DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-transfer-encoding
	:mime-version; q=dns; s=default; b=OOjaQzx+kOHiE74fQwWp8Z+Nj7+FK
	DA5QqTE575dU9n0GX93VU2NFtm1y9A1NFaGH2+XXRKx7Me6ZlvEVq1HFd97q0CjC
	dagOEUo9rxIl+m4qSqA4610zvvCv6ht/t15mqA442wT9g5PA/Tf4bMSZI/rnlEHu
	HSW44Uv8ovIwrk=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
From: Maayan Apelboim <Maayan.Apelboim@clarizen.com>
To: "cygwin@cygwin.com" <cygwin@cygwin.com>
Subject: RE: getent doesn't work properly
Date: Mon, 28 Oct 2019 08:56:36 +0000
Message-ID: <AM4PR07MB34733571EBDE3D0F1EB778C795660@AM4PR07MB3473.eurprd07.prod.outlook.com>
References: <20191018105229.GE16240@calimero.vinschen.de> <AM4PR07MB34731435DFE766479991C050956B0@AM4PR07MB3473.eurprd07.prod.outlook.com> <20191023114234.GZ16240@calimero.vinschen.de> <AM4PR07MB347382AE0B09286C8E8190C8956B0@AM4PR07MB3473.eurprd07.prod.outlook.com> <20191024140611.GG16240@calimero.vinschen.de>
In-Reply-To: <20191024140611.GG16240@calimero.vinschen.de>
received-spf: None (protection.outlook.com: clarizen.com does not designate permitted sender hosts)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-userprincipalname: Hw34VcZDiOcoC+2CgoIjNy+0jGNDB/c34H7Kz15BWzI7ZS3i5vvgJM0P+GdqOuEF5XttT1rTijQ+Y0sKepL5NwdaHs+Nn8c395sZSgzLeV8=
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id x9S8vGY7017452


Thanks.  What happens is that in the non-working scenario the user name is refused by Cygwin because it's apparently not in the primary domain of the machine.  I.e., if the machine's primary domain is "dom0", and "user1" is in "dom1", then the account has to be called "dom1+user1".  The name only is forbidden in this case.

However, this doesn't explain why this happens at all since apparently "user1" is in the primary domain of the machine, and why it only fails intermittendly.  In both cases, working and non-working, the domain is returned by the same Windows call LookupAccountNameW.

What's really strange is that in the working case a lot of network related Windows DLLs are loaded into the process, e.g. wshqos.dll, WSHTCPIP.DLL, wship6.dll etc., while this does not happen in the non-working case.  None of these DLLs is requested by Cygwin, so this is something occuring in the native Windows background.  This is a bit suspicious and may point to some interaction with a virus scanner or something along these lines, and which for some reason doesn't always work as desired (Avast, anybody?)  Can you check this, perhaps?

Apart from that first question is, is the domain really called "dom"
and is the user account name really "user1"?  I'm asking because the name may collide with another account name from a builtin or second domain, and sometimes the wrong user account is returned by the Windows functions for whatever reason.

Second question is, can I send you the URL to a Cygwin test DLL with extended debug info in private email?  In this case I'd only need the non-working trace, preferredly verbatim, and you can return the trace by private email as well.


Thanks,
Corinna

--
Corinna Vinschen
Cygwin Maintainer


---------------------------------

After reading your email I started to suspect having a domain issue.
I removed the server from the domain, deleted all its relevant records and rejoined it.
It seems the problem was solved for now.
I already tried in the past removing it from the domain, and even reinstalled the server, but it didn't help, I think deleting all corresponding records after removing from domain did the trick.

I will update if this issue re-occurs.

I really appreciate the help!

Thanks!


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple