X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=TDV2WNgvXCeZGUZwyk5BTH8S0tg3+xidXCwjLeP1pL6i4LgRbkSM6
	cBWrvXhVE+TTxr+0cm77Y+s4e68+utB5p0bT4/AlP+nbkVLSZN7I5g7nuNH6Is1Z
	fvbTASO0rQYUUNvaGt+VWbdIZUmaZliSqsZro00Luj4SALIpj41qNg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=fGmyO6xQIGixmGoM+HfVnPAxlwg=; b=GqhpW67dsvabY29mqhsSINxzu1eD
	fLMPm1I8TTdrdqCPLdxBl21nv/IAV51GzTlSH08v1pL4TomJfAbxIYtHoI3CZPBN
	cTyONky+1QfDs0oQssXG3C3StN+pNKjmQ/2DgaJUhIvH0t3WF7wVobUdLSH0uajk
	6p4dgxs9ddi3EdI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.4 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Sun, 29 Nov 2015 21:14:58 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.4
Message-ID: <20151129201458.GD2755@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CABPLASTKt3uKcAbeLNjVa89wrWi_LO6MnPD0Fd=T0FxJG0r5mA AT mail DOT gmail DOT com> <20151126131633 DOT GL2755 AT calimero DOT vinschen DOT de> <CABPLASTpsNA4vGtONb14dQ87UV1gY=UAeHBgEXUmgztDeny_mg AT mail DOT gmail DOT com> <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag AT mail DOT gmail DOT com> <20151128155421 DOT GX2755 AT calimero DOT vinschen DOT de> <CABPLASSAabDkMK8ZwF0Q+a1N7enDW5SwuPu3_rnAFNdNZqfXmw AT mail DOT gmail DOT com> <1352387525 DOT 20151129021637 AT yandex DOT ru> <20151129125921 DOT GA2755 AT calimero DOT vinschen DOT de> <CABPLASTWGXVXf+YVx5Uwp6wqZqBmWRmkrFdoKCPR30QEV+4BVA AT mail DOT gmail DOT com> <20151129171043 DOT GC2755 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="ZcaUvQ23gCOmDTXi"
Content-Disposition: inline
In-Reply-To: <20151129171043.GC2755@calimero.vinschen.de>
User-Agent: Mutt/1.5.23 (2014-03-12)

--ZcaUvQ23gCOmDTXi
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 29 18:10, Corinna Vinschen wrote:
> On Nov 29 15:10, Kacper Michajlow wrote:
> > 2015-11-29 13:59 GMT+01:00 Corinna Vinschen <corinna-cygwin AT cygwin DOT com>:
> > > Status 0xC0000078 aka Win32 error 1337 means "invalid SID".  And the
> > > SID 1-5-32-1001 is in fact invalid.  The S-1-5-32 prefix denotes a bu=
iltin
> > > account, but the RID 1001 is invalid for a builtin group.  1001 is the
> > > RID of your user account, though, but that would be prefixed by the S=
ID
> > > of your machine, which looks like S-1-5-21-XXXXXXXX-YYYYYYYY-ZZZZZZZZ.
> > > I don't see how this broken SID came into life, unless your /etc/pass=
wd
> > > and/or /etc/group files are broken (hand edited perhaps?).
> >=20
> > I guess I only changed shell to zsh in /etc/passwd, but no other
> > changes were made. So I have no idea how they could get corrupted
> > either.
>=20
> They aren't.  There is no 1-5-32-1001 SID in those files and both files
> look entirely insuspicious.  Given that Cygwin doesn't create any such
> SID from scratch, I'm totally puzzled where this SID is coming from.
> Your mkdir trace output doesn't show this SID anywhere else either.
> This definitely requires more debugging...

I think I found it.  The problem was the handling of Microsoft Accounts
on machines still using passwd and group files.  And the additional
group entry for the user with a gid different from the user's uid was
required to uncover this problem.  This is fortunately a border case,
but the fix seemed to be simple so I applied it and added a comment
so as not to forget why we have to do that.

> > Works.
>=20
> Ok, that's good to know.  Now I just have to find out where this
> weird SID was created :-P

That fall into place after I realized what was happening.  The gid
1001 didn't exist in /etc/group so Cygwin calls the function to
evaluate a SID from a computed UID/GID, and this in turn generated
the invalid 1-5-32-1001 SID.  WHile writing this I realized that
I should harden this part of the code to accept only RIDs < 1000...

> > I personally am fine with abandoning /etc/passwd and /etc/group. This
> > is good enough solution for me. Though there might be other people
> > with the same issue.
>=20
> This seems to be a bug in Cygwin, and with the content of your files I
> finally managed to reproduce the issue.  I'm planning to debug this next
> week and, hopefully, come up with a patch.  It would be nice if you
> could do another test then in your environment :}

I just uploaded new developer snapshots to https://cygwin.com/snapshots/
and a new test release 2.4.0-0.6 with the aforementioned patch.  Please
give any of them a try.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--ZcaUvQ23gCOmDTXi
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=SNpg
-----END PGP SIGNATURE-----

--ZcaUvQ23gCOmDTXi--