From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 10068 invoked by alias); 6 Jul 2019 04:45:50 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 10034 invoked by uid 89); 6 Jul 2019 04:45:49 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-2.9 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.1 spammy=Walsh, walsh, sid X-HELO: smtp-out-so.shaw.ca Received: from smtp-out-so.shaw.ca (HELO smtp-out-so.shaw.ca) (64.59.136.137) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Sat, 06 Jul 2019 04:45:48 +0000 Received: from [192.168.1.114] ([24.64.172.44]) by shaw.ca with ESMTP id jca0hkGNiSrVcjca1hEWHU; Fri, 05 Jul 2019 22:45:46 -0600 Reply-To: Brian.Inglis@SystematicSw.ab.ca Subject: Re: rename a user using setfacl -- possible? how? To: cygwin@cygwin.com References: <5D1FA19D.2020707@tlinx.org> From: Brian Inglis Openpgp: preference=signencrypt Message-ID: <7724989d-16d5-71ef-357f-c668db86de64@SystematicSw.ab.ca> Date: Sat, 06 Jul 2019 04:45:00 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 MIME-Version: 1.0 In-Reply-To: <5D1FA19D.2020707@tlinx.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-IsSubscribed: yes X-SW-Source: 2019-07/txt/msg00040.txt.bz2 On 2019-07-05 13:14, L A Walsh wrote: > Have an acl on a file 'testfile' that appears to include a userid > with a GUID corresponding to some older value for the local system. > I'm gave the old guid a name in /etc/group different from its name, > say calling it 'oldname' (where current name, is say, 'curname'). > I guess I don't know how to modify an entry to either 1-rename it, or > 2 add the new entry. > I tried > setfacl -x group:oldname:rwx -m group:curname:rwx but got: > setfacl: illegal acl entries > will setfacl not work for this task? Utilities like setfacl work with Windows ACLs, users, and groups defined and displayed using net user|localgroup|group. You can't rename Windows users or groups but you can add (or delete) them using the net commands and other equivalent methods, and Windows will assign GUIDs, and Cygwin will show its encoded RID/SID: /usr/share/doc/cygwin-doc/html/cygwin-ug-net/ntsec.html https://cygwin.com/cygwin-ug-net/ntsec.html > How do you add a new user to the access list -- obviously -x removes > a user, but not sure if 'add' is covered by -m or whether or not you 'add' > by specifying the new entry. Use -m to add or changes entries in [D]ACLs. > BTW -- is there an easy way to see the numeric values it is using > for a given name? > Like: > group:Local account and member of Administrators group:rwx > I remember seeing that, but it isn't in my /etc/group file. > Tried getfacl with -n but that doesn't seem to be an option > to display a numeric GUID. If they are Windows users or groups which can be displayed using net commands, then you can use: $ id [USER|GROUP] e.g. $ id Administrator uid=197108(Administrator) gid=197121(None) groups=197121(None) $ id Administrators uid=544(Administrators) gid=544(Administrators) groups=544(Administrators) -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada This email may be disturbing to some readers as it contains too much technical detail. Reader discretion is advised. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple