public inbox for cygwin-announce@cygwin.com
 help / color / mirror / Atom feed
* Update: getent-2.18.90-4
@ 2014-11-18 15:48 Corinna Vinschen
  0 siblings, 0 replies; only message in thread
From: Corinna Vinschen @ 2014-11-18 15:48 UTC (permalink / raw)
  To: cygwin-announce

Hi folks,


I just uploaded getent-2.18.90-4.

getent is a Glibc tool which allows to fetch host, passwd, group,
protocol, and service information via a simple tool.

The -4 option introduces the -w/--windows command line option.
Together with the "group" and "passwd" commands, it generates
Cygwin<->Windows account mapping records in the following form:

  $ getent -w passwd cygwin_username
  cygwin_username:cygwin_uid:windows_domain\windows_username:SID
  $ getent -w group cygwin_groupname
  cygwin_groupname:cygwin_uid:windows_domain\windows_groupname:SID

Real life example:

  $ getent -w passwd Administrator
  Administrator:1049076:VINSCHEN\Administrator:S-1-5-21-2913048732-1697188782-3448811101-500
  $ getent -w group Administrators
  Administrators:544:BUILTIN\Administrators:S-1-5-32-544

Given the -4 version came so fast after -3, here's the -3 change again
to avoid confusion:

The -3 version introduced the ability to ask for passwd and group
entries via Windows username/groupname, using the "U-" prefix as
in Cygwin's pw_gecos field:

  $ getent passwd U-BUILTIN\\Administrator
  Administrators:*:544:544:,S-1-5-32-544::

You can skip the domain name.  In this case getent relies on the
default account name resolution order of the underlying LookupAccountName(*)
function

  $ getent passwd U-Administrator
  Administrators:*:544:544:,S-1-5-32-544::

This release also fixes the problem that under current versions of
Cygwin an entry for the user/group name "????????" is printed when
enumerating user or group accounts.
 
=====================================================================
        IMPORTANT (not only) FOR CYGWIN PACKAGE MAINTAINERS
=====================================================================

The most important aspect for Cygwin for the near future is this:

With the new passwd/group code just in testing (see
https://cygwin.com/preliminary-ntsec.html for lots and lots
of information), tools and scripts must not rely anymore on being able
to grep user and group information from /etc/passwd and /etc/group!

The new way to read passwd and group information from, for instance,
service installation helper scripts, is to use the getent tool for
this purpose.

I'd like to urge all maintainers which provide such scripts to look
into their packages and fix them to use the getent tool, rather than
grep'ing /etc/passwd and /etc/group directly.
=====================================================================

(*) http://msdn.microsoft.com/en-us/library/windows/desktop/aa379159%28v=vs.85%29.aspx


Have fun,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2014-11-18 15:48 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-11-18 15:48 Update: getent-2.18.90-4 Corinna Vinschen

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).