X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:to:subject:message-id:reply-to :references:mime-version:content-type:in-reply-to; q=dns; s= default; b=oicGn1XClV1wLJm89lcVxwl/IyHZsb/WbCUNdYjeo2uVeq09URhYq IfCShsWPdy6hheBGEfXWpqyQHjV68GNfdQhkZGPcKulbeyso1YzDqTfIxNZMtRtK zMKyGHXusb+McNaSoXj9ZbNFX/f3m9shf6AQGxH6o+dAM5PzHjK7t8= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:to:subject:message-id:reply-to :references:mime-version:content-type:in-reply-to; s=default; bh=eKnbh2d+T65rhWLu2yTHDnAKiis=; b=dBhKt9lBhyJDLaRgxydxqLNJONyC KXGKbYTfy0AADvuU1FAvLUD139j8Zg1liFGjrN1Iw7nc77F0//q93YHFcpyCt5w5 aYIdd4ukqUBtLpNKutbk4jEXsVt2zjV/w4ppWp2f/Cz64o97iwq/CoaVTQP2gjRf Z7i3igkkyCaBODM= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2 X-HELO: calimero.vinschen.de Date: Wed, 26 Feb 2014 11:02:09 +0100 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: Testers needed: New passwd/group handling in Cygwin Message-ID: <20140226100209.GR2246@calimero.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: <20140213143849 DOT GH2246 AT calimero DOT vinschen DOT de> <87fvn7cb68 DOT fsf AT Rainer DOT invalid> <20140225200414 DOT GA4238 AT calimero DOT vinschen DOT de> <87y50zaqjb DOT fsf AT Rainer DOT invalid> <20140225215423 DOT GA6065 AT calimero DOT vinschen DOT de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="8ikq6d094XsNnsVx" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) --8ikq6d094XsNnsVx Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Feb 26 08:09, Achim Gratz wrote: > > Sorry, I don't grok this. What has a web application server to do with > > asking a DC for user info? >=20 > We have one of these that does a lot of DC lookups because it authenticat= es > all users. It's also in a much faster network, so I can check there what > the lookup rate could be reasonably expected to be. >=20 > > Erm... how often are you calling id, usually? >=20 > I'm currently doing this in the login process to figure out whether the > prompt should show "root" powers. I'll have to figure out something else= to > do instead. No, you don't. I'm actually doing the same. Let's keep up with this and try to make Cygwin faster in the first place. > > Also, we're in the early > > stages of testing this change. The idea is not that you just switch, > > the idea is that we *test* this and I get enough feedback to be able to > > ease the biggest pains. >=20 > Understood. Until now I had to generate passwd and group files and I was > hoping that the need for doing that would go away (I'd also need to talk = to > our AD folks so they start populating the correct fields). Yup. Feedback from AD admins is greatly appreciated. > > Other than that, I just had an in-shower inspiration how to speed up > > `id' specificially. The getgroups(2) call is in the center of this and > > I could probably speed up the stuiff a lot by opening the LDAP > > connection in getgroups only once.=20 >=20 > Thursday? :-) Hmm, probably. > > Also, more radically, if we drop the functionality to define another > > group name for a group, we could drop the requirement to open an LDAP > > connection to fetch group information to the DC entirely(*). This would > > only affect domain groups, local groups could still have different > > names. But I'm already wondering for a couple of days if having a > > Cygwin group name different from the Windows group name is really > > necessary at all. I added this years ago for fun, but there's no > > serious reason I can think of which would require to keep up with this. > >=20 > > (*) Assuming the group info is cached in the local LSA, which is > > pretty likely for the groups of the current user. >=20 > That would also work for me (I don't think I've ever used that feature > consciously). >=20 > > Sigh. Testing in this tempo will take ages. >=20 > Sorry, but that's not my decision to make in this case. I'll see if I can > sneak in something until the end of the week. That would be nice. Especially since your mail was the last straw which keeps me from having to do *shudder* more documentation. Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --8ikq6d094XsNnsVx Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJTDbugAAoJEPU2Bp2uRE+g1ZoP/2tFyQDTTY6bNyQ27henZg9k DIk7iKl8B/EqvS6jrMEg2gXIMn4P0apL+jDmOXD4WvPjS8YmJ4wRKBPakdnJgNOC FrFA14xybDIsCePYiv5fqLN5pTJ7QQDvq7CK9hxT2ZuMdGjMXwSidtj8px1sziK1 L1AUnFzglAZLftw7Ti50QggqLoRbG/YSkwLq3eTuWnf7+8B+5HczhX5n2t87rEuw Wnq99sdTyaYtCtHQ/XMk35vZ89UGIwD8KaE9JXxEdUBMCXutxq0+s0BCLeN7W9V0 ZiBOW91IviSVn/xyl7XVtuug+0FAyORa/i9V9wWFGLvy+yihv//GqiQJUdD3rqPY ZWLV4czUXXyF00CKBbikoPXHzOZrxfplblIjRabuAc5mV30jCUcvnRTLF0HnS4em pLlv77u5eWSYz9pd5fq/yEgVrj1xW8B0jFnEs0hkfA5setsKzOla7Ab7SAKM0f60 L1vJzMt8h9IqXOXtHgVNh+YrmpNoazmrCaN29xGhKKAt4w6gmmwTOqKKFPQlZ5WN 7iRxnFgFo4hQaniBzWAKvdFN2n+wSIvRixetILIJBMZdpeTK7xHSZJDnnEybhPcm dlLZpQYqSKcspzHzU/uzJUrRAwTjSkTJr0tRIMAkEuJYBpeHJAucGBaXyvSDMunE qJ/RsUDlnNkT89aQaCQq =MZVW -----END PGP SIGNATURE----- --8ikq6d094XsNnsVx--