RE: 'mkgroup -d' does not return groups local to the PDC

RE: 'mkgroup -d' does not return groups local to the PDC

[Matt.Wilkie]

Hi John,

Thanks for the swift response.

> > Issuing "mkgroup --domain DEPT" shows me all of the Global groups
> > from Supervisor. However it doesn't show me the groups which are
> > Local to the machine Supervisor.
> 
> Why would you expect it to?  

Because there are two methods that I know of to do this using NT 
tools. :) One is the User Manager and the other is a commandline 
utility which comes with the NT Resource Kit: AddUsers.exe.

> p.s. of course, I could be wrong ;~)

I hope so :P


-matt

-----------------------------------------------------------------
Matt Wilkie * Yukon Renewable Resources GIS
http://renres.gov.yk.ca/pubs/rrgis/
-----------------------------------------------------------------

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: 'mkgroup -d' does not return groups local to the PDC

[Peter Buckley]

I don't think you should expect mkgroup -d to do anything other than 
return groups from the domain. Local groups are not part of the domain, 
so it makes sense that they would not be picked up by mkgroup -d. As an 
anaolog, no one expects mkgroup -l to get the local groups from the 
machine AND all the groups in the domains that the machine is part of.

If you want local groups, you should use mkgroup -l. You might be able 
to use mkgroup -l remotely (via rsh or rlogin etc) but you shouldn't 
even expect it to do that (the local groups on Supervisor are NOT local 
to Foreman). It isn't automated, but you could just cat the entries from 
Supervisor's /etc/group (done with mkgroup -l) to Foreman's /etc/group.

Just because NT confuses local and domain groups, doesn't mean that 
cygwin should try to make the same mistake, ergo you shouldn't expect 
cygwin to act like NT, it should act like UNIX.

I think John is correct here, mkgroup -d should ONLY give groups from 
the domain, if it gets local groups too that would just be contrary to 
the intended behavior.

HTH,
Peter

Matt.Wilkie wrote:

> Hi John,
> 
> Thanks for the swift response.
> 
> 
>>>Issuing "mkgroup --domain DEPT" shows me all of the Global groups
>>>from Supervisor. However it doesn't show me the groups which are
>>>Local to the machine Supervisor.
>>>
>>Why would you expect it to?  
>>
> 
> Because there are two methods that I know of to do this using NT 
> tools. :) One is the User Manager and the other is a commandline 
> utility which comes with the NT Resource Kit: AddUsers.exe.
> 
> 
>>p.s. of course, I could be wrong ;~)
>>
> 
> I hope so :P
> 
> 
> -matt
> 
> -----------------------------------------------------------------
> Matt Wilkie * Yukon Renewable Resources GIS
> http://renres.gov.yk.ca/pubs/rrgis/
> -----------------------------------------------------------------
> 
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
> 
> 


-- 
-- 
Your mouse has moved.
Windows NT must be restarted for the change to take effect.
Reboot now?  [OK]

--


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: 'mkgroup -d' does not return groups local to the PDC

[Peter Buckley]

I am not that familiar with how mkgroup -l gets the local groups, but 
check the source. Maybe there is a file on the machine that mkgroup 
looks at, and you could "trick" it to look at the file you get from 
Supervisor. Of course, I am conjecturing, but it would make sense that 
the groups are stored in a file.

But without installing cygwin on the PDC, it doesn't sound good. Are you 
sure your fascist IT people won't let you install cygwin (doesn't 
require a reboot, won't crash the system) run mkgroup -l >> 
/cygdrive/a/group and take the floppy disk and then uninstall cygwin? :-)

HTH,
Peter

Matt.Wilkie wrote:

>>If you want local groups, you should use mkgroup -l. You might be 
>>able to use mkgroup -l remotely (via rsh or rlogin etc) but you 
>>shouldn't even expect it to do that (the local groups on Supervisor 
>>are NOT local to Foreman). It isn't automated, but you could just 
>>cat the entries from Supervisor's /etc/group (done with mkgroup -l) 
>>to Foreman's /etc/group.
>>
> 
> Unfortunately not an option since I don't control the PDC and am
> not allowed to install Cygwin on it. The only reason I have the 
> Domain Admin password is so I can add/remove users from certain 
> groups.
> 
> 
>>Just because NT confuses local and domain groups, doesn't mean that 
>>cygwin should try to make the same mistake, ergo you shouldn't expect 
>>cygwin to act like NT, it should act like UNIX.
>>
> 
> I can see the point, and agree.
> 
> 
>>I think John is correct here, mkgroup -d should ONLY give groups from 
>>the domain, if it gets local groups too that would just be 
>>contrary to the intended behavior.
>>
> 
> What about 'mkgroup -d DOMAIN -l' extracting the local groups from 
> the domain server?
> 
> I'm not trying to be difficult, I'm just trying to avoid having to 
> have to create seperate user accounts just for my machine.
> 
> ttfn,
> 
> -matt
> 
> -----------------------------------------------------------------
> Matt Wilkie * Yukon Renewable Resources GIS
> http://renres.gov.yk.ca/pubs/rrgis/
> -----------------------------------------------------------------
> 
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
> 
> 



