From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin-announce@cygwin.com
Subject: Update: getent-2.18.90-4
Date: Tue, 18 Nov 2014 15:48:00 -0000 [thread overview]
Message-ID: <20141118154310.GB3151@calimero.vinschen.de> (raw)
Hi folks,
I just uploaded getent-2.18.90-4.
getent is a Glibc tool which allows to fetch host, passwd, group,
protocol, and service information via a simple tool.
The -4 option introduces the -w/--windows command line option.
Together with the "group" and "passwd" commands, it generates
Cygwin<->Windows account mapping records in the following form:
$ getent -w passwd cygwin_username
cygwin_username:cygwin_uid:windows_domain\windows_username:SID
$ getent -w group cygwin_groupname
cygwin_groupname:cygwin_uid:windows_domain\windows_groupname:SID
Real life example:
$ getent -w passwd Administrator
Administrator:1049076:VINSCHEN\Administrator:S-1-5-21-2913048732-1697188782-3448811101-500
$ getent -w group Administrators
Administrators:544:BUILTIN\Administrators:S-1-5-32-544
Given the -4 version came so fast after -3, here's the -3 change again
to avoid confusion:
The -3 version introduced the ability to ask for passwd and group
entries via Windows username/groupname, using the "U-" prefix as
in Cygwin's pw_gecos field:
$ getent passwd U-BUILTIN\\Administrator
Administrators:*:544:544:,S-1-5-32-544::
You can skip the domain name. In this case getent relies on the
default account name resolution order of the underlying LookupAccountName(*)
function
$ getent passwd U-Administrator
Administrators:*:544:544:,S-1-5-32-544::
This release also fixes the problem that under current versions of
Cygwin an entry for the user/group name "????????" is printed when
enumerating user or group accounts.
=====================================================================
IMPORTANT (not only) FOR CYGWIN PACKAGE MAINTAINERS
=====================================================================
The most important aspect for Cygwin for the near future is this:
With the new passwd/group code just in testing (see
https://cygwin.com/preliminary-ntsec.html for lots and lots
of information), tools and scripts must not rely anymore on being able
to grep user and group information from /etc/passwd and /etc/group!
The new way to read passwd and group information from, for instance,
service installation helper scripts, is to use the getent tool for
this purpose.
I'd like to urge all maintainers which provide such scripts to look
into their packages and fix them to use the getent tool, rather than
grep'ing /etc/passwd and /etc/group directly.
=====================================================================
(*) http://msdn.microsoft.com/en-us/library/windows/desktop/aa379159%28v=vs.85%29.aspx
Have fun,
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat
reply other threads:[~2014-11-18 15:48 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20141118154310.GB3151@calimero.vinschen.de \
--to=corinna-cygwin@cygwin.com \
--cc=cygwin-announce@cygwin.com \
--cc=cygwin@cygwin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).