From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 20191 invoked by alias); 24 Mar 2015 16:48:54 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 20173 invoked by uid 89); 24 Mar 2015 16:48:53 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2 X-HELO: calimero.vinschen.de Received: from aquarius.hirmke.de (HELO calimero.vinschen.de) (217.91.18.234) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 24 Mar 2015 16:48:52 +0000 Received: by calimero.vinschen.de (Postfix, from userid 500) id 6EB1EA807DE; Tue, 24 Mar 2015 17:48:50 +0100 (CET) Date: Tue, 24 Mar 2015 17:03:00 -0000 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: update trouble 1.7.35 Message-ID: <20150324164850.GY3017@calimero.vinschen.de> Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com References: <33EC3398272FBE47B64EE3B3E98F69A76C40CC25@DE011520.schaeffler.com> <20150323193842.GM3017@calimero.vinschen.de> <20150324140333.GA17861@calimero.vinschen.de> <33EC3398272FBE47B64EE3B3E98F69A76C414FBD@de011521.schaeffler.com> <20150324155024.GA21272@calimero.vinschen.de> <33EC3398272FBE47B64EE3B3E98F69A76C41502F@de011521.schaeffler.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="a6Ri6/t33sscKOaw" Content-Disposition: inline In-Reply-To: <33EC3398272FBE47B64EE3B3E98F69A76C41502F@de011521.schaeffler.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-SW-Source: 2015-03/txt/msg00428.txt.bz2 --a6Ri6/t33sscKOaw Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-length: 4321 On Mar 24 16:25, Lemke, Michael ST/HZA-ZSW wrote: > On March 24, 2015 4:50 PM Corinna Vinschen wrote: > >On Mar 24 15:19, Lemke, Michael ST/HZA-ZSW wrote: > >> C:\NCygwin\bin>cat ..\etc\nsswitch.conf > >> passwd: files > >> group: files > >>=20 > >> C:\NCygwin\bin>getent passwd %USERNAME% > >> lemkemch:unused:12729:10513:U-INA-DE01\lemkemch,S-1-5-21-1373454394-16= 54746546-1 > >> 846952604-2729:/home/lemkemch:/bin/tcsh > > > >Is that what you have in /etc/passwd? >=20 > Oops, thought I also showed passwd: >=20 > C:\NCygwin\bin>cat ..\etc\passwd > lemkemch:unused:12729:10513:U-INA-DE01\lemkemch,S-1-5-21-1373454394-16547= 46546-1846952604-2729:/home/lemkemch:/bin/tcsh >=20 > > > >> C:\NCygwin\bin>id > >> uid=3D4294967295(Unknown+User) gid=3D4294967295(Unknown+Group) groups= =3D545(Users),555 > >> (Remote Desktop Users) > > > >what does `mkpasswd -d | grep -i lemkemch' print? >=20 > C:\NCygwin\bin>mkpasswd -d | grep -i lemkemch > lemkemch:*:1175788:1049089:XXXXXXXX\lemkemch,S-1-5-21-435809281-806517502= -2525237208-127212:/home/lemkemch:/bin/bash Ouch. Your user SID from AD is different to the one in /etc/passwd. > Note that "they" did a domain switch here at some point. My installation= =20 > is really old and the passwd certainly is from before that domain change. That explains it. Please recreate your /etc/passwd and /etc/group files with mkpasswd and mkgroup, or, even better, just discard them. The problem is the domain switch which also changed the SID of your user account. The old SID, which you also have in your passwd, is not returned by the server anymore. But it's stored in your SID history in AD and when asking for it you get an answer. > >> Anything else you'd like me try? > > > >Can you change /etc/nsswitch.conf to "db" only, stop all cygwin > >processes and restart a shell? What does `getent passwd %USERNAME%' > >and `id' print now? How does an strace of this getent call look like? >=20 > C:\NCygwin\bin>vi ..