Permissions/acl problem

Larry Hall (Cygwin) reply-to-list-only-lh@cygwin.com
Fri Nov 9 23:55:00 GMT 2007


Brian Dessent wrote:
> Jerome Fong wrote:
> 
>> This doesn't seem to help.  I re-ran cron_diagnose.sh and made sure I
>> had ntsec and smbntsec define, but that doesn't seem to help.  Am I
>> suppose to add it to my .profile?
> 
> I think Larry might have been a little quick on the trigger to suggest
> smbntsec, as I don't see how that would be relevant in this situation. 
> (And ntsec is the default if not specified, so there's no reason really
> to ever specify it.)
> 
> The problem is that the cron daemon runs as the system and impersonates
> each user when it goes to execute a job from their crontab.  But the
> cron daemon does not have the user's password (exactly analogous to the
> case when logging on to the sshd daemon with pubkey auth) so any network
> shares that require authentication will not be accessible from the
> cronjob.  There's a FAQ entry about this, but the solutions amount to
> basically:
> 
> - use network paths accessible to guests
> - run cron daemon as the desired user, which requires giving the user's
> password once when installing service but not subsequently.  (But you
> can only ever run jobs as that user as impersonation is not possible
> without extra privileges.)
> - supply your password explicitly in the cronjob, i.e. by invoking "net
> use" with username and password.  (Requires leaving password exposed in
> crontab)


While the above is all true, given the data from the original message,
I decided that the OP had somehow set up cron to allow him access to the
remote drives already.  I admit that I didn't verify that further than
the info already provided.  But given that the OP was able to list the
contents of the share from cron, he's managed this in some way.  Assuming
this information is not faulty, 'smbntsec' may indeed be what he needs to
manipulate permissions on these files.  But I would certainly encourage the
OP to review the current state of his configuration given the information
above and make sure that he's clear on what's required to accomplish the
desired end.


-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/



More information about the Cygwin mailing list