[ANNOUNCEMENT] Updated: tiff-3.9.7-4 [SECURITY]

2014-05-16 Thread Yaakov (Cygwin/X)

The following packages have been updated for both arches:

* tiff-3.9.7-4
* tiff-doc-3.9.7-4
* tiff-opengl-3.9.7-4
* libtiff5-3.9.7-4
* libtiff-devel-3.9.7-4

libtiff is the reference implementation for reading and writing TIFF 
images, along with a small collection of tools for doing simple 
manipulations of TIFF images on UNIX systems, and documentation on the 
library and tools.


This release includes patches for CVE-2013-1960, CVE-2013-1961, 
CVE-2013-4231, CVE-2013-4232, and CVE-2013-4244.  On x86_64, JBIG 
support was enabled in libtiff.


--

Yaakov
Cygwin/X


CYGWIN-ANNOUNCE UNSUBSCRIBE INFO


If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:

http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message.  Send email to the address specified
there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: https://cygwin.com/ now live

2014-05-16 Thread Christopher Faylor
On Fri, May 16, 2014 at 05:08:12PM -0500, Steven Penny wrote:
>On Fri, May 16, 2014 at 12:05 PM, Christopher Faylor wrote:
>>There will probably be some gotchas to work out for places which refer
>>to http://cygwin.com/ directly.  Please send any issues here, as
>>always.
>
>It appears it is not forcing HTTPS through a 301 redirect, is this
>intentional?

I didn't say "http is no longer available" so, yes, it is intentional.

cgf

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



[ANNOUNCEMENT] Updated: jbigkit-2.0-13 [SECURITY]

2014-05-16 Thread Yaakov (Cygwin/X)

The following packages have been updated in the Cygwin distribution:

* jbigkit-2.0-13
* libjbig2-2.0-13
* libjbig-devel-2.0-13

JBIG-KIT is a software implementation of the JBIG1 data compression 
standard (ITU-T T.82), which was designed for bi-level high-resolution 
image data such as scanned documents. This library is available in 
portable C code and has been widely used in fax products, printer 
firmware and drivers, and document management systems. The package 
includes a variant implementation of just the ITU-T T.85 profile, with 
memory management optimized for embedded and fax applications.


This release includes a patch for CVE-2013-6369.

--

Yaakov
Cygwin/X


CYGWIN-ANNOUNCE UNSUBSCRIBE INFO


If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:

http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message.  Send email to the address specified
there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



[ANNOUNCEMENT] Updated: botan-1.8.14-2, botan1.10-1.10.8-1

2014-05-16 Thread Yaakov (Cygwin/X)

The following packages have been updated in the Cygwin distribution:

* libbotan1.8.13-1.8.14-2
* libbotan-devel-1.8.14-2

* libbotan1.10_0-1.10.8-1
* libbotan1.10-devel-1.10.8-1
* libbotan1.10-doc-1.10.8-1
* python-botan-1.10.8-1

Botan is a crypto library for C++ released under the permissive 2-clause 
BSD license. It provides most any cryptographic algorithm you might be 
looking for, along with Transport Layer Security (TLS), X.509 certs, 
CRLs, and path validation, a pipeline-style message processing system, 
bcrypt password hashing, and other useful things.


These releases includes fixes in primality testing as described here:

http://botan.randombit.net/relnotes/1_10_8.html

--

Yaakov
Cygwin/X


CYGWIN-ANNOUNCE UNSUBSCRIBE INFO


If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:

http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message.  Send email to the address specified
there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



[ANNOUNCEMENT] Updated: ruby-1.9.3-p545-1

2014-05-16 Thread Yaakov (Cygwin/X)

The following packages have been updated for both arches:

*** ruby-1.9.3-p545-1
*** ruby-doc-1.9.3-p545-1
*** ruby-tcltk-1.9.3-p545-1

Ruby is an interpreted scripting language for quick and easy
object-oriented programming.

