ssh-host-config: "mkpasswd -l -u sshd"; should it be "-d" on domain controller?

[Corinna Vinschen]

On Fri, Oct 24, 2003 at 01:38:50PM -0500, Tom Rodman wrote:
> consider:
> 
>   bash-2.05b$ uname -r; grep mkpasswd /bin/ssh-host-config
>   1.5.5(0.94/3/2)
>             mkpasswd -l -u sshd | sed -e 's/bash$/false/' >> ${SYSCONFDIR}/passwd
> 
> Does "mkpasswd -l" make any sense on a domain controller?
> 
> On an NT domain controller I tested 
> 
>   mkpasswd -d -u sshd | sed -e 's/bash$/false/' >> /etc/passwd
> 
> and "ssh localhost" worked fine after stopping and starting sshd.  The '-d"
> option creates a user entry that apparently has the same SID, but
> different uid offset.

It's only the uid which is different then, this has been introduced
long ago to minimize the chance for collision between local and domain
account ids.  Other than that, -l and -d are practically the same on a
domain controller.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/