Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Sat, 15 Mar 2003 12:58:04 -0500
From: "Pierre A. Humblet" <pierre DOT humblet AT ieee DOT org>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)
Message-ID: <20030315175803.GA811047@hpn5170x>
Mail-Followup-To: "Pierre A. Humblet" <pierre DOT humblet AT ieee DOT org>,
	cygwin AT cygwin DOT com
References: <20030313205847 DOT E1E4B1C221 AT redhat DOT com> <3E710A26 DOT 5050207 AT t-online DOT de> <20030314025249 DOT GB33739617 AT hpn5170x> <3E718AD8 DOT 4010209 AT t-online DOT de> <3E71E0D9 DOT 682AD75E AT ieee DOT org> <3E720139 DOT 70402 AT t-online DOT de> <3E7206BA DOT 9543594A AT ieee DOT org> <3E72FDD1 DOT 5060200 AT t-online DOT de>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <3E72FDD1.5060200@t-online.de>
User-Agent: Mutt/1.4i

On Sat, Mar 15, 2003 at 11:17:53AM +0100, Markus Schönhaber wrote:
> >>>
> >>>>I just started setup under a non-privileged account and XP's mechanism 
> >>>>to
> >>>>show the "Run as Administrator" dialog when starting a program called
> >>>>"setup.exe" or "install.exe" kicked in.
> 
> I have done some more research now but it seems the exact specification is
> buried somewhere where at least I can't find it. Nevertheless I have found
> some potential reasons for the "Install Program as other User" dialog not
> appearing. In the W2k Group Policy Reference there are two pages related
> to this:
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/337.asp
> describes how to turn off this feature using group policy, while
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/338.asp
> explains how to enable it even for network shares.
> There is (as always?) a registry entry related to the Group Policy:
> http://www.tburke.net/info/regentry/GPRef.htm#93546
> (should check for Microsoft's documentation regarding this point - but I 
> believe him)
> 
> There is also a knowledge base article with the same info:
> http://support.microsoft.com/?kbid=310360
> Just loosely related but also interesting:
> http://support.microsoft.com/?kbid=314855
> 
> This clearly doesn't answer your questions where this feature is 
> documented and whether it is language dependent but it hints at two more 
> spots to look at when it's not working:
> - it might be turned off by Group Policy or the corresponding registry 
> value,
> - setup.exe might reside on a network share meaning that the "Install..." 
> dialog won't show up by default (could verify that behaviour on my machine).

OK, thanks for the research, Markus. That's a feature that looks useful but
it complicates the support. When a user reports a problem with setup we don't 
know if it "Ran As", or not. Most users think the pop up is from setup itself,
one of the many questions setup asks, and few ever mention it.

Software that is run my thousands of users, many of them newbies, should act
predictably. Perhaps we should rename setup.exe to something that won't trigger
the Run As, such as cygsetup.exe  Sophisticated users can always Run As 
explicitly.

> >I recall another problem that somebody had reported after answering "yes".
> >The chown command in a postinstall script had no effect. That would mean
> >that at, at least at that site, the program was lacking the Restore 
> >privilege.
> >To test if this is a prevalent problem, a simple test is to put a 
> >testchown.sh script in /etc/postinstall . setup will then run it and wecan
> >see if the command worked.
> 
> I'll check that out. But you'll have to explain that to me in clear and 
> simple words, that even I am able to understand what I am supposed to do.

Very simple. Put the text below in /etc/postinstall/testchown.sh, then run setup
as an ordinary user (with Run As). After running, there should by a file 
/etc/testchown, containing info about user & group membership (can be useful).
Check if it is owned by SYSTEM or not. testchown.sh will be renamed to 
testchown.sh.done, so you need to undo the renaming if you try multiple times.
Again the purpose of the test is to understand what users face.

Pierre

#! /bin/sh

export CYGWIN=ntsec
rm -f /etc/testchown
id >> /etc/testchown
touch /etc/testchown
chown 18:18 /etc/testchown



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/