X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=mN+i4eGltFiNjFDiwUCA+Wbyoldrv0AfluzZ7P4jtcaCCTZcxUDNG
	YaoWPGMwcN8OYb2UW9AudSt7f/inNxEdIZBFui1bo0MaiYx+UgYM7mIREqgHwpmK
	EfD7td2PsF6UgjWkxrpnyuypqV5QekX8v48XFDDznLPi2K/lo0bD9s=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=czdMpZpf2mmeaAJWA8WSyIXPtPo=; b=oGSg7LNcFbLEwOKK5rqEtvJ4IveC
	d2Zux/p7xjUGTyB/u9T74Nl9qqaVK11UefNTsYJQGU7C0QZj80M/ZmOqzEE0hqQV
	zov+bOvB+ftYl01gYXY2avV1y16HVVKZgfDouPizsW/Ii9mmsAeZnuxYsHqZbD9R
	YJsfMRLxMPmWOHY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Wed, 21 Jan 2015 11:20:26 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.34-003 (Christmas/New Year release)
Message-ID: <20150121102026.GB8272@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20150107174122 DOT GB4190 AT calimero DOT vinschen DOT de> <20150108171825 DOT GB15791 AT calimero DOT vinschen DOT de> <8761cez7qi DOT fsf AT Rainer DOT invalid> <20150112103834 DOT GA15213 AT calimero DOT vinschen DOT de> <1317243972 DOT 20150112155044 AT yandex DOT ru> <20150112142131 DOT GK15791 AT calimero DOT vinschen DOT de> <462951490 DOT 20150113065357 AT yandex DOT ru> <20150113090938 DOT GR15791 AT calimero DOT vinschen DOT de> <1408516413 DOT 20150121024550 AT yandex DOT ru> <20150121093743 DOT GA8272 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="xXmbgvnjoT4axfJE"
Content-Disposition: inline
In-Reply-To: <20150121093743.GA8272@calimero.vinschen.de>
User-Agent: Mutt/1.5.23 (2014-03-12)

--xXmbgvnjoT4axfJE
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan 21 10:37, Corinna Vinschen wrote:
> On Jan 21 02:45, Andrey Repin wrote:
> > Sorry for the holdup, I was trying to crack it by myself.
> > But I was unsuccessful, and have to reach for help.
> > Even the most striped down configuration doesn't produce visible improv=
ements.
> >=20
> > The setup: A Win7 machine - member of a NT4-style domain. (No AD yet.)
> > Logged in as domain user with admin rights.
> > Current profile path is C:\Users\<username>.<domainname>
> > group/passwd files are moved away.
> >=20
> > Contents of nsswitch.conf (the last, stripped down next to nothing atte=
mpt):
> >=20
> > passwd: db
> > group: db
> >=20
> > db_home: /%H
> > db_shell: /bin/sh
> >=20
> >=20
> > > set HOME
> > HOMEDRIVE=3DC:
> > HOMEPATH=3D\Users\anrdaemon.CCENTER
> >=20
> > > getent passwd %USERNAME%
> > anrdaemon:*:1051576:1049089:U-CCENTER\anrdaemon,S-1-5-21-1031481445-329=
1699540-3997755762-3000:/home/anrdaemon:/bin/bash
> >=20
> > If I understand it right, the /%H should always return usable value, so=
 do
> > /bin/sh. But I can't get it to work.
>=20
> Weird, really.  I just tried it again myself and it worked immediately.
>=20
> What I'm doing is this:
>=20
> - I'm *not* running cygserver.
> - Open a mintty.
> - Change the nsswitch.conf settings and save the file.
> - Start another mintty to observe the effect.
>=20
> If cygserver is not running, every new mintty session will see the
> latest version of the nsswitch.conf file and create the passwd/group
> entries from there.
>=20
> I'm wondering if that's a side effect of using a NT4 domain.  This isn't
> supported in Cygwin anymore for quite some time.  After all AD has
> replaced NT4 15 years ago.  All the LDAP calls to fetch the AD attributes
> won't work in an NT4 domain, for instance.
>=20
> But even if all the calls to the DB fail, the /path scheme shouldn't be
> affected.

But it is...  I just inspected the code in CYgwin fetching the extra info
for domain accounts.  Due to the way this works - a single ldap call to
fetch all AD attributes - the evaluation only takes place after the LDAP
call was successful.  This is independent of using non-AD schemes, basically
like this:

   if (is_domain_account)
     {
       [...]
       if (cldap->fetch_ad_account ())
	 {
	   gid =3D posix_offset + cldap->get_primary_gid ();
	   home =3D cygheap->pg.get_home (cldap);
	   shell =3D cygheap->pg.get_shell (cldap);
	   gecos =3D cygheap->pg.get_gecos (cldap);
	 }

The reason here is that we have to fetch the gid value anyway, so the
code is relying on the ldap call.  The get_home(), get_shell(), get_gecos()
methods get the full content fetched from AD and only then creates the
pw_dir, pw_shell and pw_gecos values based on the content of nsswitch.conf.

So, yes, this is a direct result of not supporting NT4 domains anymore.


Sorry,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--xXmbgvnjoT4axfJE
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=EgjQ
-----END PGP SIGNATURE-----

--xXmbgvnjoT4axfJE--