From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 15624 invoked by alias); 16 Feb 2014 14:48:38 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 15604 invoked by uid 89); 16 Feb 2014 14:48:38 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-6.0 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2 X-HELO: calimero.vinschen.de Received: from aquarius.hirmke.de (HELO calimero.vinschen.de) (217.91.18.234) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Sun, 16 Feb 2014 14:48:37 +0000 Received: by calimero.vinschen.de (Postfix, from userid 500) id 502D2520860; Sun, 16 Feb 2014 15:48:35 +0100 (CET) Date: Sun, 16 Feb 2014 14:50:00 -0000 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: Testers needed: New passwd/group handling in Cygwin Message-ID: <20140216144835.GS2246@calimero.vinschen.de> Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com References: <20140213143849.GH2246@calimero.vinschen.de> <52FD63BC.60800@etr-usa.com> <20140214104243.GY2246@calimero.vinschen.de> <52FE786F.9040203@etr-usa.com> <20140215125043.GK2246@calimero.vinschen.de> <7F9D4826-E8D5-41E7-A8B6-B41922FE6E1C@etr-usa.com> <20140216115612.GO2246@calimero.vinschen.de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="DCmRZ841GpRfzaEr" Content-Disposition: inline In-Reply-To: <20140216115612.GO2246@calimero.vinschen.de> User-Agent: Mutt/1.5.21 (2010-09-15) X-SW-Source: 2014-02/txt/msg00422.txt.bz2 --DCmRZ841GpRfzaEr Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-length: 2108 On Feb 16 12:56, Corinna Vinschen wrote: > On Feb 16 03:30, Warren Young wrote: > > On Feb 15, 2014, at 5:50 AM, Corinna Vinschen wrote: > > > No, that's not right. We have two mechanisms implemented you can > > > choose three out of four possible combinations: > > >=20 > > > files only > > > db only > > > files, then db > >=20 > > Yes, I realize that. > >=20 > > While composing the previous email, I considered a 2-Boolean design: > >=20 > > ignore_db=3Dfalse > > ignore_files=3Dfalse > >=20 > > I rejected that design when I realized that ignore_files is redundant w= ith respect to /etc/foo file existence. If the files are present, use them= . If not, you have a DB-only configuration. >=20 > What if an admin wants to avoid that files are read at all, even if a > user manages to generate them? Anyway, I'm willing to switch from /etc/nsswitch.conf to something else. Let's assume we go with /etc/cygwin.conf instead. This wouldn't set a bad precedent in terms of syntax and keyword differences to configuration files existing on Linux, and it would allow to define more settings which have nothing to do with passwd/group stuff in the long run. So, how should this look like? Let's do some free floating,=20 # /etc/cygwin.conf pwdgrp=3D"files db" db_separator=3D"+" db_cache=3D"yes" db_prefix=3D"auto" And now the new one. I have getpwent/getgrent practically ready to go. It's just missing the setting to restrict the enumeration. It occured to me that an admin or a user might want to restrict the enumeration to a specific set of domains. What about something like this? db_enum=3D"local primary trusted_dom1 trusted_dom2" "local" and "primary" being fixed keywords for the local machine accounts and the accounts from the primary domain. Everything else is treated as a domain name of a trusted domain, and the name can be given as flat domain name as well as as dns domain name. Does that make sense? Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --DCmRZ841GpRfzaEr Content-Type: application/pgp-signature Content-length: 819 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJTAM/DAAoJEPU2Bp2uRE+gieUP/39ltul1SdtAWWnkm5aT0Coo 4POPvFISOpi9DLZRYgLnrQc4Ze0UD5TtBkLSE6FGw6aIvzixbavy8kRjKP6u8rVo Fjd7wJxAUHx2nyVmq4RuTYoGqg4dbMMUF9dQVrmtrjiqjI+FEtBD9i8MTTcUrJB5 aoo/1YlstL8HgC/W/vVFyK6G/kk7SLrT+94cmDTeo839n5XQx7f3OUjMmaNikzYA kaaRj7FRIsro3fzKuSt3gWG/SOIpoKIxIoz9iLuIXmWev29VIYioV32VM7VXsKT2 OvP2/3mtazt4vYIJ6FtbqUiJ/kCyZohgJYVAwoqFOFz50ZO2M0Qh7cG7zbsyedPW x09rTp4HN8mWWScsFH6focmY7ehcatqG6QP8zl1vxUMKiH3/d7+E+oxPpFm4YCFX IIfnfAsJ3OUE79SdL08Nhy2yADd6JDXES7ikdntwf/WRgHNWj+psh2keBq+pSJOx RJyDOq1wqrKCyjkjrZIH3Gwiz24K42pOkmhRzGsSmy0kh0FBZYYHIh6vkxQIvhGV DRW7E4R6qXqNE+48L3tFfZpn+StSnPzM+Qec0IWYLHkJavcyYAmS6CTMF4EX12wc L7LXPDDC71IIeBMsRdP3/sfg3son7/nCFMamO9I2Dghkr3m6Zx6mGyHgZJffPnTI oL7deMhLM/i6YbJhvO35 =wqKG -----END PGP SIGNATURE----- --DCmRZ841GpRfzaEr--