X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=wxDfxcWPOPVvTzRe6YLT8o+kMx6YM1ruXpzHMGM3cAZREq2OuJRLb
	6s61fe2eOqWG4Pgkjt1FpSXxhcU8k5Ex9DZgWEMZkfYZ7XOD3h8FsxAcXgL+IRXW
	UWhp2PFTWPpX0pg2yiwZNXS5/YHqkHSyAGYacgcwwc3OOEyKN8STf0=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=DFSoaXjROEx8Sk4B1LLwlKPaHPE=; b=QF1ZBmjATjnIt/fJwPmOz8Zs+1lj
	VcKUkZcZuX0p60O49Wq8Z2tKawQHilAngjPkERe64N82dAyCy4qsCu1yrCG6iDQW
	5CnnjSoVDb9b5kZUiuK3/4sFY+RkZndMHshy6z+g+gxCInEQjjRLHGd/O5oSy44I
	DVXZT15EvOvYxiQ=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Thu, 8 Jan 2015 13:58:28 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: SSHd configuration problems (System error 1376)
Message-ID: <20150108125828.GH4190@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <1418434328946-113637 DOT post AT n5 DOT nabble DOT com> <548C3162 DOT 6040500 AT cornell DOT edu> <5499711C DOT 6060500 AT nokia DOT com> <54998980 DOT 4080801 AT cornell DOT edu> <54A10DBF DOT 6010507 AT nokia DOT com> <54A1517B DOT 4080802 AT cornell DOT edu> <54A1600F DOT 7060700 AT nokia DOT com> <54A1819B DOT 9090204 AT cornell DOT edu> <20150107172531 DOT GA4190 AT calimero DOT vinschen DOT de> <2d6be486ce640e0db82ca4f0035179ab DOT squirrel AT webmail DOT xs4all DOT nl>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="2oox5VnwalALFvA7"
Content-Disposition: inline
In-Reply-To: <2d6be486ce640e0db82ca4f0035179ab.squirrel@webmail.xs4all.nl>
User-Agent: Mutt/1.5.23 (2014-03-12)

--2oox5VnwalALFvA7
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan  8 02:38, Houder wrote:
> Corinna wrote:
>=20
> > The aforementioned message is a result of a change in how the function
> > underlying `id' works.
> [snip]
>=20
> > The old getgroups iterated through the groups from /etc/groups, and then
> > checked for each group if its SID is available in the user's token.
> >
> > This behaviour only makes sense if there is a self-contained list of
> > groups in memory.  But the new code doesn't read all of /etc/group, or,
> > worse, all groups from the Windows account DB.  So the new, more logical
> > behaviour is to iterate over the groups in the user's token and then
> > checking for (or generating) a group entry for the SID.  So, in contrast
> > to the old code, the new code only generates a single group entry per
> > SID.
>=20
> ... to iterate over the groups in the user's token ...
>=20
> But, by design, groups NOT present in the group file will NOT be reported
> by id, in case the nsswitch.conf file specififies:
>=20
> # only show me the gid's I am interested in (i.e. those in the group file)
> group: files
>=20
> Correct?

Correct.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--2oox5VnwalALFvA7
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=RNG1
-----END PGP SIGNATURE-----

--2oox5VnwalALFvA7--