Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Authentication-Warning: slinky.cs.nyu.edu: pechtcha owned process doing -bs
Date: Sat, 24 Jan 2004 09:31:39 -0500 (EST)
From: Igor Pechtchanski <pechtcha AT cs DOT nyu DOT edu>
Reply-To: cygwin AT cygwin DOT com
To: "Ling F. Zhang" <lingfengz AT yahoo DOT com>
cc: cygwin AT cygwin DOT com
Subject: Re: domain and user localname conflict
In-Reply-To: <20040124112447.89526.qmail@web14208.mail.yahoo.com>
Message-ID: <Pine.GSO.4.56.0401240925320.16692@slinky.cs.nyu.edu>
References: <20040124112447 DOT 89526 DOT qmail AT web14208 DOT mail DOT yahoo DOT com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Sat, 24 Jan 2004, Ling F. Zhang wrote:

> I did the following after I install cygwin in my laptop (WINXP PRO),
> which has both local account and domain account with the same username
> (for example, both have user "admin"). Looks like if I log into Windows
> locally and then use cygwin, everything is fine. When I log into domain
> however, I can't do anything because I don't have permission to do
> anything.
>
> yes, I already ran:
> mkpasswd -d -l > /etc/passwd
> mkgroup -d -l > /etc/group
>
> Any idea?

Ling,

If you have two accounts with the same name in /etc/passwd, only the first
one is found when looking up by name.  The way it is invoked from the
standard scripts (and the way you ran it), "mkpasswd" will put the local
accounts first, so, if you try to log in through, say, ssh into the local
machine with the "admin" account (as in your example), Cygwin will find
the local "admin" first, and check the password accordingly.

Fortunately, there is a solution.  Cygwin account names (those in
/etc/passwd) don't have to correspond to Windows account names, as long as
the SID (the long string of numbers and digits starting with "S-")
matches.  So, you have two solutions: either move the local "admin" line
down past the domain "admin" one (which will effectively "hide" it from
look-ups by name) or rename it to something else (say, "local_admin") if
you want to access it too.
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha AT cs DOT nyu DOT edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor AT watson DOT ibm DOT com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski, Ph.D.
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster."  -- Patrick Naughton

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/