DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type:content-transfer-encoding; q=dns; s=default; b=Bu9
	xDkVGeVIPX1gqnoV/e7vYTcXjasmwyGRZW+85brlaBLj9QlsHwGAf6nD3uB6+i1Z
	NtjOV2B8KFTTgw90o+X8MEpLOK0viYPMOfd2N7eRcmrcwEMzLaA3vrSg3mRtzKHr
	4T97Qc/f4kRRZlvfaaqpQV45/8Nh6ZrKDFVyRiiQ=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <550C0B53.6080201@thales-esecurity.com>
Date: Fri, 20 Mar 2015 11:58:11 +0000
From: Tim Magee <Tim DOT Magee AT thales-esecurity DOT com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: cygwin mail list <cygwin AT cygwin DOT com>
Subject: mkpasswd: option to force the 'primary' domain?
Content-Type: text/plain; charset="utf-8"; format=flowed
Content-Transfer-Encoding: 7bit

Now then,

Since Cygwin 1.7.34 dropped, mkpasswd has been problematic for us.  Our 
problem is with the way user names pulled from outside the primary 
domain get decorated.  My question is: will there ever be a way to tell 
mkpasswd/mkgroup "make <some non-primary domain> the one whose users get 
undecorated names"?

We have Windows machines in one AD domain, and all our users in a 
different AD domain.  According to the 'POSIX accounts, permissions and 
security' page, the machine's domain is considered the primary one. 
"mkpasswd -d" will generate undecorated names for that domain, and 
decorated names for any other named domain.

We use SSH-based tools a great deal here, and we use Cygwin to make our 
Windows machines behave like members of our POSIX machine community, so 
having our usernames appear the same on all machines is very desirable.

I think I can recreate the pre-1.74 behaviour with a little seddery, but 
I'd bet folding money that my seddery isn't future-proof.  So, are 
mkpasswd/mkgroup ever likely to get an option to force the "undecorated 
users" domain?

Thanks,
Tim

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple