This is the mail archive of the cygwin mailing list for the Cygwin project.
Index Nav: | [Date Index] [Subject Index] [Author Index] [Thread Index] | |
---|---|---|
Message Nav: | [Date Prev] [Date Next] | [Thread Prev] [Thread Next] |
Other format: | [Raw text] |
On Oct 22 13:35, Habermann, Dave (DA) wrote: > Read through https://cygwin.com/preliminary-ntsec.html and in general > found it to be quite useful. I'm hoping to do some testing perhaps > later this week or early next. I have a couple of questions: > > 1) Any thoughts about the rough timing of this "going live"? I'm heading for "at some arbitrary day in November". > 2) The documentation says (as I read it): Well-known/builtin accounts > named as in Windows, then (for domain member) "Local machine accounts > of a domain member machine get a Cygwin user name the same way as > accounts from another domain: The local machine name gets prepended". > As I read this, cyg_serv account (under which I currently run SSHD) > would now have a new name MYMACHINE+cyg_serv. Am I reading this > correctly? Is there some reconfiguration I'll need to do to get SSHD > to run properly? In theory, no. The last OpenSSH update, 6.7p1-1, alreadyd contained the upstream fix to work with local sshd accounts which have the machine name prepended. > 3) I also read "Cygwin implements the Solaris API to access Windows > ACLs in a Unixy way" (although your email says "Revamp Solaris ACL > implementation to more closely work like POSIX ACLs are supposed to > work"). So is it Solaris or is it POSIX, and if Solaris then I wonder > why since it seems that everywhere else you've tried to be as POSIX as > possible. Solaris ACLs *are* POSIX ACLs :) The difference is not how these ACLs look like, but only in the API used to access the ACLs. The Solaris API was finished and working at the time I implemented this POSIX ACL support in Cygwin, while the POSIX draft 1003.1e was still in the works, and our role model Linux didn't even now how to spell ACL. These days, Linux implements the POSIX 1003.1e draft, (which, funny enough, has been withdrawn long ago), while Solaris and Cygwin provide the original Solaris API. What has chnaged with 1.7.33 is that the handling of POSIX ACLs is now much more aligned with how they are implemented on Solaris or Linux. Especially the CLASS_OBJ stuff didn't exist before, but now it gets emulated. > Thanks for all your hard work on this, I will certainly be one of the > benefactors (12 Mb group file, takes hours to refresh so not done > since this time last year). Cool, thank you! I'm really looking forward to this release. The account handling changes is something I had on the TODO list for ages, and the new SEH-based internal exception handling is a great benefit for the 64 bit version. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat
Attachment:
pgp2BlKsWUDv2.pgp
Description: PGP signature
Index Nav: | [Date Index] [Subject Index] [Author Index] [Thread Index] | |
---|---|---|
Message Nav: | [Date Prev] [Date Next] | [Thread Prev] [Thread Next] |