\etc\nsswitch.conf >=20 > C:\NCygwin\bin>cat ..\etc\nsswitch.conf > passwd: db > group: db >=20 > C:\NCygwin\bin>getent passwd %USERNAME% > lemkemch:*:1175788:1049089:XXXXXXX\lemkemch,S-1-5-21-435809281-806517502-= 25 > 25237208-127212:/home/lemkemch:/bin/bash >=20 > C:\NCygwin\bin>id > uid=3D1175788(lemkemch) gid=3D1049089(Domain Users) groups=3D1049089(Doma= in Users),... > many many groups I don't like to post here. So it works. That's cool. I'd suggest to throw away your passwd and group files and live happily ever after. > > I'm grabbing for straws... >=20 > I noticed something else: With nsswitch.conf db: >=20 > > ls -l > ... > -rw-rwxr--+ 1 lemkemch OLDDOMAIN+Domain Users 10057 Oct 21 2013 tes= tresults.xml > drwxr-xr-x+ 1 lemkemch OLDDOMAIN+Domain Users 0 Nov 9 2010 tid= y4aug00 > drwxrwxr-x+ 1 lemkemch Domain Users 0 May 14 2014 tiny= mce > drwxr-xr-x+ 1 lemkemch OLDDOMAIN+Domain Users 0 Jan 13 2012 tom= ahawk-1.1.11 > ... > > ls -ln > ... > -rw-rwxr--+ 1 1051305 1073742337 10057 Oct 21 2013 testresults.xml > drwxr-xr-x+ 1 1051305 1073742337 0 Nov 9 2010 tidy4aug00 > drwxrwxr-x+ 1 1175788 1049089 0 May 14 2014 tinymce > drwxr-xr-x+ 1 1051305 1073742337 0 Jan 13 2012 tomahawk-1.1.11 > ... >=20 > Note the different numerical id's that translate to the same username. > Don't know if it means anything. I just find it weird. That's due to your SID history. It's a bit hard to explain, but that occurs when "they" switch to a new domain with different SIDs. When asking for the new and the old SID, the same username is returned since both are your SIDs, one old, one new. I strongly recommend not to use the old SID anymore. The reason is that Cygwin will create all these files with the old SIDs. However, your actual user token has the new SID. Uh, as I wrote, hard to explain and a weird situation. Downside: Cygwin can't handle the old SIDs from your SID history quite correctly. Trying to support them as well would slow down the user and group lookups a lot. If you can live with what we just found out and the solution I suggested, I'd be rather happy :} Thanks, Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --a6Ri6/t33sscKOaw Content-Type: application/pgp-signature Content-length: 819 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJVEZVyAAoJEPU2Bp2uRE+g5oAP/3EbwLWhJYrCYP7ATjKYiU4D hfir0BSvJwR7cAP1nBBIaBgo7fgWZN3IAzCfGiVZXjA6NSoanOmAu2evH/y2TQxd TBvJtJDhAWLEIUCgLprB1Qk0SH1HQIl46cijJT+I2aj7GBhA74zzmpEDPCP1uG0T j/pYjJeq39pZ0weoZZISc+oZbAmJJOnZ0gFGDBvnnriVoUBZN5y4Ot8k/nj7LOS+ Rjayg1CZEWlwbGQr4ojqRH1pjnWyKsfMn3EdBbIu9w0OOde/GjjHCm4XONbQox0B MCy4d8FFECWh72NDOElhSwUxIs5TAFNbQ1IGqNRePz8ze/PQ16t776e3x+UFTtpU HOjlL0VBcZkAzL1/aN4CmnGZsC2OH6Zq+gpfXHNGBNfmRXy4+FjQdCfjmy7vaRag PSTExmy4F+V7R4Cd9tmymMtwNVsHaTbepowt8ixWqNzohWAKn8H3TgAKwRdERaig KsLixxAfq20PJv5lu492nsk7tasIEI32vOETNqmkm+B06bIf0WftbPQDe0rIgmwy PrDhmjHGh6DkkpFMrj26kGtukZ1LQdSMs5Yb5T4S1PHoou3txmTo7i8oMktll3Xl 5XkYtCN06+b0LE1B2HvY0BxAWib1SwaAfMRzH1wo6lDZ2kg2m7hEHC2NgvobPvSH vehGZGLUE4ty6Y2Ifdno =NkI9 -----END PGP SIGNATURE----- --a6Ri6/t33sscKOaw--