question are not in
> /etc/groups, but it works with the non-AD Cygwin but not with the
> AD-Cygwin?

Exactly.  But as revealed above, what was really missing is the
Administrators group.  Somehow, when "files" is in effect, that mapping
doesn't seem to exist unless it is explicitly listed in the file.  It does
get auto-created when I use _only_ the "db".  I hope that somehow makes sense...

> > So, Perl somehow uses the gid/uid mapping and relies on those to be working,

No, it seems to balk on not being able to map the Administrator group (which
is my egid).


Regards,
Achim.




--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple