X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=oicGn1XClV1wLJm89lcVxwl/IyHZsb/WbCUNdYjeo2uVeq09URhYq
	IfCShsWPdy6hheBGEfXWpqyQHjV68GNfdQhkZGPcKulbeyso1YzDqTfIxNZMtRtK
	zMKyGHXusb+McNaSoXj9ZbNFX/f3m9shf6AQGxH6o+dAM5PzHjK7t8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=eKnbh2d+T65rhWLu2yTHDnAKiis=; b=dBhKt9lBhyJDLaRgxydxqLNJONyC
	KXGKbYTfy0AADvuU1FAvLUD139j8Zg1liFGjrN1Iw7nc77F0//q93YHFcpyCt5w5
	aYIdd4ukqUBtLpNKutbk4jEXsVt2zjV/w4ppWp2f/Cz64o97iwq/CoaVTQP2gjRf
	Z7i3igkkyCaBODM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Wed, 26 Feb 2014 11:02:09 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Testers needed:  New passwd/group handling in Cygwin
Message-ID: <20140226100209.GR2246@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20140213143849 DOT GH2246 AT calimero DOT vinschen DOT de> <87fvn7cb68 DOT fsf AT Rainer DOT invalid> <20140225200414 DOT GA4238 AT calimero DOT vinschen DOT de> <87y50zaqjb DOT fsf AT Rainer DOT invalid> <20140225215423 DOT GA6065 AT calimero DOT vinschen DOT de> <loom DOT 20140226T085959-119 AT post DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="8ikq6d094XsNnsVx"
Content-Disposition: inline
In-Reply-To: <loom.20140226T085959-119@post.gmane.org>
User-Agent: Mutt/1.5.21 (2010-09-15)

--8ikq6d094XsNnsVx
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 26 08:09, Achim Gratz wrote:
> > Sorry, I don't grok this.  What has a web application server to do with
> > asking a DC for user info?
>=20
> We have one of these that does a lot of DC lookups because it authenticat=
es
> all users.  It's also in a much faster network, so I can check there what
> the lookup rate could be reasonably expected to be.
>=20
> > Erm... how often are you calling id, usually?
>=20
> I'm currently doing this in the login process to figure out whether the
> prompt should show "root" powers.  I'll have to figure out something else=
 to
> do instead.

No, you don't.  I'm actually doing the same.  Let's keep up with this
and try to make Cygwin faster in the first place.

> > Also, we're in the early
> > stages of testing this change.  The idea is not that you just switch,
> > the idea is that we *test* this and I get enough feedback to be able to
> > ease the biggest pains.
>=20
> Understood.  Until now I had to generate passwd and group files and I was
> hoping that the need for doing that would go away (I'd also need to talk =
to
> our AD folks so they start populating the correct fields).

Yup.  Feedback from AD admins is greatly appreciated.

> > Other than that, I just had an in-shower inspiration how to speed up
> > `id' specificially.  The getgroups(2) call is in the center of this and
> > I could probably speed up the stuiff a lot by opening the LDAP
> > connection in getgroups only once.=20
>=20
> Thursday?  :-)

Hmm, probably.

> > Also, more radically, if we drop the functionality to define another
> > group name for a group, we could drop the requirement to open an LDAP
> > connection to fetch group information to the DC entirely(*).  This would
> > only affect domain groups, local groups could still have different
> > names.  But I'm already wondering for a couple of days if having a
> > Cygwin group name different from the Windows group name is really
> > necessary at all.  I added this years ago for fun, but there's no
> > serious reason I can think of which would require to keep up with this.
> >=20
> > (*) Assuming the group info is cached in the local LSA, which is
> >     pretty likely for the groups of the current user.
>=20
> That would also work for me (I don't think I've ever used that feature
> consciously).
>=20
> > Sigh.  Testing in this tempo will take ages.
>=20
> Sorry, but that's not my decision to make in this case.  I'll see if I can
> sneak in something until the end of the week.

That would be nice.  Especially since your mail was the last straw
which keeps me from having to do *shudder* more documentation.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--8ikq6d094XsNnsVx
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=MZVW
-----END PGP SIGNATURE-----

--8ikq6d094XsNnsVx--