Mailing-List: contact cygwin-developers-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-developers-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin-developers/>
List-Post: <mailto:cygwin-developers AT cygwin DOT com>
List-Help: <mailto:cygwin-developers-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-developers-owner AT cygwin DOT com
Delivered-To: mailing list cygwin-developers AT cygwin DOT com
Message-Id: <3.0.5.32.20020715162535.0080c900@mail.attbi.com>
X-Sender: phumblet AT mail DOT attbi DOT com
Date: Mon, 15 Jul 2002 16:25:35 -0400
To: cygwin-developers AT cygwin DOT com, Jason Tishler <jason AT tishler DOT net>
From: "Pierre A. Humblet" <Pierre DOT Humblet AT ieee DOT org>
Subject: Re: Corinna or Pierre please comment? [jason AT tishler DOT net: Re:
  setuid() problem when disconnected from PDC under 1.3.12-2]
In-Reply-To: <20020715192444.L6932@cygbert.vinschen.de>
References: <20020715155951 DOT GG2372 AT tishler DOT net>
 <20020713165415 DOT GB30143 AT redhat DOT com>
 <20020715110733 DOT B6932 AT cygbert DOT vinschen DOT de>
 <20020715125051 DOT GC2372 AT tishler DOT net>
 <20020715145826 DOT H6932 AT cygbert DOT vinschen DOT de>
 <20020715155951 DOT GG2372 AT tishler DOT net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"

At 07:24 PM 7/15/2002 +0200, Corinna Vinschen wrote:
>On Mon, Jul 15, 2002 at 11:59:51AM -0400, Jason Tishler wrote:

I agree with everything Corinna wrote (just back from a long trip).
The drawback of implementing a "lenient" version is that, without special 
edits of /etc/group, some site-dependent "mysterious" failures might
happen when disconnected.
Why not use a local account for sshd and cron? 

>> Does anyone know if this information is cached locally by disconnected
>It is for some amount of time.  It's called "cached credentials".
>> boxes?  And if so, is there a (convenient) way to retrieve it?
>Dunno.  It seems only retrievable by logon apps.

Jason, can you telnet into the machine as a domain user when disconnected
from the PDC for a long time? If so are the groups (from id) the same as
when you are connected (working with an /etc/group that includes the domain 
groups)? (just curious).

Pierre