X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=PaKQX1+Ll1215Z1D
	P2DE6VuQ+eB+b3mIhMnKRDKbqnXIekFi0YgmxGO+nLML1jIpKYAGOxCzOpXMdaBD
	WF9o00Chfpb8QPOde1YUhZ8cymdSzg1P6QUwZ3di22BEEcEpr3ktZx3rAY9F6S5o
	E5axcNuJ1r+YZuRjQiaeccLMSEc=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=t+1Nj2f7gouis2a/9Z2vo/
	pUw5w=; b=F62G0dHfjBC7/xIClE1o0g2M0mo/SWwjWZSMUGDp6llwBLwxKCYZsg
	oi3EVQhQgWh5Fng6Qaq8r83PVykzQWU9aqGAZ+qJ86NsjyLADbQ2alNKKmfT1398
	jOlHbRemCvOIPcgvHbp+//LJl1XgeqshZEFsO/BPvjauYQCW+bvgY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.0 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,GIT_PATCH_2,PLING_QUERY,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=ham version=3.3.2 spammy=Moreover, administration, yours
X-HELO: mail-it0-f44.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20161025;        h=x-gm-message-state:subject:to:references:from:message-id:date         :user-agent:mime-version:in-reply-to:content-language         :content-transfer-encoding;        bh=imzW4I8Q+g6NB1vv3X7zuH5S6JVRvxOaeaAvZCmD4QE=;        b=Ru1bCVxEzIbK5RFU82ZWeseW0cnGGGXtE2JSM7558+r1hTSkGuHWNz0BnE09wHlv8h         tVJgrI5Lh1ibmpqB5CpXvXhhvuxk3jlAVhM6BbGzK/PCXZ9ZAFQFDloGOeQ6HbP6I9v9         QYbGtcEkgIOZF4hTooBJ4M7QoUus9hVuKyasKk8XJK+jw3GBg4F9nYL8o0c3WoSmq5h8         3d+h1hFVNY7EQwypM+TemhVShuZTtxteNb+y/NHPL68BFcBbw/283XIjzF5kXDGlW7uR         +AWE8SFwsrTFKpe3S9IMG7SJ1fx0kknODdtTHFEbZTp7NianwQi49Ept4JroTRODyOjP         YX8g==
X-Gm-Message-State: AODbwcBDV6L21IM+Xf41ie6KjBWFvbsviyF3TF8sCHJYBi2nvrpKGEFV	mi0Mk3we51+Qoe9f
X-Received: by 10.36.82.85 with SMTP id d82mr9352266itb.13.1496256340086;        Wed, 31 May 2017 11:45:40 -0700 (PDT)
Subject: Re: openssh: privilege separation no longer supported on Cygwin? SURPRISE!
To: cygwin AT cygwin DOT com
References: <d436698bbd53eef3cbdda788d4926109 AT xs4all DOT nl> <37b863f6-ce5c-ef13-569f-8044fe485075 AT gmail DOT com> <20e2702ca3837f5d54c558f8e786c717 AT xs4all DOT nl> <b16023ad6735108510ae351a8378a420 AT xs4all DOT nl> <262615c8cf6e134cedf97b0280c4a68f AT smtp-cloud2 DOT xs4all DOT net> <592E1C49 DOT 6020202 AT cygwin DOT com> <38be07babbfc69d5ccea67afe6f92794 AT smtp-cloud2 DOT xs4all DOT net> <28f7eeae-ed40-9837-53bc-d2d6a33ad5a7 AT gmail DOT com> <353243559c68bf1200675e2dc13c3d93 AT smtp-cloud2 DOT xs4all DOT net> <b4649f29-b2bb-b735-463b-91cbe7e13654 AT gmail DOT com> <3379afa6b42f91b1cc23cada04ce40b6 AT smtp-cloud3 DOT xs4all DOT net>
From: cyg Simple <cygsimple AT gmail DOT com>
Message-ID: <7d867da5-47d9-4d6b-5262-d8b7a4ebc6c4@gmail.com>
Date: Wed, 31 May 2017 14:45:39 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <3379afa6b42f91b1cc23cada04ce40b6@smtp-cloud3.xs4all.net>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-IsSubscribed: yes

On 5/31/2017 12:34 PM, Houder wrote:
> On Wed, 31 May 2017 10:59:38, cyg Simple wrote:
>> On 5/31/2017 10:16 AM, Houder wrote:
>>> On Wed, 31 May 2017 09:27:02, cyg Simple wrote:
>>>
>>> [snip]
>>>> All of this talk of /etc/passwd leads me to point you to
>>>> https://cygwin.com/cygwin-ug-net/ntsec.html.
>>>
>>> cyg,
>>>
>>> Do you want me to study that text a second, third, fourth or Xth time ...?
>>>
>>
>> Yes, especially section
>> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping where it
>> explains that /etc/passwd and /etc/group are now deprecated and it's use
>> is for backward compatibility and that you should be using
>> /etc/nsswitch.conf[1] instead.  Have you attempted this?
>>
>> [1] https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch
> 
> Actually, that text reads:
> 
>  = Mapping Windows SIDs to POSIX uid/gid values:
> 
>   * Read /etc/passwd and /etc/group files if they exist, just as in the olden
>     days, mainly for backward compatibility.
> -----
> 
> It does not stipulate that these files are no longer supported ... Corinna did
> not dare to proclaim them "deprecated".
> 
> Do I use the file /etc/nsswitch.conf? Yes, certainly. As shown in:
> 
>     https://cygwin.com/ml/cygwin/2017-05/msg00456.html
>     (see bottom of post)
> 
> Do you want me to drop /etc/{passwd,group} files. Yes, you do. I will not.
> 

That choice is yours but they are needless except for very limited needs.

> Moreover, it is completely irrelevant from a logical point of view  whether
> /etc/{passwd,group) or AD is used to maintain the "network administration".
> 

So what.  You have to maintain separate multiple databases for the same
user.

Just give removing these two files a try to see if you have good success.

-- 
cyg Simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple