Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Wed, 20 Mar 2002 10:10:53 +0000
Message-ID: <2995-Wed20Mar2002101053+0000-starksb@ebi.ac.uk>
X-Mailer: emacs 20.7.1 (via feedmail 9-beta-7 I);
	VM 7.00 under Emacs 20.7.1
From: David Starks-Browning <starksb AT ebi DOT ac DOT uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Corinna Vinschen <cygwin AT cygwin DOT com>
Subject: Re: Telneting/ftping to cygwin
In-Reply-To: <20020319160607.W29574@cygbert.vinschen.de>
References: <01C1C6BD DOT CE90CFC0 DOT rafael DOT botejara AT sema DOT es>
	<3C88E12D DOT 2E6DBDCC AT iee DOT org>
	<20020308192353 DOT Q13590 AT cygbert DOT vinschen DOT de>
	<3C8C8487 DOT 60308 AT pace DOT co DOT uk>
	<20020311124504 DOT K29574 AT cygbert DOT vinschen DOT de>
	<2077-Mon11Mar2002135448+0000-starksb AT ebi DOT ac DOT uk>
	<20020318170848 DOT GA24475 AT redhat DOT com>
	<6272-Tue19Mar2002124114+0000-starksb AT ebi DOT ac DOT uk>
	<20020319160607 DOT W29574 AT cygbert DOT vinschen DOT de>

On Tuesday 19 Mar 02, Corinna Vinschen writes:
> > I've made several superstitious changes to /etc/passwd, /etc/group,
> > but the bottom line is I can now login (telnet and ssh) only with
> > ntsec set.  If I disable ntsec, I get the usual:
> > 
> > 	System Process - Application Error : The application failed to
> > 	initialize properly (0xc0000022).  Click on OK to terminate
> > 	the application.
> > 
> > But only with a domain account.  If I login to a local account, it
> > succeeds, even without ntsec.
> 
> Both accounts are correct in /etc/passwd?
> The primary groups of the accounts are both in /etc/group?

Yes and yes.  AFAICT.  Certainly enough so that it works with ntsec.

I don't know if it's related, but I notice some differences with "id",
depending on whether ntsec is on or off, when I login, via the NT
console, to my domain user account.

Here are excerpts from my /etc/passwd and /etc/group files:

/etc/group
~~~~~~~~~~
Everyone:S-1-1-0:0:
None:S-1-5-21-2063797194-1668831906-355810188-513:513:
Users:S-1-5-32-545:545:
Domain Users:S-1-5-21-1516261886-1165125591-538272213-513:10513:

/etc/passwd
~~~~~~~~~~~
starksb::11024:10513:David Starks-Browning,U-EBI\starksb,S-1-5-21-1516261886-1165125591-538272213-1024:/d/starksb:/bin/bash
BRYCE\starksb::1004:513:David Starks-Browning (Local Administrator),S-1-5-21-2063797194-1668831906-355810188-1004:/d/starksb:/bin/bash

(The entries were created very long ago, but I added 10K manually to
the domain uid & gid to match the latest output of mkpasswd.)

When I login as EBI\starksb via the NT console, "id" reports
differently depending on the value of ntsec:

ntsec on
~~~~~~~~
uid=11024(starksb) gid=10513(Domain Users) groups=0(Everyone),545(Users),10513(Domain Users)

ntsec off
~~~~~~~~~
uid=11024(starksb) gid=10513(Domain Users) groups=10513(Domain Users)

When ntsec is off, "id" does not report membership in the local groups
Users and Everyone.  Again, I have no idea whether this is relevant,
but I thought I would report it.

Hope this is useful.

Regards,
David



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/