X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:subject:to:references:from:message-id:date :mime-version:in-reply-to:content-type :content-transfer-encoding; q=dns; s=default; b=PaKQX1+Ll1215Z1D P2DE6VuQ+eB+b3mIhMnKRDKbqnXIekFi0YgmxGO+nLML1jIpKYAGOxCzOpXMdaBD WF9o00Chfpb8QPOde1YUhZ8cymdSzg1P6QUwZ3di22BEEcEpr3ktZx3rAY9F6S5o E5axcNuJ1r+YZuRjQiaeccLMSEc= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:subject:to:references:from:message-id:date :mime-version:in-reply-to:content-type :content-transfer-encoding; s=default; bh=t+1Nj2f7gouis2a/9Z2vo/ pUw5w=; b=F62G0dHfjBC7/xIClE1o0g2M0mo/SWwjWZSMUGDp6llwBLwxKCYZsg oi3EVQhQgWh5Fng6Qaq8r83PVykzQWU9aqGAZ+qJ86NsjyLADbQ2alNKKmfT1398 jOlHbRemCvOIPcgvHbp+//LJl1XgeqshZEFsO/BPvjauYQCW+bvgY= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.0 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,GIT_PATCH_2,PLING_QUERY,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=ham version=3.3.2 spammy=Moreover, administration, yours X-HELO: mail-it0-f44.google.com X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=imzW4I8Q+g6NB1vv3X7zuH5S6JVRvxOaeaAvZCmD4QE=; b=Ru1bCVxEzIbK5RFU82ZWeseW0cnGGGXtE2JSM7558+r1hTSkGuHWNz0BnE09wHlv8h tVJgrI5Lh1ibmpqB5CpXvXhhvuxk3jlAVhM6BbGzK/PCXZ9ZAFQFDloGOeQ6HbP6I9v9 QYbGtcEkgIOZF4hTooBJ4M7QoUus9hVuKyasKk8XJK+jw3GBg4F9nYL8o0c3WoSmq5h8 3d+h1hFVNY7EQwypM+TemhVShuZTtxteNb+y/NHPL68BFcBbw/283XIjzF5kXDGlW7uR +AWE8SFwsrTFKpe3S9IMG7SJ1fx0kknODdtTHFEbZTp7NianwQi49Ept4JroTRODyOjP YX8g== X-Gm-Message-State: AODbwcBDV6L21IM+Xf41ie6KjBWFvbsviyF3TF8sCHJYBi2nvrpKGEFV mi0Mk3we51+Qoe9f X-Received: by 10.36.82.85 with SMTP id d82mr9352266itb.13.1496256340086; Wed, 31 May 2017 11:45:40 -0700 (PDT) Subject: Re: openssh: privilege separation no longer supported on Cygwin? SURPRISE! To: cygwin AT cygwin DOT com References: <37b863f6-ce5c-ef13-569f-8044fe485075 AT gmail DOT com> <20e2702ca3837f5d54c558f8e786c717 AT xs4all DOT nl> <262615c8cf6e134cedf97b0280c4a68f AT smtp-cloud2 DOT xs4all DOT net> <592E1C49 DOT 6020202 AT cygwin DOT com> <38be07babbfc69d5ccea67afe6f92794 AT smtp-cloud2 DOT xs4all DOT net> <28f7eeae-ed40-9837-53bc-d2d6a33ad5a7 AT gmail DOT com> <353243559c68bf1200675e2dc13c3d93 AT smtp-cloud2 DOT xs4all DOT net> <3379afa6b42f91b1cc23cada04ce40b6 AT smtp-cloud3 DOT xs4all DOT net> From: cyg Simple Message-ID: <7d867da5-47d9-4d6b-5262-d8b7a4ebc6c4@gmail.com> Date: Wed, 31 May 2017 14:45:39 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 In-Reply-To: <3379afa6b42f91b1cc23cada04ce40b6@smtp-cloud3.xs4all.net> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-IsSubscribed: yes On 5/31/2017 12:34 PM, Houder wrote: > On Wed, 31 May 2017 10:59:38, cyg Simple wrote: >> On 5/31/2017 10:16 AM, Houder wrote: >>> On Wed, 31 May 2017 09:27:02, cyg Simple wrote: >>> >>> [snip] >>>> All of this talk of /etc/passwd leads me to point you to >>>> https://cygwin.com/cygwin-ug-net/ntsec.html. >>> >>> cyg, >>> >>> Do you want me to study that text a second, third, fourth or Xth time ...? >>> >> >> Yes, especially section >> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping where it >> explains that /etc/passwd and /etc/group are now deprecated and it's use >> is for backward compatibility and that you should be using >> /etc/nsswitch.conf[1] instead. Have you attempted this? >> >> [1] https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch > > Actually, that text reads: > > = Mapping Windows SIDs to POSIX uid/gid values: > > * Read /etc/passwd and /etc/group files if they exist, just as in the olden > days, mainly for backward compatibility. > ----- > > It does not stipulate that these files are no longer supported ... Corinna did > not dare to proclaim them "deprecated". > > Do I use the file /etc/nsswitch.conf? Yes, certainly. As shown in: > > https://cygwin.com/ml/cygwin/2017-05/msg00456.html > (see bottom of post) > > Do you want me to drop /etc/{passwd,group} files. Yes, you do. I will not. > That choice is yours but they are needless except for very limited needs. > Moreover, it is completely irrelevant from a logical point of view whether > /etc/{passwd,group) or AD is used to maintain the "network administration". > So what. You have to maintain separate multiple databases for the same user. Just give removing these two files a try to see if you have good success. -- cyg Simple -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple