Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-Id: <3.0.5.32.20040225184223.008423d0@incoming.verizon.net>
X-Sender: vze1u1tg AT incoming DOT verizon DOT net
Date: Wed, 25 Feb 2004 18:42:23 -0500
To: "Winch Jr., Wayne S" <Wayne DOT WinchJr AT ca DOT com>, <cygwin AT cygwin DOT com>
From: "Pierre A. Humblet" <Pierre DOT Humblet AT ieee DOT org>
Subject: Re: Cron Running As UID 400
In-Reply-To: <088E00BE0B18574C8C18066EB18A653204F38ED0@usilms21.ca.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"

At 06:18 PM 2/25/2004 -0500, Winch Jr., Wayne S wrote:
>
>Pierre,
>
>Windows Task Manager reports the user as SYSTEM for all cygrunsrv
>processes and their children (cron, inetd, etc.).  Interestingly enough,
>I regenerated the /etc/passwd entry for my user login on my Windows XP
>Pro box at work and the UID field changed from what it was before (after
>I sent the initial problem email to the Cygwin list).  Then, I rebooted
>and all Cygwin related services (cygrunsrvs) were now identified as
>unknown user 400 in ps -ef.  As one would then expect, now I do not have
>any capabilities associated with these services, including ftp, telnet,
>and IPC.

At least now it's consistent! 
Is /etc/passwd readable by everybody?
Is the system mount for / (or /etc) the same as your user mount?
Is /etc/passwd on a local disk?
One way or another, SYSTEM cannot read /etc/passwd, 
although (going back to your original mail), it was initially
able to read it. 

>
>My /etc/passwd file has the SYSTEM, Administrators and my personal
>account listed as:
>
>SYSTEM:*:18:544:,S-1-5-18::
>Administrators:*:544:544:,S-1-5-32-544::
>winwa02:unused_by_nt/2000/xp:70656:10513:Winch Jr., Wayne
>S,U-TANT-A01\winwa02,S-1-5-21-2129867641-919698055-327642922-60656:/home
>/winwa02:/bin/bash

That looks OK.

>My company's domain is TANT-A01 and my username is winwa02.
>
>Also, if I type passwd, then I get the following response:
>
>$ passwd
>passwd: unknown user winwa02
>
>
>As you can see, my login entry is in /etc/passwd, but I seem to be
>logged in as a different user, even though id reports:

Does passwd support domain users?

>$ id
>uid=70656(winwa02) gid=10513(Domain Users)
>groups=544(Administrators),545(Users),143344(442-SC-CRO-R),106908(98-Sit
>e),10513(Domain Users),162415(NASiteGroups),169978(North American Sites)
>

That's OK, you are logged in as U-TANT-A01\winwa02

Pierre

>
>>Wayne,
>>
>>The only reason why a Cygwin process runs with uid 400
>>is that its SID was not found in /etc/passwd when first
>>starting from Windows (you can observe that by temporarily
>>renaming /etc/passwd and starting a fresh Cygwin process).
>>It's stange that this happens only for one cygrunsrv process
>>
>>Please use the Windows Task Manager ("Processes" tab) and
>>report the User of the strange cygrunsrv, according to Windows.
>> 
>>Pierre
>

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/