Mailing-List: contact cygwin-developers-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-developers-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin-developers/>
List-Post: <mailto:cygwin-developers AT cygwin DOT com>
List-Help: <mailto:cygwin-developers-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-developers-owner AT cygwin DOT com
Delivered-To: mailing list cygwin-developers AT cygwin DOT com
Date: Wed, 17 Jul 2002 14:22:59 +0200
From: Corinna Vinschen <vinschen AT redhat DOT com>
To: cygwin-developers AT cygwin DOT com
Subject: Re: Corinna or Pierre please comment? [jason AT tishler DOT net: Re: setuid() problem when disconnected from PDC under 1.3.12-2]
Message-ID: <20020717142259.E6932@cygbert.vinschen.de>
Reply-To: cygwin-developers AT cygwin DOT com
Mail-Followup-To: cygwin-developers AT cygwin DOT com
References: <20020715155951 DOT GG2372 AT tishler DOT net> <20020713165415 DOT GB30143 AT redhat DOT com> <20020715110733 DOT B6932 AT cygbert DOT vinschen DOT de> <20020715125051 DOT GC2372 AT tishler DOT net> <20020715145826 DOT H6932 AT cygbert DOT vinschen DOT de> <20020715155951 DOT GG2372 AT tishler DOT net> <3 DOT 0 DOT 5 DOT 32 DOT 20020715162535 DOT 0080c900 AT mail DOT attbi DOT com> <20020716191735 DOT GB1692 AT tishler DOT net> <20020717121704 DOT GA1260 AT tishler DOT net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020717121704.GA1260@tishler.net>
User-Agent: Mutt/1.3.22.1i

On Wed, Jul 17, 2002 at 08:17:05AM -0400, Jason Tishler wrote:
> On Tue, Jul 16, 2002 at 03:17:35PM -0400, Jason Tishler wrote:
> > On Mon, Jul 15, 2002 at 04:25:35PM -0400, Pierre A. Humblet wrote:
> > > Jason, can you telnet into the machine as a domain user when
> > > disconnected from the PDC for a long time? If so are the groups (from
> > > id) the same as when you are connected (working with an /etc/group
> > > that includes the domain groups)? (just curious).
> > 
> > I was thinking of trying the above experiment myself.  I will disconnect
> > before I leave work today and try first thing tomorrow.  I will report
> > back then.
> 
> After being disconnected for about 14 hours, I ran id under the
> following conditions:
> 
>     1. bash
>     2. telnet
>     3. ssh with password exchange
> 
> All of the above cases, returned identical results:
> 
>     $ id
>     uid=19695(jt) gid=10513(Domain Users) groups=0(Everyone),544(Administrators),545(Users),10513(Domain Users)
> 
> So, it appears that I can get my domain group(s) from the cached
> credentials even after being disconnected from my PDC for a "long" time
> when I logon with a password.  Where do we go from here?

Did you logout and then login again while being disconnected?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.