X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:reply-to:date:from:to:subject:message-id :mime-version:content-type; q=dns; s=default; b=edyn8ZG5BSS1B+8k G3QbuGewDcD3SnA/8d7KEL3R5TmN57ZFXIT+AkLNQskrzhQJcPPvL88QsH7G/aX4 dc16fkRjg6FWZTC6CflggDw73r9yJy+KLWocACTjHKTbT5JskwUXqCTKJlRZsdRW sR5ky2LwJhVqViMAbotGor81Ukw= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:reply-to:date:from:to:subject:message-id :mime-version:content-type; s=default; bh=rmSrTtN5fCY2Fv4glzrh7A /SvBg=; b=NgYRoydcQCM4CdnzVfi1wGPGMZ5kxbWNPS1SYYEItVkS0NxZYbxSc0 hlANwwq0uBl0DEw3cXii0rmWasyT34/TNmD7iUWO2eITfgGAIeZKw5R2dnhvWzWx Z4gR3t+mLRbgD5NRcwm/FTBwImVYDIt6wtP7K0mQ0M3uSNsCYL/8w= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-HELO: localhost.localdomain Reply-To: cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.7 required=5.0 tests=AWL,BAYES_50,EXECUTABLE_URI,KAM_EXEURI,SPAM_BODY1 autolearn=no version=3.3.2 Date: Wed, 18 Feb 2015 11:59:37 +0100 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: [ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.35-0.3 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) Hi Cygwin friends and users, I released another very early TEST version of the next upcoming Cygwin release. The version number is 1.7.35-0.3. This release introduces a revision of the LDAP calls done to fetch information from the DC. By limiting the search scope, the calls should now be faster even in bigger environments. Please give it a try with activated "db" settings for passwd and group entries in /etc/nsswitch.conf passwd: db group: db Please report back your experience, especially if you're suffering from "slow startup" problems. ==================================================================== If you're not familiar with the new account information handling introduced in Cygwin 1.7.34, I suggest to read the new documentation at https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping ==================================================================== The essential changes in this test release are: - Trying to speed up LDAP searches by limiting the search scope. - The default settings for db_home, db_shell, and db_gecos in case there's no /etc/nsswitch.conf file, or if they are not mentioned in /etc/nsswitch.conf, are now set to just the fallback, which is db_home: /home/%U db_shell: /bin/bash db_gecos: This means, if you don't set these values in /etc/nsswitch.conf, there's no reason for Cygwin to access the DC via LDAP. - Next, I revamped the code fetching values over LDAP to do the actual fetching only if it's really required. So far, the LDAP call was made all the time, even if the settings in /etc/nsswitch.conf didn't require that. - Last but not least, the primary group of the current user account is not read anymore from the LDAP call, but simply from the current user token of the user. - Group account requests don't access LDAP at all, unless values for the UNIX gid <-> Windows SID mapping are required (see https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nfs and https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-samba for an explanation). All in all, that *should* have the desired effect to avoid all LDAP calls to the DC for the current user account and its primary and supplementary group accounts in the default case, even if you only use the "db" setting for passwd and groups in /etc/nsswitch.conf: passwd: db group: db The only downside for other scenarios is that the default settings in /etc/nsswitch.conf don't catch the "cygwin desc" settings for db_home, db_shell, and db_gecos anymore by default. If you want to use them, you now have to tweak /etc/nsswitch.conf, but most more complex scenarios will require that anyway. Other changes in this release: ============================== - New APIs: cabsl, cimagl, creall, finitel, hypotl, sqrtl. - Fix /proc/cpuinfo multicore info on Intel CPUs. Addresses: https://cygwin.com/ml/cygwin-apps/2015-02/msg00077.html - Generate unique inode number for /dev/tty under all circumstances. Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00211.html - Fix handling of PATH search in execlp and other calls to honor mount flags. Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00119.html - Remove a debug message accidentally printed to the terminal window if an application calls fcntl(F_SETFL) erroneously. - Regression in 1.7.34: acl(SETACL, ...) overwrote the incoming acltent_t array for bookkeeping purposes while iterating over its entries. This broke reusing the acl in the calling application (e.g. setfacl). Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00304.html - 64 bit: Export forgotten symbol __mempcpy. Addresses: https://cygwin.com/ml/cygwin/2015-02/msg00394.html To install 32-bit Cygwin use https://cygwin.com/setup-x86.exe To install 64 bit Cygwin use https://cygwin.com/setup-x86_64.exe If you're already running a 32 bit version of Cygwin on 64 bit Windows machines, you can continue to do so. If you're planning a new install of Cygwin on a 64 bit Windows machine, consider to use the new 64 bit Cygwin version, unless you need certain packages not yet available in the 64 bit release. Have fun, Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple