Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Wed, 10 Jul 2002 12:21:24 -0400
From: Jason Tishler <jason AT tishler DOT net>
Subject: Re: cron and NT domains
In-reply-to: <20020710073838.A1650@SmartSC.com>
To: cygwin AT cygwin DOT com
Mail-followup-to: cygwin AT cygwin DOT com
Message-id: <20020710162124.GA1592@tishler.net>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
User-Agent: Mutt/1.4i
References: <20020710120624 DOT GA1032 AT tishler DOT net>
 <20020710073838 DOT A1650 AT SmartSC DOT com>

Dave,

On Wed, Jul 10, 2002 at 07:38:38AM -0700, David MacMahon wrote:
> So your jt user has crontabs running?

Yes.

> Doesn't this seem like a security hole?  I mean, couldn't you just
> concoct an /etc/passwd entry for any domain user and then impersonate
> them via their crontab?

I don't know -- I haven't tried.

> Did you give any extra NT permissions to anyone like PALO-ALTO\JATIS
> or SYSTEM, for example?

No.

> Maybe we have different types/configurations of NT domain controllers?

Sounds like it, see below...

> The only thing that's a little bit weird about my setup is that my PC
> belongs to one domain, but I log into (login to?) another.

I think the above may be your problem.  Which entry do you have in your
/etc/passwd file?  The one from the PC's domain or the one that you log
into?  If the former, then try the latter.

Jason

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/