DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=b6s7w21sQAqrUugOVOxAfymQY3D4ngfuYwOK2F01SK8RZRK7R1xCB
	rQGI3F0Ij8rwlGlZ2nymv/cmBM/wRjh4M2YlFOI9i2gGsnO1BFzZgbHSLWsTbzlH
	H+6dxjnEx+i3f9yFc2YBbhwl+rGZd1f+OZUkSyieULOXPVoi5gFVeA=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Fri, 11 Apr 2014 14:43:16 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Still testing needed: New passwd/group AD/SAM integration
Message-ID: <20140411124316.GF23281@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <20140410145323.GB2437@calimero.vinschen.de> <874n21ary8.fsf@Rainer.invalid>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="VuQYccsttdhdIfIP"
Content-Disposition: inline
In-Reply-To: <874n21ary8.fsf@Rainer.invalid>
User-Agent: Mutt/1.5.21 (2010-09-15)

--VuQYccsttdhdIfIP
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 10 21:46, Achim Gratz wrote:
> Corinna Vinschen writes:
> > * cygserver now provides system-wide passwd/group entry caching.
> >
> >   All processes started *after* cygserver will try to fetch passwd
> >   and group entries from cygserver.  While this is probably a bit
> >   slow at the start, the longer cygserver runs, the more information
> >   is present and later started processes will get the information
> >   with all due speed.
>=20
> Does this mean there is no caching without cygserver running?

Huh?  I really didn't expect this question.  Of course the in-process
caching is still present.  Read the new chapter called "Caching" in the
document I attached to my OP.  Or, even better, I just quote it here,
for your convenience:

=3D=3D=3D=3D=3D=3D=3D
Caching
=3D=3D=3D=3D=3D=3D=3D

The information fetched from file or the Windows account database is cached
by the process.  The cached information is inherited by child processes.

While usually working fine, this has some drawbacks.  Consider a shell
calling `id'.  `id' fetches all group information from the current token
and caches them.  Unfortunately `id' doesn't start any child processes,
so the information is lost as soon as `id' exits.

But there's another caching mechanism available.  If cygserver is
running it will provide passwd and group entry caching for all processes
in a Cygwin process tree, which first process has been started after
cygserver.  So, if you start a Cygwin Terminal and cygserver is
running at the time, mintty, the shell, and all child processes will
use cygserver caching.  If you start a Cygwin Terminal and cygserver is
not running a the time, none of the processes started inside this
terminal window will use cygserver caching.

The advantage of cygserver caching is that it's system-wide and, as long
as cygserver is running, unforgetful.  Every Cygwin process on the system
will have the cygserver cache at its service.  Additionally, all information
requested from cygserver once, will be cached inside the process itself
and, again, propagated to child processes.


> > * db_separator in /etc/nsswitch.conf
>=20
> I can't see a pressing need for configurable separators here.  Domain
> users are probably already accustomed to seeing Domain\User, so that'd
> be a natural default unless somebody had a pretty good reason for
> something different.

Eric's mail on this is pretty enlightening.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--VuQYccsttdhdIfIP
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=KfeB
-----END PGP SIGNATURE-----

--VuQYccsttdhdIfIP--