public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Linda Walsh <cygwin@tlinx.org>
To: cygwin@cygwin.com
Subject: Re: Unknown+User Unix_Group+505 on smb shares in a domian
Date: Mon, 03 Oct 2016 06:33:00 -0000	[thread overview]
Message-ID: <57F1D760.9030904@tlinx.org> (raw)
In-Reply-To: <20161002234944.vywfzlwv3lwiaqof@Chronos>

Wayne Porter wrote:
> This is how it is currently set up. I can log in to the server via ssh
> or use the current method, which is to map the network share using my
> account credentials that they have set up for me. This works just fine
> in Windows and for the most part in Cygwin. I can read/write from the
> files but vim opens all files in read-only mode and I have to save using
> :w!
----
I hate it when that happens!  ;-)

So the files you are trying to access are from your own local login on those
machines?

Is there a reason why the login you have on those machines is a machine-local
login?

I.e. I believe you said earlier, that the machines are joined to the domain.
Say your domainname="domain", and you have a domain login "wporter".  

Can you login (or can anyone login) using domain credentials to those linux
machines?  OR can you arrange to be able to, then copy your files on those
machines to your domain account.  

If the remote files are owned by you and you are logged into your domain
account on your usual cygwin machine, then the permissions should match.

There's alot of permissions/privileges on Windows that don't map to anything
on Linux or cygwin.  So while cygwin can compare the access rights in the
things it knows about, it can't begin to know about various windows permissions
and controls that might allow you to override the normal file-access controls.

If you can't login to the linux machines on your domain account, could
you get root access long enough to chown the files over to your domain
account?

If you can't login to the linux machines w/your dom account, authenticating
your login w/the domain server might not be enabled.  Might also have
to create home directory for your domain account manually.

If they need to setup login checks for domain logins on those
machines, they need to add some windbind rules to the 
/etc/pam.d/common-<files>...  Just to give you an idea (they
should figure out the order by looking at relevant docs):

> grep winbind /etc/pam.d/common*
/etc/pam.d/common-account:account sufficient pam_winbind.so
/etc/pam.d/common-auth:auth     sufficient      pam_winbind.so
/etc/pam.d/common-password:password sufficient  pam_winbind.so
/etc/pam.d/common-session:session sufficient pam_winbind.so


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

  reply	other threads:[~2016-10-03  3:58 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-09-27 23:59 Wayne Porter
2016-09-28 17:55 ` Linda Walsh
2016-09-28 19:52   ` Wayne Porter
2016-09-28 21:44     ` Andrey Repin
2016-09-28 22:59       ` Wayne Porter
2016-09-29 20:35         ` Andrey Repin
2016-09-29  8:38     ` Linda Walsh
2016-09-29 19:35       ` Wayne Porter
2016-09-30  5:05         ` Andrey Repin
2016-10-01 22:38           ` Wayne Porter
2016-10-02 23:49         ` Linda Walsh
2016-10-03  1:28           ` Wayne Porter
2016-10-02 23:44     ` Linda Walsh
2016-10-02 23:58       ` Wayne Porter
2016-10-03  6:33         ` Linda Walsh [this message]
2016-09-29 15:22 Roland Schwingel
2016-10-19 11:45 ` Corinna Vinschen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=57F1D760.9030904@tlinx.org \
    --to=cygwin@tlinx.org \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).