Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Mon, 15 Jul 2002 11:16:51 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: Cygwin <cygwin AT cygwin DOT com>
Subject: Re: cron and NT domains
Message-ID: <20020715111651.C6932@cygbert.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: Cygwin <cygwin AT cygwin DOT com>
References: <20020712091627 DOT B10982 AT cygbert DOT vinschen DOT de> <20020714200717 DOT A1693 AT SmartSC DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020714200717.A1693@SmartSC.com>
User-Agent: Mutt/1.3.22.1i

On Sun, Jul 14, 2002 at 08:07:17PM -0700, David MacMahon wrote:
> I have created my /etc/passwd and /etc/group files by hand and they work
> fine for ntsec and telnet and ftp.  It is only cron that has a problem
> and only cron that attempts to switch user context to my domain account
> WITHOUT a password.  This is what led me to believe that this is
> actually intentional behavior.  It seems to me that without this
> behavior, one could easily impersonate another domain user simply by
> concocting the proper /etc/passwd entry and creating a crontab job for
> that user.

It's the same situation as on U*X.  If /var/cron/cron.allow and/or
/var/cron/cron.deny aren't maintained...

If you'd use sshd, it would change user context w/o password, too.

However, I have no idea why cron doesn't work for you.  I don't know
enough of your environment.

> One other slightly odd thing is that my RID (i.e. the last number of my
> SID) is greater than 65535.  So in the uid field of /etc/passwd, I have

That's not odd.  uids and gids are 16 bit values so far.

> to put (RID modulo 65536) otherwise things don't work right.  For

You can choose any free uid < 65536.  It's your choice as described
in http://cygwin.com/cygwin-ug-net/ntsec.html#NTSEC-RELEASE1.1

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/