Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Wed, 10 Jul 2002 12:21:24 -0400
From:	Jason Tishler <jason AT tishler DOT net>
Subject:	Re: cron and NT domains
In-reply-to:	<20020710073838.A1650@SmartSC.com>
To:	cygwin AT cygwin DOT com
Mail-followup-to:	cygwin AT cygwin DOT com
Message-id:	<20020710162124.GA1592@tishler.net>
MIME-version:	1.0
User-Agent:	Mutt/1.4i
References:	<20020710120624 DOT GA1032 AT tishler DOT net>
	<20020710073838 DOT A1650 AT SmartSC DOT com>

Dave,

On Wed, Jul 10, 2002 at 07:38:38AM -0700, David MacMahon wrote:
> So your jt user has crontabs running?

Yes.

> Doesn't this seem like a security hole?  I mean, couldn't you just
> concoct an /etc/passwd entry for any domain user and then impersonate
> them via their crontab?

I don't know -- I haven't tried.

> Did you give any extra NT permissions to anyone like PALO-ALTO\JATIS
> or SYSTEM, for example?

No.

> Maybe we have different types/configurations of NT domain controllers?

Sounds like it, see below...

> The only thing that's a little bit weird about my setup is that my PC
> belongs to one domain, but I log into (login to?) another.

I think the above may be your problem.  Which entry do you have in your
/etc/passwd file?  The one from the PC's domain or the one that you log
into?  If the former, then try the latter.

Jason

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -