X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=BqCrFcVB0QAdqICYMNUL+HkrjcyG0in0quSvu+QxuGGsMMI4ZlO8s
	DQs5knMLe63XuOsMEQjkKtuCrBOzkOHp1NVWyUvYM46dAA28iod2orSRRvf0oqPw
	xTP+ULlnN+peme76/vbllsYYlBnWYKCwnBmXJ4Du2q0Ag/E97/QZzk=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=fLwOgnMsAYtJuwHpDyeS3XWB5TM=; b=eHzqw8INFsjGUDm3x83K0HeVu0ZM
	cfExMTVyCsK4PMrwZaUJP+lKfICG+eMvQOHGpXw86N/SwAwV2H5jHCHywblk+dTI
	UqzrBndhmWJegTt/WNMzOg8QmVbtVdoHaxHSjaGjcHipHre3cbh+GPzpkCrRZoDy
	8wK827sWXIaeUzA=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-95.1 required=5.0 tests=AWL,BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RDNS_DYNAMIC autolearn=ham version=3.3.2 spammy=H*MI:sk:1471361, H*i:sk:1471361, H*f:sk:1471361, pig
X-HELO: calimero.vinschen.de
Date: Tue, 16 Aug 2016 17:45:26 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: /dev/ptmx fails with Azure accounts
Message-ID: <20160816154526.5snup4t2423hijbu@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <20160804070058.GA2333@calimero.vinschen.de> <20160805102751.GK25811@calimero.vinschen.de> <20160807032711.GC31990@dimstar.local.net> <20160808070527.GB32150@calimero.vinschen.de> <20160808114807.GD31990@dimstar.local.net> <20160808115840.GG32150@calimero.vinschen.de> <1471278569.482829599@apps.rackspace.com> <1471279732.794730680@apps.rackspace.com> <20160816091236.yws3hk3o5fihlbe7@calimero.vinschen.de> <1471361255.019511497@apps.rackspace.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="g6ugk6inas7ixmji"
Content-Disposition: inline
In-Reply-To: <1471361255.019511497@apps.rackspace.com>
User-Agent: Mutt/1.6.2-neo (2016-07-23)

--g6ugk6inas7ixmji
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Russell,

On Aug 16 11:27, rmora@aboutgolf.com wrote:
> Hi Corinna
>=20
> On Tuesday, August 16, 2016 05:12, "Corinna Vinschen" <corinna-cygwin@cyg=
win.com> said:
>=20
> > Hi Russell,
> >=20
> > This is as bad as I feared.  Apart from the username and the Windows
> > home dir, there are no other information which could be fetched by
> > the usual means.  Quite apart from the fact that there are no means to
> > *store* this information somewhere, other than creating an explicit
> > /etc/passwd and matching /etc/group entry.
> >=20
> > But, anyway, I prepared some code for the Cygwin DLL to handle these
> > accounts even if no /etc/passwd and /etc/group entries are present.  It
> > still needs some work, though, and for that I'd ask you to perform a
> > last test.
> >=20
> > I attached a short testcase.  We know that LookupAccountSid from the
> > user SID in the user token returns a name (RussellMora) and a domain
> > (AzureAD).  However, the open question is if the reverse operation
> > LookupAccountName works as desired when feeding it the domain name
> > and the user name.  Actually, for completeness the testcase tries it
> > two ways:  Once only with the username, once with dom\username.
> >=20
> > The reason for testing this is, if the reverse lookup works with only
> > the name we *could* go ahead and omit the domain from the Cygwin
> > username.  I'm not yet sure if that's feasible, but it's certainly worth
> > a try.
> >=20
>=20
> Both seem to work. I guess what you are proposing makes sense - the
> AzureAD domain is like a single domain with multiple tenants (yeah, I
> don't really know what I'm talking about with respect to AD....).
> Anyway, let me know if you want me to do any more testing, I'm still
> very willing to be a Guinea Pig (squeek squeek) - thanks for figuring
> this out for me!
>=20
> Unknown+User@Lenovo-PC /cygdrive/c/cygwin64
> $ gcc -W azure-check5.c -l Netapi32 -o azure-check5
>=20
> Unknown+User@Lenovo-PC /cygdrive/c/cygwin64
> $ ./azure-check5
> Sid: S-1-12-1-2043906341-1249388050-2635137163-399631282
> Dom\Name: AzureAD\RussellMora
> Reverse Sid (RussellMora): S-1-12-1-2043906341-1249388050-2635137163-3996=
31282
> Reverse Sid (AzureAD\RussellMora): S-1-12-1-2043906341-1249388050-2635137=
163-399631282

Good to know, thank you.  Give me a bit and I'll come up with a Cygwin
DLL for testing.


Stay tuned,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--g6ugk6inas7ixmji
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=kZAS
-----END PGP SIGNATURE-----

--g6ugk6inas7ixmji--
