Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-16 Thread Corinna Vinschen
On Apr 16 08:32, Ken Brown wrote: > On 4/16/2014 8:28 AM, Ken Brown wrote: > >On 4/16/2014 2:35 AM, Corinna Vinschen wrote: > >>On Apr 16 10:04, Corinna Vinschen wrote: > >>>On Apr 15 14:14, Ken Brown wrote: > I've come across a glitch involving sshd and cygserver. [...] > Now I close the

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-16 Thread Ken Brown
On 4/16/2014 8:28 AM, Ken Brown wrote: On 4/16/2014 2:35 AM, Corinna Vinschen wrote: Hi Ken, On Apr 16 10:04, Corinna Vinschen wrote: On Apr 15 14:14, Ken Brown wrote: I've come across a glitch involving sshd and cygserver. I normally have both running, but I've discovered that I have to sta

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-16 Thread Ken Brown
On 4/16/2014 2:35 AM, Corinna Vinschen wrote: Hi Ken, On Apr 16 10:04, Corinna Vinschen wrote: On Apr 15 14:14, Ken Brown wrote: I've come across a glitch involving sshd and cygserver. I normally have both running, but I've discovered that I have to start sshd before I start cygserver, or els

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-16 Thread Corinna Vinschen
Hi Ken, On Apr 16 10:04, Corinna Vinschen wrote: > On Apr 15 14:14, Ken Brown wrote: > > I've come across a glitch involving sshd and cygserver. I normally > > have both running, but I've discovered that I have to start sshd > > before I start cygserver, or else I have problems (can't ssh from a

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-16 Thread Corinna Vinschen
On Apr 15 14:14, Ken Brown wrote: > I've come across a glitch involving sshd and cygserver. I normally > have both running, but I've discovered that I have to start sshd > before I start cygserver, or else I have problems (can't ssh from a > non-administrator account to an administrator account).

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-15 Thread Ken Brown
I've come across a glitch involving sshd and cygserver. I normally have both running, but I've discovered that I have to start sshd before I start cygserver, or else I have problems (can't ssh from a non-administrator account to an administrator account). Here are the details on 64 bit Cygwin

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-15 Thread Corinna Vinschen
On Apr 15 03:00, Andrey Repin wrote: > Greetings, Corinna Vinschen! > > > For clarity: There is no "looking for users first at"... capability at > > all. The user is searched via the functions LookupAccountSid and > > LookupAccountName and they decide by themselves in what order to look. > > Go

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Andrey Repin
Greetings, Corinna Vinschen! > For clarity: There is no "looking for users first at"... capability at > all. The user is searched via the functions LookupAccountSid and > LookupAccountName and they decide by themselves in what order to look. Got it. >> Environment variable to specify/override

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Corinna Vinschen
On Apr 14 13:08, Andrey Repin wrote: > Greetings, Corinna Vinschen! > > We don't have the glibc/NIS problem, of course. I'm not going to > > comment on this, I'd really like to see what you guys think. Obvious > > choices are: > > > - Keep "db_separator", + as default > > - Keep "db_separator",

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Andrey Repin
Greetings, Corinna Vinschen! >> > * db_separator in /etc/nsswitch.conf >> >> > Is it really such a good idea to have a configurable separator >> > char in user and group names? Is it important that it is >> > configurable? Is '+' a good choice for the default separator? >> > Wouldn't th

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Andrey Repin
Greetings, Corinna Vinschen! >> > What bugs me a bit is what this means for applications which expect >> > fixed usernames. Sshd, for instance, expects the fixed username >> > "sshd" right now when using privilege separation. I discussed this >> > with the OpenSSH devs, and they understand the p

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Corinna Vinschen
On Apr 13 14:18, Andrey Repin wrote: > Greetings, Corinna Vinschen! > > * cygserver now provides system-wide passwd/group entry caching. > > > All processes started *after* cygserver will try to fetch passwd > > and group entries from cygserver. While this is probably a bit > > slow at the

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Corinna Vinschen
On Apr 13 14:38, Andrey Repin wrote: > Greetings, Corinna Vinschen! > > >> >The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. > >> >It contains the latest crazy ideas in terms of the user and group > >> >account creation without requiring the /etc/passwd and /etc/group > >> >file

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Corinna Vinschen
On Apr 13 14:27, Andrey Repin wrote: > But keeping in mind the rules on tilde expansion, > > > ~a+b/file > > > can undergo tilde expansion for username 'a+b', but > > > ~a\\b/file > > > cannot do so, because the \ is necessarily always quoted. There is no > > way to get tilde expansion to wo

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-14 Thread Corinna Vinschen
On Apr 13 14:34, Andrey Repin wrote: > Greetings, Corinna Vinschen! > > > What bugs me a bit is what this means for applications which expect > > fixed usernames. Sshd, for instance, expects the fixed username > > "sshd" right now when using privilege separation. I discussed this > > with the Op

