X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:cc:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=mN8yTYsmL0orOWsSApXIm6zZFmS/bfRTYnIpFp1yrKyvmSF+qXhJE
	m3dmIogELKhfcjiHdVk8Qz1cCmshNJRrp0tnmou3309OiLLWIR1CP3f96o4chtol
	t2WN8u56fXSSRfrZiu4acEiukLKJYx+5FXMobifmfK3QpNTe5TAeU0=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:cc:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=RWR3IKFYGQ72xZEyasjbECuOQ+A=; b=X816G+GEbK69wPs18DeisTAGiJAC
	wy4vnMplPSjJK39Ill+Gu9hzsiyxkwtHJDplutEj1beZCcTEd9ajzKWd9br3rmIb
	KHygYmuO5+BJ2PtdOm2UNH5RKuH6GwPfZPJ+ybno4jx5LaRMjiivh2yIBgudRRWi
	yU11bUYIwf1ymxU=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-101.9 required=5.0 tests=BAYES_00,GOOD_FROM_CORINNA_CYGWIN,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 spammy=Brian, brian, matters, inglis
X-HELO: mout.kundenserver.de
Date: Mon, 3 Jun 2019 13:14:51 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: Maayan Apelboim <Maayan DOT Apelboim AT clarizen DOT com>
Cc: cygwin AT cygwin DOT com
Subject: Re: getent doesn't show all domain users
Message-ID: <20190603111451.GF3437@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: Maayan Apelboim <Maayan DOT Apelboim AT clarizen DOT com>,	cygwin AT cygwin DOT com
References: <AM6PR07MB5334FC3FCC1D6BD79438A91A951D0 AT AM6PR07MB5334 DOT eurprd07 DOT prod DOT outlook DOT com> <3a2c51fe-894d-8959-70b9-22a9d8f980aa AT SystematicSw DOT ab DOT ca>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="HeFlAV5LIbMFYYuh"
Content-Disposition: inline
In-Reply-To: <3a2c51fe-894d-8959-70b9-22a9d8f980aa@SystematicSw.ab.ca>
User-Agent: Mutt/1.11.3 (2019-02-01)

--HeFlAV5LIbMFYYuh
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On May 27 09:59, Brian Inglis wrote:
> On 2019-05-27 03:15, Maayan Apelboim wrote:
> > I have a server in the domain (duplicated from another domain if it mat=
ters).
> > At first "getent passwd" run I see the user from the different domain, =
but=20
> > after a few runs it disappears.
> > Even after it disappears getent doesn't return all domain users while
> > mkpasswd -d returns all users.
> > When I try to chown user /home/user I get "invalid user" error - but th=
is
> > user exists in the domain.
> > After a few restarts to the server or logging with the user the problem=
 is
> > solved.
> > But I don't have a constant work around that works smoothly.
>=20
> Systems may have tens to hundreds of local user accounts, and domains
> may have hundreds to hundreds of thousands of user accounts.  The
> system probably caches only active users, and getent enumerates those
> if no /etc/passwd file exists, as it was designed to enumerate only a
> few entries from local files.  As it is, getent will not even
> enumerate hosts from the local hosts files or resolver.

Pointing to the user's guide which actually explains why this happens:

https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch-enum

The user's guide!  Probably the most unread document of all times... ;)


Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--HeFlAV5LIbMFYYuh
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=619f
-----END PGP SIGNATURE-----

--HeFlAV5LIbMFYYuh--