DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:mime-version:content-type; q=dns; s=default; b=jN6fLfNshdiR+Xhz
	Af1gMVPyco57QYsc2GlTQTAfLGlxeTgDpCc98UMkm7wW3ChV50E9w1oCz4FcBbkn
	OGjl438e29gE3CXYMDu2BVC1w80BYc/TIhohSczslRd1RaA5GRHWOO2ETw/OQRtU
	Ow16f9S3yORNd3crp4PFOs4wLIk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Thu, 12 Feb 2015 19:15:47 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: PLEASE TEST: Cygwin DLL change to help w/ slow startup
Message-ID: <20150212181547.GD7818@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="hHiQ9nAwW5IGN2dL"
Content-Disposition: inline
User-Agent: Mutt/1.5.23 (2014-03-12)

--hHiQ9nAwW5IGN2dL
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi guys,

especially (but not only, so please read on) those of you suffering from
the slow startup problem, I'd like to ask to test the latest snapshot
DLL from https://cygwin.com/snapshots/

It contains a couple of changes to alleviate the slow startup, namely:

- The default settings for db_home, db_shell, and db_gecos in case
  there's no /etc/nsswitch.conf file, or if they are not mentioned=20
  in /etc/nsswitch.conf, are now set to just the fallback, which is

    db_home: /home/%U
    db_shell: /bin/bash
    db_gecos: <empty>

  This means, if you don't set these values in /etc/nsswitch.conf,
  there's no reason for Cygwin to access the DC via LDAP.

- Next, I revamped the code fetching values over LDAP to do the actual
  fetching only if it's really required.  So far, the LDAP call was made
  all the time, even if the settings in /etc/nsswitch.conf didn't
  require that.

- Last but not least, the primary group of the current user account is
  not read anymore from the LDAP call, but simply from the current user
  token of the user.

- Group account requests don't access LDAP at all, unless values
  for the UNIX gid <-> Windows SID mapping are required (see
  https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nfs and
  https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-samba
  for an explanation).

All in all, that *should* have the desired effect to avoid all LDAP
calls to the DC for the current user account and its primary and
supplementary group accounts in the default case, even if you only
use the "db" setting for passwd and groups in /etc/nsswitch.conf:

  passwd: db
  group: db

The only downside for other scenarios is that the default settings
in /etc/nsswitch.conf don't catch the "cygwin desc" settings for
db_home, db_shell, and db_gecos anymore by default.  If you want to
use them, you now have to tweak /etc/nsswitch.conf, but most more
complex scenarios will require that anyway.

So, again, please test.  If that works as desired, I will update
to 1.7.35 pretty soon.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--hHiQ9nAwW5IGN2dL
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=VYM1
-----END PGP SIGNATURE-----

--hHiQ9nAwW5IGN2dL--