X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.7 required=5.0 	tests=AWL,BAYES_00,SARE_MSGID_LONG40,SPF_PASS
X-Spam-Check-By: sourceware.org
MIME-Version: 1.0
In-Reply-To: <20090421172828.GL8722@calimero.vinschen.de>
References: <af075b00904210656p2e8005b6geaad28206f89c121 AT mail DOT gmail DOT com>  	<20090421153141 DOT GI8722 AT calimero DOT vinschen DOT de> <af075b00904210943mfa155e4ycabf9ba1ac2efc24 AT mail DOT gmail DOT com>  	<20090421172828 DOT GL8722 AT calimero DOT vinschen DOT de>
From: Julio Costa <costaju AT gmail DOT com>
Date: Wed, 22 Apr 2009 10:45:35 +0100
Message-ID: <af075b00904220245r3a01f653t169f848751618223@mail.gmail.com>
Subject: Re: [openssh] service with domain user
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Tue, Apr 21, 2009 at 18:28, Corinna Vinschen wrote:
>
> Well, PTC. =C2=A0If you have a domain account, its rights are usually
> administered centralized.

Not here.

> Who are we to change the user rights locally
> for that user? =C2=A0That's the responsibility of the admins.

Precisely. In this context, I'm Admin (the local one).

> And here's
> another problem in domain environments: =C2=A0If the environment is using
> domain policies,

It isn't. Not for privileges, anyway.

> you might even be out of luck to set the user rights at
> all on your local machine. =C2=A0Even in my tiny setup at home you would =
be
> unable to install a domain member machine and change cyg_server's rights.
>

Of course. It that particular scenario. But it isn't mine.
Just because there are cases in which the proposed implementation will
not work (and they are supposed to be that way), it's not a reason to
not implement for those folks who would, but they can't, just because
it's not implemented.

>> Actually I'm a bit surprised with the amount of (small, tiny,
>> amounting to a huge pile) problems that I've bumped into which are
>> most of the time related to the fact I'm using a domain user...
>
> Well, sorry about that. =C2=A0You got what you paid for. =C2=A0You're not=
 the only
> domain user out there. =C2=A0You're expecting something which just isn't
> there. =C2=A0The script was meant to ease the installation for local user=
s in
> the first place. =C2=A0In corporate or governmental environments I don't
> expect the script to work OOTB. =C2=A0The script will almost never meet t=
he
> requirements exactly.
>

Ok, that's the current status.
That's precisely what I was asking with all this blahblah of mine.

>> [...rants deleted...]
>

Ok, sorry for the tone.
I now think that I was putting too much expectation on the wrong features.

> Again, these service installation scripts are a volunteer effort which
> many users are happy with. =C2=A0Due to the complexity of different Windo=
ws
> installations they won't work smoothly in all environments. =C2=A0Too bad=
 the
> script doesn't fit your needs, but, as others, I have only so much time
> to work on that stuff.
>

Nobody is "accusing" of not working or anything... :)
The objective of this mail was simply to "sense" if the current status
regarding Cygwin vs domain users:
1) is expected to be that way (currently);
2) is desirable to change (in a more "compatible" way to domain users);

1) Is unquestionably answered: It is.
2) Apparently, by your argumentation, the answer is no. Nevertheless,
we can close this subject for now.
I will have to do something about this (for me, at least). It I found
it suitable for patching Cygwin, PTC. And then it's your call. No hurt
feelings or anything.

>> Regarding editrights, I think that there is a problem also.
>> Is the reported output in my previous email as expected?
>
> No. =C2=A0The account is missing the other rights I talked about in my fi=
rst
> reply.

I know that is missing rights. That's wasn't my question.
I'll try to rephrase: "Shouldn't the two 'editrights' commands, in the
given context, give the same output?"
Or, as an alternative question: "Why do the first 'editrights' command fail=
s?"

___________
Julio Costa

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/