DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D9CAD3858D33
MIME-Version: 1.0
References: <CAKAoaQnFxij4Np-jg+bOLEpiSziCfamFrJ2FR_JeO+Sv_Td2Kg@mail.gmail.com>
 <ZdecXZNUgQ3i0hYN@calimero.vinschen.de>
 <CAKAoaQ=rCwVHnHAqfd5C3kC45GPE4ZHbbgCWrdM64sojLMuMyA@mail.gmail.com>
 <Zdi-CnGX3CwWA0nl@calimero.vinschen.de>
 <CAKAoaQ=kLW3houqanjcN9Qk1++BtgW-dNRiXjLYwCRTYEzoN=w@mail.gmail.com>
 <CAAvCNcCHAVooYX2_tUHHnUYvWRKHWhBwxmKws7AcqjOo-sQd+g@mail.gmail.com>
 <Zdnq5yJha75NTpgd@calimero.vinschen.de>
 <CAAvCNcAEAr0gFdR_excafHq8+cYjDvf_APb1So-AAWGSu2+zTQ@mail.gmail.com>
 <ZehpEr18QUP6C3Ge@calimero.vinschen.de>
 <CAAvCNcCcfO9br8avaNo6tg-FLHef4aH9P8AVyr95bs9ArTTSJQ@mail.gmail.com>
 <Ze83202vozq9T8Jj@calimero.vinschen.de>
In-Reply-To: <Ze83202vozq9T8Jj@calimero.vinschen.de>
Date: Sat, 20 Apr 2024 01:44:51 +0200
Message-ID: <CAAvCNcDrVDLETrCTTH6EPEx_bs=Ao8kC5rev1-Xs8Qn1CWbvdQ@mail.gmail.com>
Subject: Re: Switching groups with newgrp - how to get the new group with
 |GetTokenInformation()| ?
To: cygwin@cygwin.com
From: Dan Shelton via Cygwin <cygwin@cygwin.com>
Reply-To: Dan Shelton <dan.f.shelton@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>

On Mon, 11 Mar 2024 at 17:57, Corinna Vinschen via Cygwin
<cygwin@cygwin.com> wrote:
>
> On Mar 11 02:28, Dan Shelton via Cygwin wrote:
> > On Wed, 6 Mar 2024 at 14:01, Corinna Vinschen via Cygwin
> > <cygwin@cygwin.com> wrote:
> > > On Mar  5 23:38, Dan Shelton via Cygwin wrote:
> > > > Always editing /etc/nsswitch.conf
> > > > forth and back is not a elegant solution, aside from race conditions
> > > > with other users on a system
> > >
> > > So, here we go again.
> > >
> > > - What exactly are you trying to accomplish by enumerating the accounts?
> > >   Maybe you won't actually need it for your task at hand.
> >
> > We're trying to do several things, including but not limited to:
> > - Finding which local groups exist. Part of our customer software
> > expects that certain groups exist. Unfortunately the group names vary
> > between installations, and sometimes names are prefixed with site
> > names. Trying to do all permutations with just getent passwd
> > $iteration means too many combinations (>= 4000000). So just
> > enumerating all local groups with getent group would be the way to go.
>
> Then just change /etc/nsswitch.conf to enumerate "local" as well
> and be done with it.

That file is read-only for some customer installations, and we are not
allowed to touch it.

>
> You can even go so far as to use the Windows enumerator, i.e.,
>
>   $ net localgroup
>
> and than script it to use its output as input to getent group
> for only the groups you really need info for.

net localgroup changes layout and messages per system locale. That
might be nice to watch as a human user, but impossible to write a
parser. That damn thing does not honor LC_ALL, and I am now basically
forced to write custom parsers for each customers language.

Dan
-- 
Dan Shelton - Cluster Specialist Win/Lin/Bsd

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple