This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Cygwin 1.5.18-1 on Windows XP group & passwd problem


On Fri, 23 Dec 2005, Kyle S. Allender wrote:

> Igor Peshansky wrote:
>
> >> mkpasswd -l -s > /etc/passwd
> >               ^^
> > At a guess, here's your problem.  This flag completely omits the SIDs
> > from /etc/passwd.  When you omit SIDs, there is no way for Cygwin to
> > map your user id back to Windows security mechanisms, so any attempt
> > to use ntsec (which is on by default) will fail.  This has nothing to
> > do with the domain.
> >
> > Did you mean to use "-d" instead of "-s"?
>
> Well, I had actually intended to not use -d as I did want to import the
> domain users into the file - there are well over 4000 of them, the vast
> majority of whom I would prefer not have access to my system.

My main point was about your using the "-s" flag -- the "-d" comment was
just my guess for a reason you used the flag.  FWIW, you could also use
the "-u" flag to specify the actual user you want from the domain.

> >> mkgroup -l > /etc/group
> >>
> >> The passwd file initially contained a pair of the lines from the
> >> message above when run with mkpasswd -l -d > /etc/passwd, but I'm not
> >> certain as to why.
> >
> > Running any Cygwin program (including mkpasswd) would probably result
> > in the above message if the SIDs are missing.  Just rerun the command,
> > delete the offending lines, and see if it fixes your problem.
> >
> > You could try confirming my guess by running "CYGWIN=nontsec bash"
> > before regenerating /etc/passwd -- if I'm right, you shouldn't see
> > these messages.
>
> Initially, there was no change.  I actually completely removed Cygwin
> from my system and reinstalled (using the current release, not a
> snapshot), but the effect upon launching the Cygwin shell was the same -
> same error message that is.  Opening an xterm with startx resulted in:
>
> CreateFileandSetSecurity failed with FALSE (Expected on FAT Partitions) GLE: 32
> CreateFileandSetSecurity failed with TRUE (not expected) GLE: 32
> [snip]

You said you get the same message for a bash shell?  Could you please try
to capture the output (by opening a CMD.EXE window and typing
"c:\cygwin\cygwin.bat")?

> Output of a re-run of the commands is as follows:
>
> kallender@nc-dm-dc141 /etc
> $ mkpasswd -l -d > /etc/passwd
> mkpasswd (731): [2453] Could not find domain controller for this domain.

Hmm.  How about "mkpasswd -l -c > /etc/passwd"?

> kallender@nc-dm-dc141 /etc
> $ mkgroup -l > /etc/group
>
> Contents of the files:
>
> passwd:
>
> SYSTEM:*:18:544:,S-1-5-18::
> Administrators:*:544:544:,S-1-5-32-544::
> Administrator:unused_by_nt/2000/xp:500:513:U-NC-DM-DC141\Administrator,S-1-5-21-1220945662-1547161642-682003330-500:/home/Administrator:/bin/bash
> Guest:unused_by_nt/2000/xp:501:513:U-NC-DM-DC141\Guest,S-1-5-21-1220945662-1547161642-682003330-501:/home/Guest:/bin/bash
> HelpAssistant:unused_by_nt/2000/xp:1000:513:Remote Desktop Help Assistant Account,U-NC-DM-DC141\HelpAssistant,S-1-5-21-1220945662-1547161642-682003330-1000:/home/HelpAssistant:/bin/bash
> SUPPORT_388945a0:unused_by_nt/2000/xp:1002:513:CN=Microsoft Corporation,L=Redmond,S=Washington,C=US,U-NC-DM-DC141\SUPPORT_388945a0,S-1-5-21-1220945662-1547161642-682003330-1002:/home/SUPPORT_388945a0:/bin/bash

I noticed that the "kallender" user is missing from /etc/passwd.
According to the "id" output, "kallender" is definitely a domain user.
Perhaps you need to specify the domain name explicitly (as in "mkpasswd -l
-u kallender -d DOMAINNAME")?

> group:
>
> CreateFileandSetSecurity failed with FALSE (Expected on FAT Partitions) GLE: 32
> CreateFileandSetSecurity failed with TRUE (not expected) GLE: 32

Heh...  You should remove those two lines -- they may be screwing up the
parsing of /etc/group...

> SYSTEM:S-1-5-18:18:
> None:S-1-5-21-1220945662-1547161642-682003330-513:513:
> Administrators:S-1-5-32-544:544:
> Backup Operators:S-1-5-32-551:551:
> Guests:S-1-5-32-546:546:
> Network Configuration Operators:S-1-5-32-556:556:
> Power Users:S-1-5-32-547:547:
> Remote Desktop Users:S-1-5-32-555:555:
> Replicator:S-1-5-32-552:552:
> Users:S-1-5-32-545:545:
> Debugger Users:S-1-5-21-1220945662-1547161642-682003330-1003:1003:
> HelpServicesGroup:S-1-5-21-1220945662-1547161642-682003330-1001:1001:
> RS_Query:S-1-5-21-1220945662-1547161642-682003330-1004:1004:
>
> A further clue _might_ be this:
>
> kallender@nc-dm-dc141 /etc
> $ ssh -X kylea@192.168.1.100
> CreateFileandSetSecurity failed with FALSE (Expected on FAT Partitions) GLE: 32
> CreateFileandSetSecurity failed with TRUE (not expected) GLE: 32
> The authenticity of host '192.168.1.100 (192.168.1.100)' can't be established.
> RSA key fingerprint is 6d:2d:77:1f:1f:41:04:96:62:f1:5c:76:16:23:b2:2b.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added '192.168.1.100' (RSA) to the list of known hosts.
> Password:
> CreateFileandSetSecurity failed with FALSE (Expected on FAT Partitions) GLE: 32
> CreateFileandSetSecurity failed with TRUE (not expected) GLE: 32
> x11_request_forwarding: bad authentication data: with

How is this a clue?  The above is a one-time message from ssh -- using ssh
again will not print this.

> It is almost as if there are permissions on disk that are not correct.
> The suggested command you provided above does not seem to have helped.
>
> What could possibly be causing this?

Looks like these messages may be caused by something in your bash
initialization scripts.  If you get this output from a plain bash (by
running cygwin.bat), here's a suggestion: from a CMD.EXE window, run

cd c:\cygwin\bat
.\bash.exe -v --login -i

And see after what lines the messages appear.

FWIW, I didn't find any place in the Cygwin sources that prints out the
above message -- is it even coming from a Cygwin application?
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_	    pechtcha@cs.nyu.edu | igor@watson.ibm.com
ZZZzz /,`.-'`'    -.  ;-;;,_		Igor Peshansky, Ph.D. (name changed!)
     |,4-  ) )-,_. ,\ (  `'-'		old name: Igor Pechtchanski
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"Las! je suis sot... -Mais non, tu ne l'es pas, puisque tu t'en rends compte."
"But no -- you are no fool; you call yourself a fool, there's proof enough in
that!" -- Rostand, "Cyrano de Bergerac"

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]