NTSEC db_home

[Corinna Vinschen]

On Apr 17 10:07, Jim Reisert AD1C wrote:
> I'm having a little trouble with the db_home: setting at work
> (corporate network, not using /etc/passwd or /etc/group).  Regarding:
> 
>   https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch-home
> 
> I tried "db_home: /%H" and although my MINTTY session started in the
> correct directory, ssh-keygen wanted to use the directory defined by
> HOMESHARE instead, which points somewhere else (a local Unix server).
> Note that both HOMEDRIVE (+HOMEPATH) and HOMESHARE ultimately point to
> the same place:
> 
> DOS view of the world:
> 
> c:\>set | grep HOME
> HOME=C:\Home

Bzzz.

You seem to misinterpret what %H means.  It's the same thing as setting
db_home to the windows scheme.  Here's the relevant part from the docs:

  windows

    The user's home directory is set to the same directory which is used
    as Windows home directory. This is the homeDirectory AD attribute.
    For SAM accounts, this is equivalent to the "Home folder" setting in
    SAM. If both attributes are unset, Cygwin falls back to the user's
    local profile directory, typically something along the lines of
    C:\Users\$USERNAME. Of course, the Windows directory is converted to
    POSIX-style by Cygwin. 

Check with `getent passwd $USER'.  Your home dir from the Cygwin POV 
is what *Windows* sets, not your personal $HOME setting from the
environment.  I bet you'll see "//corp.ad.broadcom.com/DENA/home/reisert"
in the getent output.

By setting $HOME to a directory different from your home dir in the
passwd entry, you're confusing your tools.  Some of them will happily
use $HOME, others will use the entry from the account DB (what getent
returns).

The bottom line is, don't do that.  You have enough configuration
methods in /etc/nsswitch.conf, AD, or SAM to set your home dir
correctly.  Setting $HOME manually to a differnet value is just
asking for trouble.


HTH,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20150417/15ef167b/attachment.sig>