X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=dDnpvNSlp3UKaFruoeuw20c1A71W6JBjFz3bYChA58F
	5Pi66+NgtALbOf6qo4DXvbvH2VR9ra6xC4f+VcubPHrLOsid/NWAEIVt6Fq91ae+
	EKp1OtyLaKmsT4A474+DhEbmFjBq0w4H7QIATx1gCbLfeqggmkTMeySlJwg000KM
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 s=default; bh=Q4Xt5Oxqe2G+PB2RmQl5984awr8=; b=WqdpYOWcLaCEwiIwz
	DXrlJPJZJla9Qx+kBBXON1cxeaVhI+WSvWLjn4LUJlU5Ri/u1V3335T7ybOcSUow
	WyAM6Wh58VWEgdVmNJtfeOCB6fLGSnEMBWhCltJYrGmeAFulIKt/IaGOu/sstXak
	41B3P2HnfQbTTPt5LEh+mAa1mk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-2.2 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS,T_FILL_THIS_FORM_SHORT autolearn=ham version=3.3.2
X-HELO: mail-ie0-f179.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20130820;        h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to         :subject:references:in-reply-to:content-type         :content-transfer-encoding;        bh=w88DCtJlbSZ/6Lz8OWYAXon1GDNeTUWcknZ7TX7xt3M=;        b=X54fJdsqZ5r/f2nPhouTTUL+7wUiiLWxlyzDPY/+Tpggjf9RzpE2nmPq3Jg2qWEHx2         lkeUjkkPBxdJnJN8PPvvbB0C0T1GCgaH2Kd/4E5XEe6rjBF9OWKnhoDaGcJwndhzjOnY         cSwh6AK49lFHfczrh4TQM3f1M/LH6KBf5neGr0np5QOCdtdx3ho80xjeGjlHTlt3ppcP         I155uc4i3GtLrv2ZH/pcezggELHwpeLVk77yombJw9aByECITtxoQOKAd+SR0B/m9ToY         VfjT5oyF5JUtzb4Udp6ROfZXv2GVvO+3UeDdM7Yuxc/a5rT6iZBbmVa7DKSUI6sc51x+         JsDw==
X-Gm-Message-State: ALoCoQnIRoygL4cyGHg2rDB3ZhoDOH11cLc66o1UTHpq9n2n8xqnoInCeknteTrFfNrSuM4Spk3x
X-Received: by 10.51.17.5 with SMTP id ga5mr27681756igd.2.1399327057681;        Mon, 05 May 2014 14:57:37 -0700 (PDT)
Message-ID: <5368094E.7040806@breisch.org>
Date: Mon, 05 May 2014 17:57:34 -0400
From: "Chris J. Breisch" <chris DOT ml AT breisch DOT org>
User-Agent: Postbox 3.0.9 (Windows/20140128)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Problem with "None" Group on Non-Domain Members
References: <536796E4 DOT 2090009 AT breisch DOT org> <20140505135928 DOT GK30918 AT calimero DOT vinschen DOT de> <53679D5C DOT 5030209 AT breisch DOT org> <20140505144745 DOT GA6993 AT calimero DOT vinschen DOT de> <5367ACED DOT 40409 AT breisch DOT org> <20140505154230 DOT GB7694 AT calimero DOT vinschen DOT de> <5367B990 DOT 8050907 AT breisch DOT org> <20140505165723 DOT GM30918 AT calimero DOT vinschen DOT de> <5367DEE5 DOT 5010407 AT breisch DOT org> <5367EA1F DOT 3060800 AT cygwin DOT com>
In-Reply-To: <5367EA1F.3060800@cygwin.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Larry Hall (Cygwin) wrote:
> On 05/05/2014 02:56 PM, Chris J. Breisch wrote:
>> Corinna Vinschen wrote:
>>> On May 5 12:17, Chris J. Breisch wrote:
>>>> Corinna Vinschen wrote:
>>>>> An strace of `chmod 400 bar' might sched some light on this issue,
>>>>> but I
>>>>> have a gut feeling the underlying WIndows call will not even return an
>>>>> error code...
>>>> Attached. Your gut seems to be working today...
>>>
>>> There *is* something weird here. Look at this:
>>>
>>>> 151 36702 [main] chmod 5536 alloc_sd: uid 1001, gid 513, attribute
>>>> 0x2190
>>>> 65 36767 [main] chmod 5536 cygsid::debug_print: alloc_sd: owner SID
>>>> = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>>> 70 36837 [main] chmod 5536 cygsid::debug_print: alloc_sd: group SID
>>>> = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>>
>>> alloc_sd (the underlying function creating a security descriptor) gets
>>> a uid 1001 and gid 513 as input, as usual. But the owner *and* group
>>> SIDs of the file's existing security descriptor is
>>> S-1-5-21-3514886939-1786686319-3519756147-1001, the SID of your user
>>> account.
>>>
>>> Why is your user account the primary group of the file, even though
>>> your user token definitely has "None" (513) as its primary group?
>>> How did it get there?
>>>
>> I don't have a clue. You're the expert. :)
>>
>
> I'm wondering if we're getting the user id as the group for the MS
> Account because there is no group id. Chris, what does 'id' for
> each of these accounts look like and is the group id (assuming they
> are different that the user id) in there?
>
>

Well, I hope I'm not comparing apples and oranges, because now I'm at 
home. However, I have duplicated the scenario and results on this 
machine. It was actually where I noticed it first.

id produces expected results:

MS account:
$ id
uid=1001(Chris) gid=513(None) groups=513(None),545(Users),1003(HomeUsers)

Local account:
$ id
uid=1007(cjb) gid=513(None) groups=513(None),545(Users),1003(HomeUsers)

Actually, it's not quite what I expected. Chris is in the Administrators 
group, and that's not shown.

$ net user Chris
User name                    Chris
Full Name                    Chris Breisch
Comment
User's comment
Country/region code          001 (United States)
Account active               Yes
Account expires              Never

[snip PW stuff for Cygwin filter]

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   5/1/2014 8:39:44 PM

Logon hours allowed          All

Local Group Memberships      *Administrators       *HomeUsers
                              *Users
Global Group memberships     *None
The command completed successfully.

$ net user cjb
User name                    cjb
Full Name                    cjb
Comment
User's comment
Country/region code          000 (System Default)
Account active               Yes
Account expires              Never

[snip]

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   5/5/2014 5:40:39 PM

Logon hours allowed          All

Local Group Memberships      *HomeUsers            *Users
Global Group memberships     *None
The command completed successfully.


-- 
Chris J. Breisch

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple