On Tue, 20 Feb 2024 at 21:45, Corinna Vinschen via Cygwin
<cygwin@cygwin.com> wrote:
>
> On Feb 20 17:24, Dan Shelton via Cygwin wrote:
> > On Tue, 20 Feb 2024 at 10:57, Corinna Vinschen via Cygwin
> > <cygwin@cygwin.com> wrote:
> > >
> > > On Feb 20 05:13, Dan Shelton via Cygwin wrote:
> > > > Hello!
> > > >
> > > > I think I found a rather nasty bug:
> > > > 1. Add a new group with "net localgroup mygrp1 /add"
> > > > 2. Then list all groups with "getent group", the new group mygrp1 will
> > > > not show up. "getent group mygrp1" will list it, but this is useless
> > > > in my case, as I need the group listed by "getent group"
> > >
> > > I guess we can rule out a domain controller but is this a standalone
> > > machine or a domain member machine?
> >
> > Standalone test machine, stock Windows 10 installed 2 days ago,
> > current patches, Cygwin 3.5 from 2 days ago.
> >
> > >
> > > What's the setting of your /etc/nsswitch.conf?
> >
> > Only comments in that file, i.e. empty
>
> Please set the db_enum: line to
>
>   db_enum: all
>
> and try again after exiting from the shell window.

That worked on the customers machine:

getent group | fgrep 'S-1-5-21-'
Kein:S-1-5-21-3286904461-661230000-4220857270-513:197121:
mygrp1:S-1-5-21-3286904461-661230000-4220857270-1003:197611:
mygrp2:S-1-5-21-3286904461-661230000-4220857270-1004:197612:
mygrp3:S-1-5-21-3286904461-661230000-4220857270-1005:197613:
__vmware__:S-1-5-21-3286904461-661230000-4220857270-1002:197610:
Kein:S-1-5-21-3286904461-661230000-4220857270-513:197121:

but "db_enum: cache builtin local" in nsswitch.conf works too. "cache
builtin" is the default, so just add "local"

Why is "local" NOT enabled by default?

> Have a look at
> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch
> for the settings.  By default account enumeration only returns
> the bare minimum for speed.

It would suffice to turn change the default to "db_enum: cache builtin
local" for 3.5.1

Dan
-- 
Dan Shelton - Cluster Specialist Win/Lin/Bsd

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

Reply via email to