From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 13876 invoked by alias); 13 Apr 2014 10:20:16 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 13866 invoked by uid 89); 13 Apr 2014 10:20:16 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-3.3 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,KAM_THEBAT,SPF_SOFTFAIL autolearn=no version=3.3.2 X-HELO: smtpback.ht-systems.ru Received: from smtpback.ht-systems.ru (HELO smtpback.ht-systems.ru) (78.110.50.181) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Sun, 13 Apr 2014 10:20:13 +0000 Received: from [91.76.98.252] (helo=darkdragon.lan) by smtp.ht-systems.ru with esmtpa (Exim 4.80.1) (envelope-from ) id 1WZHW9-0005oF-Lw for cygwin@cygwin.com; Sun, 13 Apr 2014 14:20:05 +0400 Received: from [192.168.1.10] (HELO daemon2) by daemon2 (Office Mail Server 0.8.12 build 08053101) with SMTP; Sun, 13 Apr 2014 10:18:48 -0000 Date: Sun, 13 Apr 2014 10:20:00 -0000 From: Andrey Repin Reply-To: cygwin@cygwin.com Message-ID: <1723507354.20140413141847@yandex.ru> To: Corinna Vinschen Subject: Re: Still testing needed: New passwd/group AD/SAM integration In-Reply-To: <20140410145323.GB2437@calimero.vinschen.de> References: <20140410145323.GB2437@calimero.vinschen.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-IsSubscribed: yes X-SW-Source: 2014-04/txt/msg00322.txt.bz2 Greetings, Corinna Vinschen! > The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. > It contains the latest crazy ideas in terms of the user and group > account creation without requiring the /etc/passwd and /etc/group > files. > Not a lot has changed since we made a break to test for 1.7.29, > but there's one important change I'd like to point out: > * cygserver now provides system-wide passwd/group entry caching. > All processes started *after* cygserver will try to fetch passwd > and group entries from cygserver. While this is probably a bit > slow at the start, the longer cygserver runs, the more information > is present and later started processes will get the information > with all due speed. Does this mean that I could benefit from running cygserver in local environment? Specifically, if I'm using Cygwin tools outside Cygwin shell? > I attached the latest incarnation of the documentation for this > major change to this mail. > However! > After sweating about some of the details I created in my scrubby mind > back in January/February, I'm not so sure anymore if some if was really > such a bright idea. > Especially two problems cropped up in discussions with local Cygwin > users: > * Support for Cygwin user names different from the Windows username. I think I said it before, but I'll just repeat that I don't see this as a feature. Confusion option, at best. The worst case you've just outlined below. > Fixing this problem leads to terrible performance. Obviously Cygwin > doesn't know if "yoghurt" is a local or an AD account. Or, FWIW, an > account in some trusted domain. Finding "kefir" in the SAM of the > local machine requires to enumerate *all* accounts, until the account > with > > > > is found. Even worse in AD. An ldap query is required which searches > for an account with uid="kefir". The uid attribute is not indexed by > default. Same for all trusted domains. > * db_separator in /etc/nsswitch.conf > Is it really such a good idea to have a configurable separator > char in user and group names? Is it important that it is > configurable? Is '+' a good choice for the default separator? > Wouldn't the backslash a better and, perhaps, only choice? The "+" as a separator was conceived in *NIX because backslash has a long history of being a way-too-meaningful escape character. (Though, you know it, I'll just say it for other interested parties.) I don't have an opinion on it, but I tend to favor native semantics, means, the backslash. If anyone are familiar with modern state of preferred domain separator in Samba 4, would that effect the decision? -- WBR, Andrey Repin (anrdaemon@yandex.ru) 13.04.2014, <14:11> Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple