cyglsa and group membership

Corinna Vinschen corinna-cygwin@cygwin.com
Wed Apr 21 07:45:00 GMT 2010


On Apr 20 14:53, Tom Schutter wrote:
> Does cyglsa attempt to deal with nested group membership?  If group B
> is a member of group A, and I am a member of group B, will group A
> appear in the "groups" command output?

cyglsa is not doing that on its own.  The actual mechanism to construct
the group list is in the Cygwin DLL, and it's the exact same mechanism
used when creating the token from scratch per 
http://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-setuid-overview,
without password, method 1.  Essentially it boils down to calling

  NetUserGetGroups (logonserver, user, ...)
  NetUserGetLocalGroups (logonserver, user, 0, LG_INCLUDE_INDIRECT, ...)


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list