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: 'mkgroup -d' does not return groups local to the PDC

[Matt.Wilkie]

> If you want local groups, you should use mkgroup -l. You might be 
> able to use mkgroup -l remotely (via rsh or rlogin etc) but you 
> shouldn't even expect it to do that (the local groups on Supervisor 
> are NOT local to Foreman). It isn't automated, but you could just 
> cat the entries from Supervisor's /etc/group (done with mkgroup -l) 
> to Foreman's /etc/group.

Unfortunately not an option since I don't control the PDC and am
not allowed to install Cygwin on it. The only reason I have the 
Domain Admin password is so I can add/remove users from certain 
groups.

> Just because NT confuses local and domain groups, doesn't mean that 
> cygwin should try to make the same mistake, ergo you shouldn't expect 
> cygwin to act like NT, it should act like UNIX.

I can see the point, and agree.

> I think John is correct here, mkgroup -d should ONLY give groups from 
> the domain, if it gets local groups too that would just be 
> contrary to the intended behavior.

What about 'mkgroup -d DOMAIN -l' extracting the local groups from 
the domain server?

I'm not trying to be difficult, I'm just trying to avoid having to 
have to create seperate user accounts just for my machine.

ttfn,

-matt

-----------------------------------------------------------------
Matt Wilkie * Yukon Renewable Resources GIS
http://renres.gov.yk.ca/pubs/rrgis/
-----------------------------------------------------------------

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: 'mkgroup -d' does not return groups local to the PDC

[John Peacock]

"Matt.Wilkie" wrote:
> 
> Hi,
> 
> I have an NT4 Server called FOREMAN which is a member of the
> domain DEPT.
> Foreman is not a domain controller.
> The primary domain controller for Dept is SUPERVISOR.
> I am logged in to Foreman as the Domain Administrator for Dept.

This is the key here: you are logged in, as a domain user, to a member machine.

> 
> Issuing "mkgroup --domain DEPT" shows me all of the Global groups
> from Supervisor. However it doesn't show me the groups which are
> Local to the machine Supervisor.

Why would you expect it to?  The groups that are local to Supervisor are 
(oddly enough) local to Supervisor.  Only global groups are available to 
member machines (in addition to their own local groups).

> 
> From cygwin, how can get I get a list of the same groups (and
> users) I can see when using the NT GUI "User Manager for Domains"?

I don't think it is possible.  I belive the GUI is actually logging in to the
PDC's Registry and can hence see the local groups on the PDC.

John

p.s. of course, I could be wrong ;~)

-- 
John Peacock
Director of Information Research and Technology
Rowman & Littlefield Publishing Group
4720 Boston Way
Lanham, MD 20706
301-459-3366 x.5010
fax 301-429-5747

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

'mkgroup -d' does not return groups local to the PDC

[Matt.Wilkie]

Hi,

I have an NT4 Server called FOREMAN which is a member of the 
domain DEPT.
Foreman is not a domain controller.
The primary domain controller for Dept is SUPERVISOR.
I am logged in to Foreman as the Domain Administrator for Dept.

Issuing "mkgroup --domain DEPT" shows me all of the Global groups 
from Supervisor. However it doesn't show me the groups which are 
Local to the machine Supervisor.

From cygwin, how can get I get a list of the same groups (and
users) I can see when using the NT GUI "User Manager for Domains"?


thanks in advance,


-matt

$ uname -a
CYGWIN_NT-4.0 KILLERBEE 1.3.3(0.46/3/2) 2001-09-12 23:54 i686 unknown


-----------------------------------------------------------------
Matt Wilkie * Yukon Renewable Resources GIS
http://renres.gov.yk.ca/pubs/rrgis/
-----------------------------------------------------------------

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/