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-13 Thread Andrey Repin
Greetings, Corinna Vinschen! >> >The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. >> >It contains the latest crazy ideas in terms of the user and group >> >account creation without requiring the /etc/passwd and /etc/group >> >files. >> > >> >Not a lot has changed since we made a

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-13 Thread Andrey Repin
Greetings, Corinna Vinschen! > What bugs me a bit is what this means for applications which expect > fixed usernames. Sshd, for instance, expects the fixed username > "sshd" right now when using privilege separation. I discussed this > with the OpenSSH devs, and they understand the problem, but

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-13 Thread Andrey Repin
Greetings, Eric Blake! >> A local cygwin user told me that the users in their company would >> probably be confused by the '+ or, FWIW, any other non-backslash char, >> because they were drilled to see and use usernames always in domain\name >> form, or even in domain\\user form when logging in to

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-13 Thread Andrey Repin
Greetings, Corinna Vinschen! > The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. > It contains the latest crazy ideas in terms of the user and group > account creation without requiring the /etc/passwd and /etc/group > files. > Not a lot has changed since we made a break to test

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-12 Thread Corinna Vinschen
On Apr 12 10:20, Ken Brown wrote: > On 4/12/2014 7:13 AM, Corinna Vinschen wrote: > >On Apr 11 19:36, Ken Brown wrote: > >>On 4/10/2014 10:53 AM, Corinna Vinschen wrote: > >>>Hi folks, > >>> > >>> > >>>The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. > >>>It contains the latest c

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-12 Thread Ken Brown
On 4/12/2014 7:13 AM, Corinna Vinschen wrote: On Apr 11 19:36, Ken Brown wrote: On 4/10/2014 10:53 AM, Corinna Vinschen wrote: Hi folks, The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. It contains the latest crazy ideas in terms of the user and group account creation witho

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-12 Thread Corinna Vinschen
On Apr 11 19:36, Ken Brown wrote: > On 4/10/2014 10:53 AM, Corinna Vinschen wrote: > >Hi folks, > > > > > >The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. > >It contains the latest crazy ideas in terms of the user and group > >account creation without requiring the /etc/passwd a

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-11 Thread Duncan Roe
On Fri, Apr 11, 2014 at 02:39:34PM +0200, Corinna Vinschen wrote: > On Apr 11 16:20, Duncan Roe wrote: > > On Thu, Apr 10, 2014 at 09:47:26PM -0600, Warren Young wrote: > > > On 4/10/2014 20:16, Duncan Roe wrote: > > > >Yes, I'm one of those users. I need my login name to match the Linux > > > >sy

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-11 Thread Corinna Vinschen
On Apr 10 14:24, Eric Blake wrote: > On 04/10/2014 01:46 PM, Achim Gratz wrote: > > Corinna Vinschen writes: > >> * cygserver now provides system-wide passwd/group entry caching. > >> > >> All processes started *after* cygserver will try to fetch passwd > >> and group entries from cygserver. W

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-11 Thread Corinna Vinschen
On Apr 10 21:46, Achim Gratz wrote: > Corinna Vinschen writes: > > * cygserver now provides system-wide passwd/group entry caching. > > > > All processes started *after* cygserver will try to fetch passwd > > and group entries from cygserver. While this is probably a bit > > slow at the star

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-11 Thread Corinna Vinschen
On Apr 11 16:20, Duncan Roe wrote: > On Thu, Apr 10, 2014 at 09:47:26PM -0600, Warren Young wrote: > > On 4/10/2014 20:16, Duncan Roe wrote: > > >Yes, I'm one of those users. I need my login name to match the Linux > > >systems so > > >I can use rsh and not be challenged for a password when the cy

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-11 Thread Corinna Vinschen
On Apr 10 16:21, Warren Young wrote: > On 4/10/2014 14:20, Eric Blake wrote: > >is BOUND to go wrong. The expression > > > >~a/b/file > > > >is NOT requesting 'file' within user 'a/b's home, but 'b/file' within > >user 'a's home. > > Excellent point. > > Doesn't that also argue against backslash

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-11 Thread Corinna Vinschen
On Apr 10 14:20, Eric Blake wrote: > On 04/10/2014 01:04 PM, Corinna Vinschen wrote: > > A local cygwin user told me that the users in their company would > > probably be confused by the '+ or, FWIW, any other non-backslash char, > > because they were drilled to see and use usernames always in doma

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Duncan Roe
On Thu, Apr 10, 2014 at 09:47:26PM -0600, Warren Young wrote: > On 4/10/2014 20:16, Duncan Roe wrote: > >Yes, I'm one of those users. I need my login name to match the Linux systems > >so > >I can use rsh and not be challenged for a password when the cygwin host name > >is > >in ~/.rhosts > > If

