DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-transfer-encoding
	:mime-version; q=dns; s=default; b=oNoJG3it+346VpAGIz3gf52zQKee5
	ITAFfP3mWQ/jAfP45rg6njQs0HA+yF3LSoRQxByRRdiTJJ8doeOQCna9arOljFOT
	m3yFr/VqAjUegPkmPIKfT6R6qM0i/kwd24nvx+KJ1cKt7hVN2nrKr+DgDU5qRfrX
	OtoCZ2mY/LMy/o=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
From: Maayan Apelboim <Maayan DOT Apelboim AT clarizen DOT com>
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>,
        "corinna-cygwin AT cygwin DOT com"	<corinna-cygwin AT cygwin DOT com>
Subject: RE: getent doesn't work properly
Date: Wed, 13 Nov 2019 12:04:52 +0000
Message-ID: <AM4PR07MB3473C2E47E242084A10441F895760@AM4PR07MB3473.eurprd07.prod.outlook.com>
References: <AM4PR07MB34733571EBDE3D0F1EB778C795660 AT AM4PR07MB3473 DOT eurprd07 DOT prod DOT outlook DOT com>
In-Reply-To: <AM4PR07MB34733571EBDE3D0F1EB778C795660@AM4PR07MB3473.eurprd07.prod.outlook.com>
received-spf: None (protection.outlook.com: clarizen.com does not designate permitted sender hosts)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-userprincipalname: rXHEZYPQzhOE2q9LX5iT24PuEWF428Y22gQPnr3G11UyuYrDD76sEYjtRZpkrx6t+PyUoPSH+i7NBY8ZgM55AmSD8PEYF9U9TEAGGBEv4nQ=
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id xADC5oAi015870

Hello again,

Unfortunately the problem returned :(
For the same server and now an additional one.
This time removing from the domain and deleting the entries did not do the trick, maybe if I delete from all DC servers instead waiting for replication it might help, but since the issue started again this is not a final solution anyway.

There is AV software installed on any of these servers.

Feel free to send me the additional info you mentioned.

Thanks a lot for the help!
Much appreciated!


-----Original Message-----
From: Maayan Apelboim [mailto:Maayan DOT Apelboim AT clarizen DOT com] 
Sent: Monday, October 28, 2019 10:57 AM
To: cygwin AT cygwin DOT com
Subject: RE: getent doesn't work properly


Thanks.  What happens is that in the non-working scenario the user name is refused by Cygwin because it's apparently not in the primary domain of the machine.  I.e., if the machine's primary domain is "dom0", and "user1" is in "dom1", then the account has to be called "dom1+user1".  The name only is forbidden in this case.

However, this doesn't explain why this happens at all since apparently "user1" is in the primary domain of the machine, and why it only fails intermittendly.  In both cases, working and non-working, the domain is returned by the same Windows call LookupAccountNameW.

What's really strange is that in the working case a lot of network related Windows DLLs are loaded into the process, e.g. wshqos.dll, WSHTCPIP.DLL, wship6.dll etc., while this does not happen in the non-working case.  None of these DLLs is requested by Cygwin, so this is something occuring in the native Windows background.  This is a bit suspicious and may point to some interaction with a virus scanner or something along these lines, and which for some reason doesn't always work as desired (Avast, anybody?)  Can you check this, perhaps?

Apart from that first question is, is the domain really called "dom"
and is the user account name really "user1"?  I'm asking because the name may collide with another account name from a builtin or second domain, and sometimes the wrong user account is returned by the Windows functions for whatever reason.

Second question is, can I send you the URL to a Cygwin test DLL with extended debug info in private email?  In this case I'd only need the non-working trace, preferredly verbatim, and you can return the trace by private email as well.


Thanks,
Corinna

--
Corinna Vinschen
Cygwin Maintainer


---------------------------------

After reading your email I started to suspect having a domain issue.
I removed the server from the domain, deleted all its relevant records and rejoined it.
It seems the problem was solved for now.
I already tried in the past removing it from the domain, and even reinstalled the server, but it didn't help, I think deleting all corresponding records after removing from domain did the trick.

I will update if this issue re-occurs.

I really appreciate the help!

Thanks!


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple