DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=PaKQX1+Ll1215Z1D
	P2DE6VuQ+eB+b3mIhMnKRDKbqnXIekFi0YgmxGO+nLML1jIpKYAGOxCzOpXMdaBD
	WF9o00Chfpb8QPOde1YUhZ8cymdSzg1P6QUwZ3di22BEEcEpr3ktZx3rAY9F6S5o
	E5axcNuJ1r+YZuRjQiaeccLMSEc=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Subject: Re: openssh: privilege separation no longer supported on Cygwin? SURPRISE!
To: cygwin@cygwin.com
References: <d436698bbd53eef3cbdda788d4926109@xs4all.nl> <37b863f6-ce5c-ef13-569f-8044fe485075@gmail.com> <20e2702ca3837f5d54c558f8e786c717@xs4all.nl> <b16023ad6735108510ae351a8378a420@xs4all.nl> <262615c8cf6e134cedf97b0280c4a68f@smtp-cloud2.xs4all.net> <592E1C49.6020202@cygwin.com> <38be07babbfc69d5ccea67afe6f92794@smtp-cloud2.xs4all.net> <28f7eeae-ed40-9837-53bc-d2d6a33ad5a7@gmail.com> <353243559c68bf1200675e2dc13c3d93@smtp-cloud2.xs4all.net> <b4649f29-b2bb-b735-463b-91cbe7e13654@gmail.com> <3379afa6b42f91b1cc23cada04ce40b6@smtp-cloud3.xs4all.net>
From: cyg Simple <cygsimple@gmail.com>
Message-ID: <7d867da5-47d9-4d6b-5262-d8b7a4ebc6c4@gmail.com>
Date: Wed, 31 May 2017 14:45:39 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <3379afa6b42f91b1cc23cada04ce40b6@smtp-cloud3.xs4all.net>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

On 5/31/2017 12:34 PM, Houder wrote:
> On Wed, 31 May 2017 10:59:38, cyg Simple wrote:
>> On 5/31/2017 10:16 AM, Houder wrote:
>>> On Wed, 31 May 2017 09:27:02, cyg Simple wrote:
>>>
>>> [snip]
>>>> All of this talk of /etc/passwd leads me to point you to
>>>> https://cygwin.com/cygwin-ug-net/ntsec.html.
>>>
>>> cyg,
>>>
>>> Do you want me to study that text a second, third, fourth or Xth time ...?
>>>
>>
>> Yes, especially section
>> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping where it
>> explains that /etc/passwd and /etc/group are now deprecated and it's use
>> is for backward compatibility and that you should be using
>> /etc/nsswitch.conf[1] instead.  Have you attempted this?
>>
>> [1] https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch
> 
> Actually, that text reads:
> 
>  = Mapping Windows SIDs to POSIX uid/gid values:
> 
>   * Read /etc/passwd and /etc/group files if they exist, just as in the olden
>     days, mainly for backward compatibility.
> -----
> 
> It does not stipulate that these files are no longer supported ... Corinna did
> not dare to proclaim them "deprecated".
> 
> Do I use the file /etc/nsswitch.conf? Yes, certainly. As shown in:
> 
>     https://cygwin.com/ml/cygwin/2017-05/msg00456.html
>     (see bottom of post)
> 
> Do you want me to drop /etc/{passwd,group} files. Yes, you do. I will not.
> 

That choice is yours but they are needless except for very limited needs.

> Moreover, it is completely irrelevant from a logical point of view  whether
> /etc/{passwd,group) or AD is used to maintain the "network administration".
> 

So what.  You have to maintain separate multiple databases for the same
user.

Just give removing these two files a try to see if you have good success.

-- 
cyg Simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple