X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=JGLj5jZwbLDgWXi3OeN72vTvO8IkM3HIGMfx/bk7lx1skNWkGCr8q
	4N364pLvoj9cq2FKFIki3RmH4GLBhZIu7Ww4fK9VikMJsqxaACiexUkvhQAGUH3+
	8pgOyNcybYeDdV9uyMeqTE7+BQMCQF6y49CCcM96JEiNfZ+8vjtyjs=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=ROrkHSmEtggm78Q3itkZevaoA6s=; b=dhP6/jUCOCPRNIswWX4eQcu/Ms7D
	3TLVeNWpYwOVGZ2EgETKqk7ZZId3S5D31c1RbuO+R3Oe7DjGsmxaE9J0e/dSvwdY
	MxR3n6bK2xNypIpQPFaDrmkPbzovD080Gwkhx4evrwrgfSrEue8KobzbuCudXfTm
	y0zGa1yxZ6xWO8U=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Mon, 14 Apr 2014 10:08:07 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Still testing needed: New passwd/group AD/SAM integration
Message-ID: <20140414080807.GI3271@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <20140410145323.GB2437@calimero.vinschen.de> <5346B667.3040704@breisch.org> <20140410152809.GD2437@calimero.vinschen.de> <5346E55D.6020405@etr-usa.com> <20140410190424.GK2437@calimero.vinschen.de> <5346FCF9.5000908@redhat.com> <20140411121948.GC23281@calimero.vinschen.de> <818978797.20140413143439@yandex.ru>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="6cMF9JLEeZkfJjkP"
Content-Disposition: inline
In-Reply-To: <818978797.20140413143439@yandex.ru>
User-Agent: Mutt/1.5.21 (2010-09-15)

--6cMF9JLEeZkfJjkP
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 13 14:34, Andrey Repin wrote:
> Greetings, Corinna Vinschen!
>=20
> > What bugs me a bit is what this means for applications which expect
> > fixed usernames.  Sshd, for instance, expects the fixed username
> > "sshd" right now when using privilege separation.  I discussed this
> > with the OpenSSH devs, and they understand the problem, but they think
> > this should be handled by a Cygwin-specific function.  So there's some
> > extra work in it for me to get OpenSSH up to speed with this change,
> > but I fear I'm not the only one.  The more configurable stuff like this
> > is, the more complicated it gets maintaining some packages.
>=20
> I really don't see a problem. Is this implementation-dependent issue?
> 99% you are operating within "current domain" and do not need to specify
> domain prefix at all.

Uh, but you're missing the situation where the machine is a domain
machine but the privilege separation account "sshd" is created in
the local SAM.  That's what the ssh-host-config script might do.
Sshd will have to use MACHINE<separator>sshd as username for privsep
in this case.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--6cMF9JLEeZkfJjkP
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5HKJ
-----END PGP SIGNATURE-----

--6cMF9JLEeZkfJjkP--