DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:mime-version:content-type; q=dns; s=default; b=HMtL0H+0bCW+a6je
	UOuoO5rfHvoqsLAzMQBL+m3joN90BfDzK6ESwqcpROs9bAZ8Nbl8G7IXUNWW2zSX
	gq5gQ6fRAINlJoWn8gDMssR/qHouQA9eXGlK2gHSJic8XmtpWD268Omvg7Q0LapV
	Uc8PIE6Iybsji9PlYpWyiK+SKKw=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Wed, 30 Jul 2014 15:47:16 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Simplify AD integration?
Message-ID: <20140730134716.GM25860@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="16qp2B0xu0fRvRD7"
Content-Disposition: inline
User-Agent: Mutt/1.5.23 (2014-03-12)

--16qp2B0xu0fRvRD7
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi folks,


here's a set of question to those of you interested in the new
passwd/group functionality.  This already has been discussed partially,
but there was no conclusion.

Right now, there's a lot of variability in the user names, based on the
/etc/nsswitch.conf settings db_prefix and db_separator.

The separator char is a '+' by default but can be replaced with other
ASCII chars.  db_prefix allows three styles of user naming conventions:

  Default is 'auto':

    builtin accounts;   "+SYSTEM", "+LOCAL", etc.
    primary domain      "corinna", "cgf", ...
    other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

  If set to 'primary':

    builtin accounts;   "+SYSTEM", "+LOCAL", etc.
    primary domain      "MYDOMAIN+corinna", "MYDOMAIN+cgf", ...
    other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

  If set to 'always':

    builtin accounts;   "NT AUTHORITY+SYSTEM", "BULTIN+LOCAL", etc.
    primary domain      "MYDOMAIN+corinna", "MYDOMAIN+cgf", ...
    other domain:       "DOMAIN1+walter", "DOMAIN2+mathilda"

"Primary domain" here is either the primary domain of the machine or the
local SAM if the machine is no domain member.  "Other domain" here is
either a trusted domain or the local SAM for domain machines.

Together with the variable separator char this is an awful lot of
variability, which has the potential side effect to complicate the
code *and* debugging.

Also, the leading '+' for builtin accounts results in some downsides,
one of them for instance the fact that `chown +x' assumes that x is a
numerical uid or gid.  Thus `chown +SYSTEM ...' fails.  On the other
hand it simplifies the account handling inside of Cygwin.

So I'd like to ask a few questions to which I'd like to have some brief
answers, kind of like a poll, to get a better idea how we should
proceed:

1. Shall we remove the leading '+' from the builtin account names
   or shall we keep it?

2. Shall we stick to '+' as the separator char or choose another one?
   If so, which one?

3. Shall we keep the `db_prefix' variability or choose one of
   the prefixing methods and stick to it?  If so, which one, auto,
   primary, or always?

Bonus question:

4. Should Cygwin downcase all usernames when generating the Cygwin
   username, so, if your Windows username is 'Ralph', your Cygwin
   username will be 'ralph'?


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--16qp2B0xu0fRvRD7
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=ujaM
-----END PGP SIGNATURE-----

--16qp2B0xu0fRvRD7--