This is the mail archive of the
mailing list for the Cygwin project.
Re: Corinna or Pierre please comment? [email@example.com: Re: setuid
Corinna Vinschen wrote:
> Did I mess up the sentence? Currently the code has this new comment
> "/* Fail silently if DC is not reachable */". This must not happen.
I would now say "Fail silently if DC is not reachable or groups can't be obtained",
or perhaps, "Ignore failures reaching the DC or obtaining the global groups".
At any rate, we agree on the substance.
> It's not that problem, AFAICS. It's pretty clear in that environment
> that the passwd and group entries have to be generated by either a
> privileged user or by the sysadmin directly on the DC. So there is
> a way to generate these files, it's just not possible for everyone
> on each machine.
True, there is a way...
I found the mail thread. It's weird that apparently he can get
mkpasswd to work. NetUserEnum in mkpasswd SHOULD fail for the same reason
that NetUserGetGroups is failing in get_user_groups.
Ah, but with -d -u mkpasswd uses NetUserGetInfo, not NetUserEnum.
Still, it SHOULD fail too.
But then he gets that huge RID. There is something strange going on.