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Warren Young
On 4/10/2014 20:16, Duncan Roe wrote: Yes, I'm one of those users. I need my login name to match the Linux systems so I can use rsh and not be challenged for a password when the cygwin host name is in ~/.rhosts If you switch to SSH, you can solve this by putting this into your ~/.ssh/config fi

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Duncan Roe
On Thu, Apr 10, 2014 at 09:11:20PM +0200, Corinna Vinschen wrote: > On Apr 10 12:42, Warren Young wrote: > > On 4/10/2014 08:53, Corinna Vinschen wrote: > > >* Support for Cygwin user names different from the Windows username. > > > > > > This is a really fat problem. > > > > Who needs this funct

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Warren Young
On 4/10/2014 14:20, Eric Blake wrote: is BOUND to go wrong. The expression ~a/b/file is NOT requesting 'file' within user 'a/b's home, but 'b/file' within user 'a's home. Excellent point. Doesn't that also argue against backslash, due to the DLL's attempts to automatically cope with DOS pa

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Eric Blake
On 04/10/2014 01:04 PM, Corinna Vinschen wrote: > > A local cygwin user told me that the users in their company would > probably be confused by the '+ or, FWIW, any other non-backslash char, > because they were drilled to see and use usernames always in domain\name > form, or even in domain\\user

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Eric Blake
On 04/10/2014 01:46 PM, Achim Gratz wrote: > Corinna Vinschen writes: >> * cygserver now provides system-wide passwd/group entry caching. >> >> All processes started *after* cygserver will try to fetch passwd >> and group entries from cygserver. While this is probably a bit >> slow at the st

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Larry Hall (Cygwin)
On 4/10/2014 3:04 PM, Corinna Vinschen wrote: I like slashes a lot more for obvious reasons. But maybe, and that wouldn't be too hard to implement, we could accept account names with slash and with backslash, just as we do with pathnames. Output of usernames would be with slashes, of course. W

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Achim Gratz
Corinna Vinschen writes: > * cygserver now provides system-wide passwd/group entry caching. > > All processes started *after* cygserver will try to fetch passwd > and group entries from cygserver. While this is probably a bit > slow at the start, the longer cygserver runs, the more informati

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Corinna Vinschen
On Apr 10 21:11, Corinna Vinschen wrote: > On Apr 10 12:42, Warren Young wrote: > > On 4/10/2014 08:53, Corinna Vinschen wrote: > > >* Support for Cygwin user names different from the Windows username. > > > > > > This is a really fat problem. > > > > Who needs this functionality? > > I don't r

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Corinna Vinschen
On Apr 10 12:42, Warren Young wrote: > On 4/10/2014 08:53, Corinna Vinschen wrote: > >* Support for Cygwin user names different from the Windows username. > > > > This is a really fat problem. > > Who needs this functionality? I don't remember, but some user on this list wrote in February about

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Corinna Vinschen
On Apr 10 12:39, Warren Young wrote: > On 4/10/2014 09:28, Corinna Vinschen wrote: > > > >The only reason I dislike backslash a bit is, that the backslash is > >the escape char in the shell, so you would have remember every time > >you type in such an account name to escape the account name, > >DOM

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Warren Young
On 4/10/2014 08:53, Corinna Vinschen wrote: * Support for Cygwin user names different from the Windows username. This is a really fat problem. Who needs this functionality? Is it some legacy of passwd(5) compatibility, such as the wish to have colons in Windows login names? Does the mov

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Warren Young
On 4/10/2014 09:28, Corinna Vinschen wrote: The only reason I dislike backslash a bit is, that the backslash is the escape char in the shell, so you would have remember every time you type in such an account name to escape the account name, DOMAIN\\username or "DOMAIN\username" Is this DOMAIN\

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Corinna Vinschen
On Apr 10 13:21, Ken Brown wrote: > On 4/10/2014 10:53 AM, Corinna Vinschen wrote: > >Hi folks, > > > > > >The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. > >It contains the latest crazy ideas in terms of the user and group > >account creation without requiring the /etc/passwd a

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Ken Brown
On 4/10/2014 10:53 AM, Corinna Vinschen wrote: Hi folks, The latest snapshot, 2014-04-10, is a snapshot from CVS HEAD again. It contains the latest crazy ideas in terms of the user and group account creation without requiring the /etc/passwd and /etc/group files. Not a lot has changed since we

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Corinna Vinschen
On Apr 10 11:19, Chris J. Breisch wrote: > Corinna Vinschen wrote: > >* cygserver now provides system-wide passwd/group entry caching. > > > > All processes started *after* cygserver will try to fetch passwd > > and group entries from cygserver. While this is probably a bit > > slow at the s

Re: Still testing needed: New passwd/group AD/SAM integration

2014-04-10 Thread Chris J. Breisch
Corinna Vinschen wrote: * cygserver now provides system-wide passwd/group entry caching. All processes started *after* cygserver will try to fetch passwd and group entries from cygserver. While this is probably a bit slow at the start, the longer cygserver runs, the more information