This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Permissions/acl problem


Brian Dessent wrote:
Jerome Fong wrote:

This doesn't seem to help.  I re-ran cron_diagnose.sh and made sure I
had ntsec and smbntsec define, but that doesn't seem to help.  Am I
suppose to add it to my .profile?

I think Larry might have been a little quick on the trigger to suggest
smbntsec, as I don't see how that would be relevant in this situation. (And ntsec is the default if not specified, so there's no reason really
to ever specify it.)


The problem is that the cron daemon runs as the system and impersonates
each user when it goes to execute a job from their crontab.  But the
cron daemon does not have the user's password (exactly analogous to the
case when logging on to the sshd daemon with pubkey auth) so any network
shares that require authentication will not be accessible from the
cronjob.  There's a FAQ entry about this, but the solutions amount to
basically:

- use network paths accessible to guests
- run cron daemon as the desired user, which requires giving the user's
password once when installing service but not subsequently.  (But you
can only ever run jobs as that user as impersonation is not possible
without extra privileges.)
- supply your password explicitly in the cronjob, i.e. by invoking "net
use" with username and password.  (Requires leaving password exposed in
crontab)


While the above is all true, given the data from the original message,
I decided that the OP had somehow set up cron to allow him access to the
remote drives already.  I admit that I didn't verify that further than
the info already provided.  But given that the OP was able to list the
contents of the share from cron, he's managed this in some way.  Assuming
this information is not faulty, 'smbntsec' may indeed be what he needs to
manipulate permissions on these files.  But I would certainly encourage the
OP to review the current state of his configuration given the information
above and make sure that he's clear on what's required to accomplish the
desired end.


-- Larry Hall http://www.rfk.com RFK Partners, Inc. (508) 893-9779 - RFK Office 216 Dalton Rd. (508) 893-9889 - FAX Holliston, MA 01746

_____________________________________________________________________

A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]