From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 82191 invoked by alias); 27 Aug 2018 03:32:33 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 82175 invoked by uid 89); 27 Aug 2018 03:32:31 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-6.9 required=5.0 tests=BAYES_00,GIT_PATCH_2 autolearn=ham version=3.3.2 spammy=puts, H*r:192.168.3, numerically, sid X-HELO: Ishtar.sc.tlinx.org Received: from ishtar.tlinx.org (HELO Ishtar.sc.tlinx.org) (173.164.175.65) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 27 Aug 2018 03:32:30 +0000 Received: from [192.168.3.12] (Athenae [192.168.3.12]) by Ishtar.sc.tlinx.org (8.14.7/8.14.4/SuSE Linux 0.8) with ESMTP id w7R3WQWs092990 for ; Sun, 26 Aug 2018 20:32:28 -0700 Message-ID: <5B8370CA.5080209@tlinx.org> Date: Mon, 27 Aug 2018 10:50:00 -0000 From: L A Walsh User-Agent: Thunderbird MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: incompat in cygwin choice of using '+' as domain and user separator. References: <5B7DE56E.6060109@tlinx.org> <20180823081135.GN3348@calimero.vinschen.de> In-Reply-To: <20180823081135.GN3348@calimero.vinschen.de> Content-Type: multipart/mixed; boundary="------------030504060300060206000608" X-IsSubscribed: yes X-SW-Source: 2018-08/txt/msg00338.txt.bz2 --------------030504060300060206000608 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-length: 2921 On 8/23/2018 1:11 AM, Corinna Vinschen wrote: ... > No, that's a wrong assumption. Think about it. The ACL given to > acl_to_text is the binary form, so it doesn't contain user or group > names, only uids and gids. The usernames are only generated in the > output. --- Rats. Of course, you're right. Then I nominate the problem being that it can't convert from domain "Unknown"-user + "Unknown"-group to something it can store in tar. I'll try to elaborate. lsacl is an output massager that mainly compacts output of getfacl into a 1 line form as used by the linux chacl format for environments where chacl was missing (like cygwin and some linux machines). It's a fairly trivial script (attached), feel free to do whatever w/it. As far as duplication, I have /etc/passwd+/etc/group files that mirror my accounts on the linux-based PDC (samba 3.x). so when lsacl puts out: > lsacl miner.js [u::rwx,g::rwx,o:r-x,u:Unknown+User:rwx,g:Unknown+Group:rwx,g:Administrators:rwx,g:Bliss\Domain Admins:rwx,m:rwx/] miner.js then getfacl puts out: > getfacl miner.js # file: miner.js # owner: Bliss\law # group: Bliss\Domain Admins user::rwx group::rwx other:r-x user:Unknown+User:rwx group:Unknown+Group:rwx group:Administrators:rwx group:Bliss\Domain Admins:rwx mask:rwx or numerically: > getfacl -n miner.js # file: miner.js # owner: 5013 # group: 512 user::rwx group::rwx other:r-x user:4294967295:rwx group:4294967295:rwx group:544:rwx group:512:rwx mask:rwx In this case, that user+group appear to correspond to non-existent users. (S-1-5-21-oldsystem-ID-1001 + -1005). The domain/system part appears to be from some previous value for the machine's "sid"? Not sure how to deliberately reproduce that, but maybe you have a tool to create an invalid acl entry for a user like: Unknown+User:*:4294967295:4294967295:S-1-5-21-3457732827-2369206082-2151550420-1001 in /etc/passwd. and something similar in /etc/group? I can fairly easily work around it by just deleting the invalid user/group from the GUI. The icacls output on