X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=dvRRWlvOf7Pu9xQLTZqZReEg4dMS+2iYxHAxoegQifaQlN3O/sbXc
	NwguposlPpOoUrwOC7NWZgCmaR9aRVOY9UNtXyUgJsNi23PKfvkhMF/gr/4fKIEO
	qjBkceWT77dIFDeY1aI3ETpHn4WhxzoQiCMa8NYF5zLgE/rTCspt0U=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=0cLPsAgA1f6tpwUdUIAtdoYMrMs=; b=yCd1RXm2MUsGERlyE9oFRWruQ5Bv
	4WbuHHoZasSncAfoGXElZa5BNQtGbQ2BZW3RDGSSYsB/xGBBz3NcmeWXH82pvOMV
	36WTdFadmyoYCy9DfAIfIu3kuWFIZeViqN52meofgb7UFPCkMk7h4cBwCaMw0fSn
	AVySeflkUPnbbMs=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.4 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: plane.gmane.org
To: cygwin AT cygwin DOT com
From: Achim Gratz <Stromeko AT NexGo DOT DE>
Subject: Re: Testers needed:  New passwd/group handling in Cygwin
Date: Tue, 11 Mar 2014 17:05:47 +0000 (UTC)
Lines: 33
Message-ID: <loom.20140311T172511-742@post.gmane.org>
References: <loom DOT 20140310T181432-804 AT post DOT gmane DOT org> <20140310181339 DOT GF28681 AT calimero DOT vinschen DOT de> <87mwgxsyac DOT fsf AT Rainer DOT invalid> <20140310191603 DOT GH28681 AT calimero DOT vinschen DOT de> <87iorlsvvn DOT fsf AT Rainer DOT invalid> <loom DOT 20140311T081705-682 AT post DOT gmane DOT org> <20140311102007 DOT GJ28681 AT calimero DOT vinschen DOT de> <loom DOT 20140311T125212-440 AT post DOT gmane DOT org> <20140311130716 DOT GB21306 AT calimero DOT vinschen DOT de> <loom DOT 20140311T152430-775 AT post DOT gmane DOT org> <20140311154750 DOT GP28681 AT calimero DOT vinschen DOT de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
User-Agent: Loom/3.14 (http://gmane.org/)
X-IsSubscribed: yes

Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > With the original passwd and group file in place and nsswitch.conf set to
> > either "files" or "files db" the test fails.  With just "files" getfacl
> > doesn't show the group ACL at all,
> 
> How does it look with any non-AD integrated Cygwin?

... doesn't show the group ACL until I add them to the group file.  That
part is consistent with the AD enabled snapshot.  Actually... if I create a
group file with those two groups added, the access again doesn't get
granted.  Which finally reveals that I also need to have the administrators
group present in that file (which mkpasswd had been doing) -- then it works.
 I can even leave out the two ACL groups again and it still works.

> Hmm.  So you're saying that the groups in question are not in
> /etc/groups, but it works with the non-AD Cygwin but not with the
> AD-Cygwin?

Exactly.  But as revealed above, what was really missing is the
Administrators group.  Somehow, when "files" is in effect, that mapping
doesn't seem to exist unless it is explicitly listed in the file.  It does
get auto-created when I use _only_ the "db".  I hope that somehow makes sense...

> > So, Perl somehow uses the gid/uid mapping and relies on those to be working,

No, it seems to balk on not being able to map the Administrator group (which
is my egid).


Regards,
Achim.




--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple