X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=xdoGfnN3lTFaqiLbq+tzwfzwQ9icDxnNSQTND7gHXpNwBdOrkfbpK
	vwdVyZyovIjtOs0bbkC27HhWwxakDhCSPy7APC5wim15IYgLuBbE0NlhE3b+iHye
	dLhKzxG1VNGbGdcmohfe12tYhl5TElGVjprmKly6bPP243Na3exiAM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=2zFAUL+7iTpW2gRlbOFzqTVv3iA=; b=UUUZO4fm7Fkv1L7WAtQAuilJ9XEL
	qPSxceviBMHgsQiVUikS9jQ/HR1p5UMthuxs3vyO1E2P5DATD3R9JSW+3XpY+tYq
	jbb9FL8513Rj/uGMFrO9Rwfr9y4kUcNjFCKbCdD1NS0SPxVuRro3wT6W42NQ9CZ3
	GAks9LDYCTLtV20=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Fri, 1 Aug 2014 11:23:08 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Simplify AD integration?
Message-ID: <20140801092308.GZ25860@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20140730134716 DOT GM25860 AT calimero DOT vinschen DOT de> <53D93510 DOT 6020903 AT redhat DOT com> <20140730184349 DOT GT25860 AT calimero DOT vinschen DOT de> <loom DOT 20140731T090930-818 AT post DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="vy3x0i7GCC7mAH4A"
Content-Disposition: inline
In-Reply-To: <loom.20140731T090930-818@post.gmane.org>
User-Agent: Mutt/1.5.23 (2014-03-12)

--vy3x0i7GCC7mAH4A
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jul 31 07:12, Achim Gratz wrote:
> Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > Good points.  I might have overvalued the gain of easily recognizing
> > builtin accounts by the leading '+' separator.
>=20
> After some thinking with my eyes closed... not prefixing local accounts at
> all would at least allow the sshd to see the local sshd user without jump=
ing
> through hoops, so that might be a net gain after all.  What I don't know:
> what happens if a local and a primary domain user have the same name?

You misinterpreted what I described.  Please re-read my preliminary
documentation.  The prefixing is used for *builtin* and *well-known*
accounts, *not* for local accounts.  Local accounts from the local SAM,
users and groups, are either

- not prefixed at all, if the machine is a standalone machine, or

- prefixed with the machine name if the machine is member of a domain.

The non-prefixed, name-only account names are exclusively used for the
*primary* domain of the machine you're working on, *iff* db_prefix is
set to "auto".  This is either the domain the machine has been added to,
or the machine name itself if it's a standalone machine.

I hope that clears things up.=20=20


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--vy3x0i7GCC7mAH4A
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJT21x7AAoJEPU2Bp2uRE+gEBUP/0Fy9kCKrkbQaRJOfpXRZ/8w
vCS7t/ffSM0ZhJLu9uq7CDxoS5YQno4AXXNdHNhJvIPw6nTom3YKgaYxYjyA3ooq
LiJs/CIc/qnJ1OczjN7eWyzHo+wW2ZQdyWQR9L4GkQH+rdzasHDoLdnrlZrn/bCP
8pwXo9ffXiEqDWQqU+qjgCOMppDgf5d16XomtAdwnU0UUJ/+JQVtvp/7/b2tBA9w
TIqipwHXv/fJ0akQYRANg9UwihmqooRTp1bVFYIh9zT2u7K5qsMzXkKWJYBtiCMd
58fEPk217DfRNQ46qkxmZhjUHi+9xTftbWRbgBLW8Fy6FjCDW6SAMJYs7zAkLMAw
iG5Yigy/G8A7MqgJsV3dwBKuJ7Nj/e+i7y1UhffSkxxb7OwzP74YIMhGK/8k65jb
9yr1B0QF4hjuiqjCHFaKxwqlidNbmiKowcmzJBUBV1jlNzsBnkOE/a2iV7Ndohmk
P0H6u+RYPYt3fEt2niORZuWFM6zfH4lUwF9iiTW8KsXuPT+IWXPpvfZvIL/vxCAk
0PujQVBv4QeK4FnnCCXffhjQpPfEKi0W87PwtmmVJ7KnCUT6GN+apNYLzWEv1ljd
ksbMPcxqj/1rN6PCGeaJP/mV4aQikyLkGpy02gZ0+MSnsLwP7jzCnUIrmgQghAn8
6Si04grJgnm46+RXkncO
=QNZe
-----END PGP SIGNATURE-----

--vy3x0i7GCC7mAH4A--