DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=FqIsaLz9kiO4RCGLzR0AVXXYGFhwt+FsfHFk6bUhSaXfZ0Ih3IUm5
	FLfaZxfyLe9++FNnok/j6JxfM14dsrOPVfQIGU1bJ7OuNNArRURr5G3muAbk4xIe
	ncZKTXcqdeYeKo3jJQMUtjClgeZgYQqCwqMAkpRVksm/dkxEbu9T3s=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Tue, 15 Apr 2014 10:37:25 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Still testing needed: New passwd/group AD/SAM integration
Message-ID: <20140415083725.GD3271@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <20140410145323.GB2437@calimero.vinschen.de> <1723507354.20140413141847@yandex.ru> <20140414083514.GL3271@calimero.vinschen.de> <152973304.20140414130823@yandex.ru> <20140414102451.GB24891@calimero.vinschen.de> <205466581.20140415030052@yandex.ru>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="CGcXfQ1PUDCmwDYp"
Content-Disposition: inline
In-Reply-To: <205466581.20140415030052@yandex.ru>
User-Agent: Mutt/1.5.21 (2010-09-15)

--CGcXfQ1PUDCmwDYp
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 15 03:00, Andrey Repin wrote:
> Greetings, Corinna Vinschen!
>=20
> > For clarity: There is no "looking for users first at"...  capability at
> > all.  The user is searched via the functions LookupAccountSid and
> > LookupAccountName and they decide by themselves in what order to look.
>=20
> Got it.
>=20
> >> Environment variable to specify/override default domain on the fly.
>=20
> > You mean, for deciding which domain goes unprepended?  That would be in
> > the nsswitch.conf file, but it would be possible to implement that.
> > But does it make sense?  Yet another configuration variable?
>=20
> Look at it from the usability standpoint. The problem is not the separator
> character, the problem is the ambiguity of the account names in certain
> situations.

What amiguity exactly?  Care to make up a dirt simple example?

> Yes, one of the solutions is to implement a separator character that does=
n't
> conflict with current functionality, but satisfy the requirement to be a
> distinguished separation character.

That would be '+'.  And, in a way, the backslash could do as well.
If it works for Samba as default...

I'm pretty torn, right now.  This is one of the "features" of such
a solution where you simply can't do it right for all users.  So
I guess I should better stick to a configurable default.  Sigh.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--CGcXfQ1PUDCmwDYp
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJTTO/FAAoJEPU2Bp2uRE+gWckQAJ4jF9bqYRptU4InwxNbfpPJ
eRl9BFACA21+OuzS00USNA00R/NRrlUqxsx82bhEicF4ahXDWn4IzL1cXnecZSo0
ZnS9bS2fRaqFOMwRrHd6YjRIQldO7CjxUo1UqzH3bcwfVt5AXykJI++OT1NBXfgL
o0cO3QkWssBb9NDLJdhMl3zx0XSzCt2SbC+HvJOIig/kpLfJsa64fPoyCYTlv1mj
Y4YnirLactst+C4MVuboSbx28XjPgoy+ZDRtZc7Uk/8ZpUnnqsbJk8ucva+MhK+w
5mY5/bX1AuxDgLE+4YNZLvZPADODTA466lO8qLXGWlfU62DYIPjrm4MxVuPV/Glr
T5KLGVpPB9DH/7uNcQVbjydvoofAq4RtJ2AxV+Attj8mXuDp22zjZg4qY41pk8/y
9ugXHKT7MHGKCxKueX7ycQ4Z8IEWaENMy/6OYNRsVEKvEgvB2mjh+7nWi1jzQk/I
eJiS5Q0qzzDBsvv68+fJNe89MwbCIE+0dsPMMavG1I38O8UrBkzwDdLjrnkz5wus
mDwo+aT9aFpfj+4bxX61xCSQVV54WrXQjso5mGiEa5eQwnVJkARwjdNxF2NGLnK2
F1J4N5aKOmfSfttMfMSAU5fL8MPNZjR7S+Cly0LrV8KG3xM8UyP2V5WLlMVnms3E
EfQB4b2DR1efBTBWVoQA
=Q9OK
-----END PGP SIGNATURE-----

--CGcXfQ1PUDCmwDYp--