Re: RFC2307 accounts

[Corinna Vinschen <corinna-cygwin@cygwin.com>]

[-- Attachment #1: Type: text/plain, Size: 1546 bytes --]

On Mar  8 17:30, Marc Rechte wrote:
> Hello,
> 
>  Trying to set RFC2307 accounts, using unix schema in /etc/nsswitch.conf.
> 
> UID/GID do not reflect what is stored in AD (using POSIX attributes), they
> still follow the 0x100000 + RID scheme
> (https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping)
> 
> Any idea ?
> 
> Thanks
> 
> In cygwin bash:
> 
> $ uname -a
> CYGWIN_NT-6.1 TOURNESOL 2.4.1(0.293/5/3) 2016-01-24 11:26 x86_64 Cygwin
> 
> $ getent passwd mrechte
> mrechte:*:1050005:1049089:U-STUDELEC-SA\mrechte,S-1-5-21-497920593-2320919703-1315762108-1429:/home/mrechte:/bin/bash
> 
> $ cat /etc/nsswitch.conf
> passwd:   files db
> group:    files db
> db_enum:  cache builtin
> db_home: unix
> db_shell: unix
> db_gecos: unix
> 
> On a Linux box attached to the domain, using RFC2307
> $ getent passwd mrechte
> mrechte:*:12007:11000::/home/mrechte:/bin/bash
> 
> This is the correct values ie. 12007/11000

The result is correct, too.  The uid/gid mapping is the mapping from
Windows SID to Cygwin uid/gid, so the uid/gid values reflect the normal
values as computed from the SIDs.

The RFC2307 uid/gid mapping has only one purpose:  Used on NFS or Samba
shares, Cygwin knows that uid 12007 is you.  So during file handling
Cygwin internally maps uid 12007 on the remote FS to the Cygwin uid
1050005 and vice versa.


HTH,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]