Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Date: Tue, 11 Dec 2001 17:07:30 +0100
From: Corinna Vinschen <cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: cron doesn't run (was: Re: login and ssh: can't authenticate)
Message-ID: <20011211170730.Y740@cygbert.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <8BFEC206D292D311921500508B0BCB8D0A0ED7C6 AT msgstl01 DOT sbc DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <8BFEC206D292D311921500508B0BCB8D0A0ED7C6@msgstl01.sbc.com>; from ja7295@sbc.com on Tue, Dec 11, 2001 at 09:04:40AM -0600

On Tue, Dec 11, 2001 at 09:04:40AM -0600, ASH, JAMES (SBCSI) wrote:
> One thing that seems to be an issue with this is that, if my pc isn't
> networked (not connected to our lan), then cron works.  Has anyone else
> experienced this?

My box is always connected to a lan so that shouldn't be a problem.

I don't have a problem to get cron working and I don't have a problem
to get a working user switch (with cron,ssh,telnet,ftp,rsh,...).  That
probably means, I'm doing something pretty automatically which I don't
think about anymore which other persons miss to do.  The thing is, I
really don't know what that might be.  I dare to say that I'm not
doing something mysterious.

I'm maintaining my /etc/passwd and /etc/group files with some care.
They contain always the SIDs of the users and groups.  I even added
some NT internal groups to my /etc/group file

local:S-1-2-0:2:
dialup:S-1-5-1:101:
network:S-1-5-2:102:
batch:S-1-5-3:103:
interactive:S-1-5-4:104:
service:S-1-5-6:106:
anonymous:S-1-5-7:107:
proxy:S-1-5-8:108:
enterprise domain controllers:S-1-5-9:109:
self:S-1-5-10:110:
authenticatedusers:S-1-5-11:111:
restricted:S-1-5-12:112:
terminal server user:S-1-5-13:113:
remote interactive logon:S-1-5-14:114:
local_svc:S-1-5-19:119:
netwrk_svc:S-1-5-20:120:
creator owner:S-1-3-0:130:
creator group:S-1-3-1:131:
creator owner server:S-1-3-2:132:
creator group server:S-1-3-3:133:

but I didn't do that on all my NT boxes!  It's more for testing
purposes and to have some supplementary groups in `id' output.

One thing I'm doing always is to change these lines in /etc/passwd

	Everyone:*:0:0:,S-1-1-0::
	Administrators:*:544:544:,S-1-5-32-544::

to

	Everyone:*:1:1:,S-1-1-0::
	root:*:0:0:,S-1-5-32-544::

and these lines in /etc/group

	Everyone:S-1-1-0:0:
	Administrators:S-1-5-32-544:544:

to

	Everyone:S-1-1-0:1:
	root:S-1-5-32-544:0:

But I _never_ change these lines

	SYSTEM:*:18:18:,S-1-5-18::	/etc/passwd
	SYSTEM:S-1-5-18:18:		/etc/group

The shell and the home directory are set up correctly for my
users in /etc/passwd.  Paths are given in POSIX notation.  I
never use /cygdrive paths in /etc/passwd.  I'm always setting
CYGWIN to `binmode tty ntsec' in the system environment.  All
important mount points are binary system mounts.  I don't expect
shares to work for processes changing the user context w/o
password and I don't expect to have user mount points then.

I'm always looking for the permissions of the concerned files and
directories.  SYSTEM must have permission to read all files in
/var/cron for example.  SYSTEM must have read permisssion on /etc
and the important files in it.  SYSTEM must be owner of the /etc/ssh*
files.

Hope that helps.  I'm really getting tired of answering that sort
of mail.  Everything should be in the mailing list archive now.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/