From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 130187 invoked by alias); 24 Mar 2015 20:34:21 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 130168 invoked by uid 89); 24 Mar 2015 20:34:20 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2 X-HELO: calimero.vinschen.de Received: from aquarius.hirmke.de (HELO calimero.vinschen.de) (217.91.18.234) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 24 Mar 2015 20:34:19 +0000 Received: by calimero.vinschen.de (Postfix, from userid 500) id 1D00DA80856; Tue, 24 Mar 2015 21:34:17 +0100 (CET) Date: Tue, 24 Mar 2015 20:42:00 -0000 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: update trouble 1.7.35 Message-ID: <20150324203417.GB32703@calimero.vinschen.de> Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com References: <33EC3398272FBE47B64EE3B3E98F69A76C40CC25@DE011520.schaeffler.com> <20150323193842.GM3017@calimero.vinschen.de> <20150324140333.GA17861@calimero.vinschen.de> <33EC3398272FBE47B64EE3B3E98F69A76C414FBD@de011521.schaeffler.com> <20150324155024.GA21272@calimero.vinschen.de> <33EC3398272FBE47B64EE3B3E98F69A76C41502F@de011521.schaeffler.com> <20150324164850.GY3017@calimero.vinschen.de> <33EC3398272FBE47B64EE3B3E98F69A76C415077@de011521.schaeffler.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="PmA2V3Z32TCmWXqI" Content-Disposition: inline In-Reply-To: <33EC3398272FBE47B64EE3B3E98F69A76C415077@de011521.schaeffler.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-SW-Source: 2015-03/txt/msg00438.txt.bz2 --PmA2V3Z32TCmWXqI Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-length: 2679 On Mar 24 17:56, Lemke, Michael ST/HZA-ZSW wrote: > On Tuesday, March 24, 2015 5:49 PM Corinna Vinschen wrote: > >> Note that "they" did a domain switch here at some point. My installat= ion=20 > >> is really old and the passwd certainly is from before that domain chan= ge. > > > >That explains it. Please recreate your /etc/passwd and /etc/group > >files with mkpasswd and mkgroup, or, even better, just discard them. > > >=20 > I just created new ones. I like passwd/group much better than AD, sorry.= =20=20 > Just like real unix before the invention of yellow pages and nis. Yeah, but real unix these days is NIS+ or FreeIPA, or... even AD :) > This=20 > way I can easily give different shells to different users (not that it is > really important at the moment). You can do that in AD as well. Or, as long as all users want the same shell, you can simply use `db_shell: /bin/tcsh'. > In nsswitch.conf I put=20 > passwd: files db > group: files db That's the default setting. You can simply remove nsswitch.conf in this case, which should result in a slightly faster startup because Cygwin doesn't have to scan YA file. > and ls listings seem to look fine. Login is also possible again > with correct tcsh shell. I'm glad to read that. > >The problem is the domain switch which also changed the SID of your user > >account. The old SID, which you also have in your passwd, is not > >returned by the server anymore. But it's stored in your SID history in > >AD and when asking for it you get an answer. >=20 > So, to sort of sum this up: the new cygwin doesn't deal well with=20 > contradicting entries in passwd and AD.=20 Basically, yes. More to the point, your user token and your passwd file contradict each other. The user and owner entry in your user token is your new SID. The old SID only shows up in the token's group list, afaik. > >Downside: Cygwin can't handle the old SIDs from your SID history quite > >correctly.=20=20 >=20 > Actually, with "files db" it seems to handle it quite well. I get the sa= me > username for both kind of files. There are still lots of files in my > home I created before the domain switch. Ok, I just can't guarantee that it always works. The SID history stuff is a weird solution for a weird problem. > >Trying to support them as well would slow down the user and > >group lookups a lot. If you can live with what we just found out and > >the solution I suggested, I'd be rather happy :} > > >=20 > Yes, I am happy now. Then I am, too :) Thanks, Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --PmA2V3Z32TCmWXqI Content-Type: application/pgp-signature Content-length: 819 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJVEcpJAAoJEPU2Bp2uRE+gkiAP+QEVFtTcwdVgRA8Jn0DAxXC2 gywpk4ytE9B/PS1pMv8KlFebTXOd1JGPfgRiMRehR5lMGVDM/mxV2AuY8uv90x9n Yuvp2cbVcLl+QUM1aUPWYs7ot42OrsFEpB6cuQi6YxkQoFJjbr8LP0RXLLc4HaVF rv+2Ej1qIJExT6fxW9fV/Gya0+HCSV+yKyYz2N4s9NOPl7LSizDMkGO2ZCsoaFRt lvs5UB/MC6kOwCDNHVM8cobI6zFHIenM73Vd9JRDg6bClZ7nubCQyOvVfJYMGqOp zA1Cx4MDUoWBqUoFZzH7xv52k8RFvnnkYz6cLXuLXKzfI2kAVMZJpQf+jK/KNcU3 7xUJfeDEODAGeHuhCven0J1XvsWpqosWTfOlKHpVP7Tvp1hjpS0CWqmbfyJmISWW 2By4iuFezh5xbp5ZcbNmMGvhDCilSo3vRsr7iEkaYat0Fjl/AapNL/56oQkP4iRS zLpYyHzSDBZmpXuakVoW/5MvrV/7KWss6udiNVoDamJVeVZYAYJLkgPpwPnhbgR1 TPghSf0iSKTvXAcYibkyh6HeU9PN+n7+ZVa148OJj2IuHPJjis2b1JlfLnzCA+kl yokuvqIF9ysV7mgvKhOIoMBbYb24eiHq+E32WdLZBsGFlFMz0JhCr4d4J0GzEU7G 2csHy8sTJ2IJxbvVUGAh =km7v -----END PGP SIGNATURE----- --PmA2V3Z32TCmWXqI--