X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=mIXGb8GIxKAordVqid+Qq0gOxp/lPmCmokJ1hJE4/KZ
	k09dXiQQfpaPdIiqhhvrCVNMkKdKnTKk/5vFf3ZyIaxki5oIPcHCK8AWsRTqshzk
	rVPWu3CmB7/r+v29Jb7s0g5l7cwMDQ5vUbM0Gs0ITsa2BTi2eyjKYRwlgjiYKSEA
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 s=default; bh=iPj5FZpuAX+6u5+IPbdZJ8AIl9w=; b=I7dl/rpqVlpVyv1Ux
	8m6sX/n6GI261F4e+v0cqIuE9zkYGR+xCIAVO7kJbOw9slnyX+3g98ei9IQqg+3p
	8FTpzJqjj/maB8ZdDSllmeEkpDdUR/yolgxzFs3IuSgvfA7VrNqXYpp9HtQonSFH
	qzwxZ1L9A3cJ9LZP0HbdmDfNxI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-2.2 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2
X-HELO: mail-ie0-f175.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20130820;        h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to         :subject:references:in-reply-to:content-type         :content-transfer-encoding;        bh=ndAefo7ByOoCI322BJrnl9Str7uOUnpU2zOc/+ocH/Y=;        b=dMHvgPFAPHvXrTVvFcs7Cm6eSAU9MF7/Mjcc1xDRs555K71xXWQ7UQYxYPM7bkPMyZ         FtiY4KnlBBsZxKO4/7uqROaOUAZ+x6N2uB+ewbdUhcyhjWniDy3GfoZCSqQbNHXYFWck         5GWNlxBOvLTmXY2ipekxWD9mnuyXxn4PxDNFDouR4KrVY+kh6WX0S7hm8WFR88kM4a8y         SDiyGGzIeKsvWdZJt+zUhtd6nF6+vpeJdL8VtDBYhD8jnkSNH+uHAZ8YkgHNHcZQ1Sue         5p/3LOndjdgb3Y4XNPsw73+JEQ+8uUcTR8cxxX1MfZZdohmH46AQSeeYRqrlPk3nS+cp         TDVw==
X-Gm-Message-State: ALoCoQkv2UJlTsT5m4xlk6V3QSw4crUXvVNJS6ZSSQILR4ZF2FF7qsKi1VLQqkxYuHKxDLxxcSC1
X-Received: by 10.42.20.205 with SMTP id h13mr6350235icb.84.1399327652249;        Mon, 05 May 2014 15:07:32 -0700 (PDT)
Message-ID: <53680B9F.3010906@breisch.org>
Date: Mon, 05 May 2014 18:07:27 -0400
From: "Chris J. Breisch" <chris DOT ml AT breisch DOT org>
User-Agent: Postbox 3.0.9 (Windows/20140128)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Problem with "None" Group on Non-Domain Members
References: <536796E4 DOT 2090009 AT breisch DOT org> <20140505135928 DOT GK30918 AT calimero DOT vinschen DOT de> <53679D5C DOT 5030209 AT breisch DOT org> <20140505144745 DOT GA6993 AT calimero DOT vinschen DOT de> <5367ACED DOT 40409 AT breisch DOT org> <20140505154230 DOT GB7694 AT calimero DOT vinschen DOT de> <5367B990 DOT 8050907 AT breisch DOT org> <20140505165723 DOT GM30918 AT calimero DOT vinschen DOT de> <5367DEE5 DOT 5010407 AT breisch DOT org> <5367EA1F DOT 3060800 AT cygwin DOT com> <5368094E DOT 7040806 AT breisch DOT org>
In-Reply-To: <5368094E.7040806@breisch.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Chris J. Breisch wrote:
> Larry Hall (Cygwin) wrote:
>> On 05/05/2014 02:56 PM, Chris J. Breisch wrote:
>>> Corinna Vinschen wrote:
>>>> On May 5 12:17, Chris J. Breisch wrote:
>>>>> Corinna Vinschen wrote:
>>>>>> An strace of `chmod 400 bar' might sched some light on this issue,
>>>>>> but I
>>>>>> have a gut feeling the underlying WIndows call will not even
>>>>>> return an
>>>>>> error code...
>>>>> Attached. Your gut seems to be working today...
>>>>
>>>> There *is* something weird here. Look at this:
>>>>
>>>>> 151 36702 [main] chmod 5536 alloc_sd: uid 1001, gid 513, attribute
>>>>> 0x2190
>>>>> 65 36767 [main] chmod 5536 cygsid::debug_print: alloc_sd: owner SID
>>>>> = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>>>> 70 36837 [main] chmod 5536 cygsid::debug_print: alloc_sd: group SID
>>>>> = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>>>
>>>> alloc_sd (the underlying function creating a security descriptor) gets
>>>> a uid 1001 and gid 513 as input, as usual. But the owner *and* group
>>>> SIDs of the file's existing security descriptor is
>>>> S-1-5-21-3514886939-1786686319-3519756147-1001, the SID of your user
>>>> account.
>>>>
>>>> Why is your user account the primary group of the file, even though
>>>> your user token definitely has "None" (513) as its primary group?
>>>> How did it get there?
>>>>
>>> I don't have a clue. You're the expert. :)
>>>
>>
>> I'm wondering if we're getting the user id as the group for the MS
>> Account because there is no group id. Chris, what does 'id' for
>> each of these accounts look like and is the group id (assuming they
>> are different that the user id) in there?
>>
>>
>
> Well, I hope I'm not comparing apples and oranges, because now I'm at
> home. However, I have duplicated the scenario and results on this
> machine. It was actually where I noticed it first.
>
> id produces expected results:
>
> MS account:
> $ id
> uid=1001(Chris) gid=513(None) groups=513(None),545(Users),1003(HomeUsers)
>
> Local account:
> $ id
> uid=1007(cjb) gid=513(None) groups=513(None),545(Users),1003(HomeUsers)
>
> Actually, it's not quite what I expected. Chris is in the Administrators
> group, and that's not shown.
>
> $ net user Chris
> User name Chris
> Full Name Chris Breisch
> Comment
> User's comment
> Country/region code 001 (United States)
> Account active Yes
> Account expires Never
>
> [snip PW stuff for Cygwin filter]
>
> Workstations allowed All
> Logon script
> User profile
> Home directory
> Last logon 5/1/2014 8:39:44 PM
>
> Logon hours allowed All
>
> Local Group Memberships *Administrators *HomeUsers
> *Users
> Global Group memberships *None
> The command completed successfully.
>
> $ net user cjb
> User name cjb
> Full Name cjb
> Comment
> User's comment
> Country/region code 000 (System Default)
> Account active Yes
> Account expires Never
>
> [snip]
>
> Workstations allowed All
> Logon script
> User profile
> Home directory
> Last logon 5/5/2014 5:40:39 PM
>
> Logon hours allowed All
>
> Local Group Memberships *HomeUsers *Users
> Global Group memberships *None
> The command completed successfully.
>
>
Hmmm, just noticed something in /etc/group:

Chris J. Breisch:S-1-5-21-3514886939-1786686319-3519756147-1001:11001:

and on another machine where I can reproduce this:
Chris:S-1-5-21-1055441198-2882714470-4103286779-1001:11001:

Oddly, mkgroup -l does not produce this line on either machine, so I'm 
not sure where it came from. In both cases, the SID for the group is the 
same as the my user's SID.


-- 
Chris J. Breisch

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple