Re: NTSEC, passwd/group, and "544"

[Corinna Vinschen <vinschen at redhat dot com>]

"Masterson, Dave" wrote:
> I'm trying to setup the NTSEC feature on Cygwin 1.1 and running into strange
> problems.  With NTSEC turned off, the output of "ls -l .bashrc" looks like
> this:
> 
> -rwxr-xr-x   1 dmasters dev           359 Nov  5 13:47 .bashrc*
> 
> With NTSEC turned on, it looks like this:
> 
> -rwx------   1 544      dev           359 Nov  5 13:47 .bashrc*
> [...]

544 is the admins group. The problem is described in the documentation:

http://sources.redhat.com/cygwin/cygwin-ug-net/ntsec.html#NTSEC-FILES

If ntsec is off, the ownership might be faked dependent of the contents
of /etc/passwd.

If you are member of admins and if you create a file without ntsec
(or in a native environemt at all) the files will not be owned by
you but by the admins group.

You should add an entry for the admins group to /etc/passwd similar
to that one:

myadmingrp::544:513:,S-1-5-32-544::/bin/false

This will fix the output of ls -l in either case. On the other hand,
_if_ you are member of the admins group and _if_ you want that the
files will be owned by you, there's no way around of `ntsec' and/or
using `chown'.

> BTW, mkpasswd and mkgroup did not make the "root" account/group described
> in:
> 
> http://sources.redhat.com/cygwin/cygwin-ug-net/ntsec.html#NTSEC-RELEASE1.1

Sure. They are not intended to do it by themselves. It's _your_
choice.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                        mailto:cygwin@sources.redhat.com
Red Hat, Inc.
mailto:vinschen@redhat.com

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe@sourceware.cygnus.com