DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=sPV52aXaMSjRR3ShZe55zE8V9zXotRSMMERq0ALUS47XDXxzRcgKs
	C+Nkxrmy2r3SVjdY38sGz/oiVWfaKO3KwmiNy5QdmmnPN8wLSfgOL7khEXTyevP1
	vEF1J/JEHQa3GpO8EH/dREpeSWKCfdYAgre1wvv5Pa5ja9lQ06Ehwg=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Tue, 11 Nov 2014 11:18:21 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: RFC: 1.7.33 problem with user's home directory
Message-ID: <20141111101821.GO2782@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20141110205216 DOT GJ2782 AT calimero DOT vinschen DOT de> <0B8D23F7-0258-472D-BF38-860402FD3CDC AT etr-usa DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="NT59pYSnj1ZLVgEN"
Content-Disposition: inline
In-Reply-To: <0B8D23F7-0258-472D-BF38-860402FD3CDC@etr-usa.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--NT59pYSnj1ZLVgEN
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 10 23:09, Warren Young wrote:
> On Nov 10, 2014, at 1:52 PM, Corinna Vinschen <corinna-cygwin AT cygwin DOT com>=
 wrote:
>=20
> > Shall the "db" entries utilize the Windows home folder if it exits(*)
> > and drop using the unixHomeDirectory?  It seems inevitable=E2=80=A6
>=20
> Use of AD implies some level of security consciousness.  The ability to w=
rite to c:\cygwin =E2=80=94 not just during installation, but during all us=
e thereafter! =E2=80=94 comes out of a world where every user is a local Ad=
ministrator.
>=20
> This answer I wrote on Stack Overflow is one way to solve the problem tod=
ay:
>=20
>     http://stackoverflow.com/questions/26666180/
>=20
> It might not be a bad idea if Cygwin started doing this sort of thing by =
default in the future.  (Obviously for new installs only.)

What I gather from the replies so far is this:

- Nobody really cares for unixHomeDirectory.

- Some want to use the Windows home folder.

- Some want Cygwin to utilize the HOMEPATH dir.

- Some want Cygwin to use always it's own /home and do everything else
  via symlinks or mount points.

The problem so far is that I'm not sure it's clear to everybody what
I mean.  I'm *not* talking about a default value which can easily be
overridden by tweaking /etc/passwd.  I'm talking about what the passwd
entry contains if there's no passwd file, and the admins want to keep
the administration strictly inside AD.  The passwd entry gets generated
from what AD provides.  And here we need a sensible default behaviour.

One possible, but not naturally useful default behaviour is what
the current code does:

1. Utilize the unixHomeDirectory AD attribute.
2. If unixHomeDirectory is empty, fall back to /home/$USER.

Another possible behaviour:

1. Utilize the homeDirectory AD attribute (aka %HOMEDRIVE%%HOMEPATH%).
2. If homeDirectory is empty, fall back to /home/$USER.

Another:

1. Always use /home/$USER and let the admins come up with a matching
   mount point scheme.

Another:

1. Add a setting to /etc/nsswitch.conf which allows to specify one of
  the above:

    home: [unix|win|home]...

   - "unix" means, set pw_dir to unixHomeDirectory
   - "win" means, set pw_dir to homeDirectory
   - "home" means, set pw_dir to /home/$USER
   - Multiple entries are possible.
   - Default in the absence of this setting is: always set pw_dir to
     /home/$USER.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--NT59pYSnj1ZLVgEN
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJUYeJtAAoJEPU2Bp2uRE+gYi0P/0yYfd+MVtP+1c5bMzSajBQs
YZlQGbEr1OUqpiXYY9IbZG9IcTbafPXWMxbgE5mBZdSXsu3qfRYJZJvs6WuGE27j
bQMx2kbkUlDcgW1b4R9ZsrVCb/krsOAm7KIPx89U8+AQpNsLa8v06znBAoEbf1hK
q6KFrMO2E0NmZCYvgvCC4l0k2ktnUT5xAGlJeK0/RuPgPOaELUD5xyGZL61TiPpU
ydaUXFrhWuCUx7QN/cFPZU9B7/nV4nqDHL+sVggFxM409Pd0eqoUyMOWJgtAOui/
FTgTKzosmvYI3aSlKiAaXDnRRPTSh2UhmuLSsfR6xTbxZCbJ3KuKw7T/FuhZ5tIX
RCYEQoRp5sIVAKmf0b0FFOdrpR6Li5H3LL1kaitTzoF8gmxq8zf5Ou6W02sbhJAO
dDv3YVz6YgpnqdtlNS41paX5nCXlc+FvZZdLTMorcTx3iPH6Hii5zPF0p9Bi8eRo
cpYhVzM4dtQ9Ghx89wNSNdjthAE6iYRg1w+u0omr1VUKhzRQJJv35PPnO7PZ+pfV
Udw9Z8msl10o71D+1t4/zql3/vTDJJZnRuqt7xJcXVuQcwirO30m28yzLVwE7H0d
gLcK5nLyzKghnyvRneS/YVVY3MbXzgZUXf4vAPUsXVz54EqioWx7QwA0Ea9BuoHh
F/KSaD1qU/D/xHKxc72M
=O9uP
-----END PGP SIGNATURE-----

--NT59pYSnj1ZLVgEN--