On Mon, 22 Dec 2025 11:22:45 +0100
Corinna Vinschen wrote:
> On Dec 22 15:07, Takashi Yano wrote:
> > On Thu, 18 Dec 2025 12:23:06 +0100
> > Corinna Vinschen wrote:
> > > From: Corinna Vinschen <[email protected]>
> > > 
> > > Do not only allow to override the (localized) group "None" as primary
> > > group, but also the user account.  The user account is used as primary
> > > group in the user token, if the user account is a Microsoft Account or
> > > an AzureAD account.
> > 
> > Is there any evidence of:
> > "The user account is used as primary group in the user token, "
> 
> I don't quite understand the question.  That's what I'm trying to
> explain with this sentence:
> 
>   The user account is used as primary group in the user token, if the
>   user account is a Microsoft Account or an AzureAD account.
> 
> This was a known problem at the time Microsoft Accounts have been
> introduced.  I never had a Microsoft Account myself since I'm
> setting up my machines as AD DC or member machines, but we hit this
> problem back in 2014.

I could not find the document that states that primary group of
user token for Microsoft Account is the user itself. Is this some
specification or known behaviour?

> +               || user.sid () == user.groups.pgsid)))

If it is true, the above patch loocks good to me.


-- 
Takashi Yano <[email protected]>

Reply via email to