the file with some added line breaks (from D:PAI to S:P was all 1 line). miner.js D:PAI(A;;0x1f01bf;;;S-1-5-21-33-77-33-5013)(A;;0x1201bf;;;DA) (A;;0x1200a9;;;WD)(A;;0x1201ff;;;S-1-5-21-33-77-33-5013) (A;;0x1201ff;;;SY)(A;;0x1201ff;;;BA)(A;;0x1200a9;;;WD) (A;;FA;;;S-1-5-21-33-77-33-5013) (A;;0x1201ff;;;S-1-5-21-3457732827-2369206082-2151550420-1001) (A;;0x1201ff;;;DA) (A;;0x1201ff;;;S-1-5-21-3457732827-2369206082-2151550420-1005)S:P I can work around this for the small number of files that were weird, but it seems cygwin should "more gracefully" handle such things if it can(?). I wonder if rsync has a similar problem...yup: > rsync -aA miner.js ../testbin/ rsync: set_acl: sys_acl_set_file(miner.js, ACL_TYPE_ACCESS): Invalid argument (22) rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1196) [sender=3.1.2] --------------030504060300060206000608 Content-Type: text/plain; name="lsacl" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="lsacl" Content-length: 2205 IyEvYmluL2Jhc2ggCgojIyAkSWQ6IGxzYWNsLHYgMS41IDIwMTUtMDgtMDIg MTA6Mjk6MjUtMDcgbGF3IEV4cCAkCiMgVmVyc2lvbiAyIC0tIHRyeSB0byB3 b3JrIHdpdGggZ2V0ZmFjbCBvbiBjeWd3aW4KIwoKCnNob3B0IC1zIGV4cGFu ZF9hbGlhc2VzCmFsaWFzIGludD1kZWNsYXJlXCAtaQkJc3ViPWZ1bmN0aW9u ICBzdHJpbmc9ZGVjbGFyZQoKZ2ZhY2w9JCh0eXBlIC1QIGdldGZhY2wpCgpp ZiAhIHR5cGUgLWYgY3lnd2luIDI+L2Rldi9udWxsIDsgdGhlbgoJX3VuXz0k KHR5cGUgLVAgdW5hbWUpCglpZgkJW1sgJF91bl8gXV0gOyB0aGVuIF9vc189 JCgkX3VuXyAtbyk7CgllbGlmCVtbIC1lIC9wcm9jL3N5cy9rZXJuZWwgXV07 IHRoZW4gX29zXz1MaW51eDsgCgllbHNlCV9vc189Q3lnd2luOyAKCWZpCglp ZgkJW1sgJF9vc18gPX4gQ3lnd2luIF1dOyB0aGVuIGZ1bmN0aW9uIGN5Z3dp biAoKSB7IHJldHVybiAwOyB9CgllbHNlCWZ1bmN0aW9uIGN5Z3dpbiAoKSB7 IHJldHVybiAxOyB9CglmaQoJdW5zZXQgX3VuXyBfb3NfCglleHBvcnQgLWYg Y3lnd2luCmZpCgppZiBjeWd3aW4gMj4vZGV2L251bGwgO3RoZW4gCglbWyAk Z2ZhY2wgXV0gfHwgeyBwcmludGYgIkZBVEFMOiBDYW5ub3QgZmluZCBnZXRm YWNsIGluIHBhdGhcbiI7IGV4aXQgMTsgfQoJc3ViIGdmYWNsICgpIHsgIiRn ZmFjbCIgIiRAIjsgfQplbHNlCQkJCQkJCQkJCSMjIGxpbnV4IHZlcnNpb24g aGFzIGJyb2tlbiBzZW1hbnRpY3MgcmVxdWlyaW5nICItcCIKCXN1YiBnZmFj bCAoKSB7ICIkZ2ZhY2wiIC1wICIkQCIgOyB9CmZpCgpleHBvcnQgLWYgZ2Zh Y2wKCgpzdWIgZmFjbDJzdHIgewoJc3RyaW5nIGZuPSR7MTo/Ik5lZWQgcGF0 aG5hbWUifQoJc3RyaW5nIHMxPScvXlwjLiokL2Q7IC9eXHMqJC9kOyBzL1xz KiMuKiQvLzsgcy9eKC4pKHNlcnxyb3VwfGFza3x0aGVyKTovXDE6LzsgeS9c bi8sLycKCXN0cmluZyBmYWNsPSQoZ2ZhY2wgLWEgIiRmbiJ8c2VkIC1yICIk czEifHRyICJcbiIgIiwiKQoJZmFjbD0ke2ZhY2wlLH0KCXN0cmluZyBkYWNs PSQoZ2ZhY2wgLWQgIiRmbiJ8c2VkIC1yICJzL15kZWZhdWx0Oi8vOyAkczEi fHRyICJcbiIgIiwiKQoJZGFjbD0ke2RhY2wlLH0KCXByaW50ZiAiWyVzLyVz XVxuIiAiJGZhY2wiICIkZGFjbCIKfQoKCgppbnQgYWNsbGVuPTAgbWF4Zm5s bj0wCiNmb3IgZm4gaW4gIiRAIiA7IGRvIGlmICgobWF4Zm5sbjwkeyNmbn0p KTsgdGhlbiBtYXhmbmxuPSR7I2ZufTsgZmkgOyBkb25lCgpzdWIgYWNsX3N0 ciAoKSB7CglpZiBjeWd3aW4gO3RoZW4gCgkJcGVybT0kKGZhY2wyc3RyICIk Zm4iKQoJZWxzZSAKCQlxZm49JChwcmludGYgIiVxICIgIiRmbiIpCgkJb3V0 PSIkKGNoYWNsIC1sICIkZm4iKSIKCQlwZXJtPSIke291dCMkcWZufSIKCWZp CglwcmludGYgIiVzXG4iICIkcGVybSIKfQoKCmZvciBmbiBpbiAiJEAiOyBk bwoJaW50IG1heD00MAoJcGVybT0kKGFjbF9zdHIgIiRmbiIpCglpbnQgbGVu PSR7I3Blcm19CglpZiAoKGxlbj5fYWNsX2xlbl8pKTsgdGhlbiBhY2xsZW49 bGVuOyBmaQoJaWYgKChhY2xsZW4+bWF4KSk7CQl0aGVuIGFjbGxlbj1tYXg7 IGZpCglwcmludGYgIiUtJHthY2xsZW59cyAlc1xuIiAiJHBlcm0iICIkZm4i CmRvbmUK --------------030504060300060206000608 Content-Type: text/plain; charset=us-ascii Content-length: 219 -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple --------------030504060300060206000608--