This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: get rid of getpwent? (Was: cygwin-1.7.28 getpwent header declaration changes ?)
- From: Andrey Repin <anrdaemon at yandex dot ru>
- To: Corinna Vinschen <cygwin at cygwin dot com>
- Date: Thu, 13 Feb 2014 15:39:18 +0400
- Subject: Re: get rid of getpwent? (Was: cygwin-1.7.28 getpwent header declaration changes ?)
- Authentication-results: sourceware.org; auth=none
- References: <52F92D58 dot 9030408 at etr-usa dot com> <52F95D1D dot 4050108 at tiscali dot co dot uk> <4510121021 dot 20140211062515 at mtu-net dot ru> <52FAB14C dot 8060800 at tiscali dot co dot uk> <52FABAF5 dot 2060701 at etr-usa dot com> <52FAD730 dot 9090507 at redhat dot com> <20140212090804 dot GM2821 at calimero dot vinschen dot de> <52FB9E51 dot 7030607 at cornell dot edu> <20140212195931 dot GA2246 at calimero dot vinschen dot de> <20140212213729 dot GA5589 at ednor dot casa dot cgf dot cx> <20140213100025 dot GB24159 at calimero dot vinschen dot de>
- Reply-to: Andrey Repin <cygwin at cygwin dot com>
Greetings, Corinna Vinschen!
>> >There's only one tiny problem. Whatever I think about the full
>> >enumerate being right or wrong, I have this vague feeling that I'd like
>> >to have this implemented fully at one point. My cat disapproves, but we
>> >can't agree on everything, I guess. Another configuration option in
>> >/etc/nsswitch.conf might comfort her.
>>
>> I don't know if this has been mentioned but would a cache help here,
>> i.e., nscd? I think that's how Linux deals with this type of situation.
> Caching is wonderful for the usual requests for single entries from the
> DB, and for this we have already two caches, the LSA cache and Cygwin's
> own cache. But caching doesn't help at all when enumerating.
> There's also the problem to rely on an external program. If it turns
> out that the current implementation is too slow, I'm prepared to add
> caching to cygserver to have a system-wide caching server, but Cygwin
> shouldn't *require* that cygserver runs. And either way, it still
> wouldn't help when enumerating all accounts.
Another rock in the direction of caching. Caching security-relevant data 'en
masse' is usually a not-so-good idea, and should be considered very carefully.
Even for Linux, common recommendation is to disable nscd to improve security
and reliability of the accounting data.
--
WBR,
Andrey Repin (anrdaemon@yandex.ru) 13.02.2014, <15:36>
Sorry for my terrible english...
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple