X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type:content-transfer-encoding; q=dns; s=default; b=tQgepz0Szj8Rr8BFMGGSrlNyy/3ZdG58C17nzEjKJMM gpp4DNOloDg2sioP/qFqfMgCWpv8gq522a76RtkmehUSHm0Pif5+nw6j9XbGubig 5X1qUghKEE7PV++0I/127HkHLH9ITO7SrR6wCpem9HyF9ndjOGCwYpni1YivCpIE = DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type:content-transfer-encoding; s=default; bh=XAFhR78CDlEK/33Gd1k/fTJ2Q8I=; b=nTbcss93OKfBPjXM0 JPgGSnV6zedl1IC3jyL4yBc70S2RlGWSGI9R334r9bw+AolTfvnoCLkqOLeiC+Hf he2pgLeoTk15HtMjYQu/XeAg+cb2Mk+Xd6dj5oYb78/hE6FBG1+zxvOtnkLmBus3 pZ6bx4dEvZnVGV9MC2JQgF73ZY= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-6.0 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 X-HELO: mail-in-13.arcor-online.net X-DKIM: Sendmail DKIM Filter v2.8.2 mail-in-18.arcor-online.net 735313DC33B From: Achim Gratz To: cygwin AT cygwin DOT com Subject: Re: Simplify AD integration? References: <20140730134716 DOT GM25860 AT calimero DOT vinschen DOT de> <20140730150100 DOT GO25860 AT calimero DOT vinschen DOT de> Date: Wed, 30 Jul 2014 18:33:20 +0200 In-Reply-To: <20140730150100.GO25860@calimero.vinschen.de> (Corinna Vinschen's message of "Wed, 30 Jul 2014 17:01:00 +0200") Message-ID: <87ppgmkdrj.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.91 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id s6UGXpke022240 Corinna Vinschen writes: > I'm not sure if that would work as expected. Cygwin explicitely tests > if the account name follows the current rule. I'm not so sure what > effects it would have, if getpwnam could return another username as > the one given as parameter (apart from the case difference). That could be a problem if an application checks for that, but then there's only a handful of cases where you'd want to use an explicitly prefixed user or group name. > (and defuse the booby trap in chown). > > Well, hmm. If we allow to specify "NT AUTHORITY+SYSTEM" or > "BUILTIN+Administrators" even in "auto" or "primary" mode... > > Unfortunately this won't help in all cases. I used a broken example :( > The "LOCAL" account and a few others have NO domain. Thus, they are > simply +-prefixed ("+LOCAL"), even in 'db_prefix: always' mode. We could invent one, for the sole reason to escape the leading "+". > Tricky. Certainly… >> If you keep it, then there's an obvious candidate missing: "local+other", >> which should prefix all accounts except the primary domain ones. > > Do you mean > > builtin accounts; "NT AUTHORITY+SYSTEM", "BUILTIN+Administrators", ... > primary domain "corinna", "cgf", ... > other domain: "DOMAIN1+walter", "DOMAIN2+mathilda" Yes. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Samples for the Waldorf Blofeld: http://Synth.Stromeko.net/Downloads.html#BlofeldSamplesExtra -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple