Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Authentication-Warning: slinky.cs.nyu.edu: pechtcha owned process doing -bs
Date: Tue, 20 Jan 2004 11:48:39 -0500 (EST)
From: Igor Pechtchanski <pechtcha AT cs DOT nyu DOT edu>
Reply-To: cygwin AT cygwin DOT com
To: stefan AT zachow DOT org
cc: cygwin AT cygwin DOT com
Subject: Re: running the latest cygwin on a windows 2003 server
In-Reply-To: <400D5539.7010809@zib.de>
Message-ID: <Pine.GSO.4.56.0401201143420.14918@slinky.cs.nyu.edu>
References: <400D3B18 DOT 4000305 AT zib DOT de> <6 DOT 0 DOT 1 DOT 1 DOT 0 DOT 20040120095121 DOT 03921320 AT 127 DOT 0 DOT 0 DOT 1> <400D49BE DOT 1090108 AT zib DOT de> <Pine DOT GSO DOT 4 DOT 56 DOT 0401201051430 DOT 14918 AT slinky DOT cs DOT nyu DOT edu> <400D5539 DOT 7010809 AT zib DOT de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Tue, 20 Jan 2004, Stefan Zachow wrote:

> Igor,
>
> > What is the exact message you get when you try to run Cygwin programs
> > as another user?  Which exact programs fail?  Do all the programs fail
> > in the same way?
>
> Unfortunetly users that are not in the administrator group cannot even
> start a bash.  That's why I took an Administrative user to create the
> cygcheck output.  The bash appears very shortly as a frame and
> disappears immediately again.

How about when you start bash from a command prompt (i.e., open an "MS DOS
prompt" window, "cd c:\cygwin\bin", and ".\bash.exe --login -i") as a
non-administrative user?  What if you omit "--login"?

> > BTW, it would have been more helpful to get a cygcheck output
> > as a user for whom Cygwin doesn't work...  Also, check that all the
> > programs and the necessary DLLs are readable and executable by everyone
> > (instead of just you).
>
> The initial permissions for cygwin related stuff were
>
>    user: adminst
>    group: mkgroup
>    permissions: rwx for user and group only
>
> However, I changed these to: chmod -R o+ rX after installation

This may not have worked with "nontsec".  Also, any particular reason you
used "X" instead of "x"?

> 'mkgroup'  is strange. It seems that I cannot synchronize with
> our network databases. A mkgroup -u -d DOMAIN gives the
> following two lines of output:
>
> LookupAccountName (\\Host, Domain Admins) failed with error 1332
> LookupAccountName (\\Host, Domain Users) failed with error 1332

Hmm, maybe Pierre or Corinna can voice an opinion on this one.

> > I noticed you have "nontsec" set, so that might be what's hiding your
> > problem (all files look executable, but the actual ACLs don't allow
> > other users to access them, and you don't see that via "ls").
>
> I changed to ntsec as well - but no difference.

What does "ls -l /bin/bash" under an administrative account show?  How
about "getfacl /bin/bash"?

> > On an unrelated note, it's usually not a good idea to have /cygdrive/*
> > as a target for a mount.  If I understood correctly what you're trying
> > to do, simply connect to a network drive (using "net use", for
> > example), and assign the letter "W:" to it.  Cygwin will automatically
> > pick that up as "/cygdrive/w".
>
> Ah, OK. It wasn't clear to me that cygwin automatically gathers all
> shared network drives.

It gathers all drives, network or otherwise.  I don't think it cares. :-)

> > You might also want to investigate the "(no)smbntsec"
> > option in the CYGWIN variable (see the User's Guide).
>
> That's interesting, too. I haven't seen this one. But no change to
> my problem.
>    Stefan

This is for turning security on/off on network drives.
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha AT cs DOT nyu DOT edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor AT watson DOT ibm DOT com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski, Ph.D.
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster."  -- Patrick Naughton

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/