DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=Z8mSeXZM3CwQvqOkEH5ZYGIIPemPREKpgV4lXZioGn+FifzkuvXMs
	MJY81TbJk3ZiXue30Hb5kQZHM1UzLeUJWnSc2WbRq2RFrp5LCtm7B+pbSWBv0cbd
	S5lQVDbYVjkHua8HOuvEI8Rz0aYfPny/jSoetaO+D4SSOoQqjtlOT4=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Mon, 1 Sep 2014 13:42:21 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Simplify AD integration?
Message-ID: <20140901114221.GB2644@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <20140730134716.GM25860@calimero.vinschen.de> <53D93510.6020903@redhat.com> <20140730184349.GT25860@calimero.vinschen.de> <20140804190024.GM2578@calimero.vinschen.de> <20140806084757.GI13601@calimero.vinschen.de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="uQr8t48UFsdbeI+V"
Content-Disposition: inline
In-Reply-To: <20140806084757.GI13601@calimero.vinschen.de>
User-Agent: Mutt/1.5.23 (2014-03-12)

--uQr8t48UFsdbeI+V
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug  6 10:47, Corinna Vinschen wrote:
> On Aug  4 21:00, Corinna Vinschen wrote:
> > I just uploaded a new snapshot to http://cygwin.com/snapshots/
> >=20
> > This snapshot contains only a single change:  It drops the prepended
> > plus entirely,  So the builtin and well-known accounts are now called as
> > familiar: SYSTEM instead of +SYSTEM, Administrators instead of
> > +Administrators, etc.
> >=20
> > The documentation doesn't reflect this change yet, but I will fix that
> > pretty soon.
> >=20
> > As for other changes, I'm still not sure since we seem to have as
> > many different opinions as interested community members :}
> >=20
> > I would still like to drop the db_prefix and db_separator settings and
> > just stick to the setting called "auto":
> >=20
> >     builtin accounts;   "SYSTEM", "Administrators", etc.
> >     primary domain      "corinna", "yaakov", ...
> >=20
> > This is typically all you see on non-domain machines.  On domain
> > maches, add this:
> >=20
> >     other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"
> >=20
> > (local SAM accounts are subsumed under "other domain" here).
> >=20
> > Would anybody have really terrible problems with this approach?
> > If so, what problems?
>=20
> So nobody would really have a problem?  Wow, that's cool.  I guess
> I'll remove the db_prefix and db_separator settings pretty soon.

Done.  For the time being I decided to keep the code intact, but
to disable the ability to change the settings from /etc/nsswitch.conf.

This leaves us with a very simple nsswitch.conf which only understands

  passwd:
  group:
  db_enum:

This is in the latest snapshot from https://cygwin.com/snapshots/


Corinna


--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--uQr8t48UFsdbeI+V
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJUBFudAAoJEPU2Bp2uRE+gGxAQAKHeJG4i62ZZ+xevUnDhTo88
uszKSeOZcNNMrvONczJo533vu/LtjSP0yxwRjDra0+eGq0bJ8RH+aIUH72zFJk/l
1sea1nuS5Qyv4BOdViM2oNhPOQYXk8BGVklhFBEpXujS4jL1sD63gm13IdwqHjxf
crAcN53HeFz9i3ue2lCFvloBbjEw+C62HrZobZ/u2XBN4lJ51Y3G2eQlwVtJ0DOi
pqvYK/BMWsgKE5hAgvWovAdxV8Dmrf2c8Qb2WKrWFn6Nd8XEuk8xkb0ThcmjC0II
Ttcrt9K81Lcw5alXNu7ukP4b+uMvmSAv7vLUEGZuV+PegLyJ2rA0euOiXykV7v6F
O3MFmbzFjn+XFzQz6otq1WyGkld1XiNTgz+jKeEwM/3tQ3BAy8edMzYFZAViiMIe
3Yj5J1hRU0CDXYlbyD50RZgN3mUHUTqUv0Zi8HzOMCT+LIlM+LWX1IbPayCmsfWA
5oho2Kpv8IFtlrhpHLS+8K2HZakO0OlUw5pCJqeutmxb6mgPgkr6Ajc5guk4BcJn
dgv758ENa8FzKn3jDxHbe8h9Wh24DF6Wpr0M9CVfZukarX+qDJaCTIIt6qcE6NMT
PhEqG91d+Y44wlB17plP5oTNkLRHYhpNi7JdBT03d5L0NeSV3qmZTEimpdaYDs5E
lRWfahIEmW3GG5WLT4g8
=OCk6
-----END PGP SIGNATURE-----

--uQr8t48UFsdbeI+V--