This is an update to the latest upstream patch release for the 1.9.3 branch.

--

Yaakov
Cygwin/X


CYGWIN-ANNOUNCE UNSUBSCRIBE INFO


If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:

http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message.  Send email to the address specified
there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: https://cygwin.com/ now live

2014-05-16 Thread Steven Penny
On Fri, May 16, 2014 at 12:05 PM, Christopher Faylor wrote:
> There will probably be some gotchas to work out for places which refer to
> http://cygwin.com/ directly.  Please send any issues here, as always.

It appears it is not forcing HTTPS through a 301 redirect, is this intentional?

$ wget --spider cygwin.com
Spider mode enabled. Check if remote file exists.
--2014-05-16 17:04:43--  http://cygwin.com/
Resolving cygwin.com (cygwin.com)... 209.132.180.131
Connecting to cygwin.com (cygwin.com)|209.132.180.131|:80... connected.
HTTP request sent, awaiting response... 200 OK

Example of the 301

$ wget --spider github.com
Spider mode enabled. Check if remote file exists.
--2014-05-16 17:04:36--  http://github.com/
Resolving github.com (github.com)... 192.30.252.130
Connecting to github.com (github.com)|192.30.252.130|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://github.com/ [following]

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: More testing needed: New passwd/group AD/SAM integration

2014-05-16 Thread Chris J. Breisch

Corinna Vinschen wrote:

Thanks for testing.  If you find any other problems or annoyances,
please speak up.


Thanks,
Corinna



I have a problem with ssh using this on a domain machine.

$ uname -a
CYGWIN_NT-6.3 cbreisch-win8 1.7.30s(0.272/5/3) 20140514 11:29:16 x86_64 
Cygwin


I had ssh set up and working properly before installing the snapshot.

$ cat /etc/nsswitch.conf
passwd: files
group: files

If I leave it using files, I have no problems.

So, I change it to db and attempt to restart sshd

$ cat /etc/nsswitch.conf
passwd: db
group: db

# cygrunsrv -E sshd
# cygrunsrv -S sshd
cygrunsrv: Error starting a service: QueryServiceStatus:  Win32 error 1062:
The service has not been started.

Add files back in:

$ cat /etc/nsswitch.conf
passwd: db files
group: db files

$ cygrunsrv -S sshd

works perfectly.

It appears to have something to do with the cyg_server account. Perhaps 
because I set it up before I installed the snapshot? Why would that matter?


In any event, when set to use files, I can do this:

$ id cyg_server
uid=1008(cyg_server) gid=513(None) groups=513(None),0(root),545(Users)

when only using db, I get

$ id cyg_server
id: cyg_server: no such user

cyg_server does exist on the machine:

$ net users

User accounts for \\CBREISCH-WIN8

---
AdministratorChrisclfs
cyg_server   GuestLocalAdmin
man  sshd
The command completed successfully.

and is in /etc/passwd

$ grep cyg_server /etc/passwd
cyg_server:unused:1008:513:Privileged 
server,U-CBREISCH-WIN8\cyg_server,S-1-5-21-2077790098-1200989767-2685255527-1008:/cygdrive/d/cygwin/root/var/empty:/bin/bash


Interesting, I just noticed that it says /cygdrive/d/cygwin/root... 
There's no such path.


$ ls /cygdrive/d/cygwin/root
ls: cannot access /cygdrive/d/cygwin/root: No such file or directory

I changed my /cygdrive mount to /win

but even /win/d/cygwin/root doesn't exist. .../cygwin/root is from an 
old install.


$ ls /win/d/cygwin/root
ls: cannot access /win/d/cygwin/root: No such file or directory





--
Chris J. Breisch

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: Coverity Scan

2014-05-16 Thread Jeffrey Altman
On 5/16/2014 4:00 PM, David Stacey wrote:
> OK - we're in! You can find our project page at
> https://scan.coverity.com/projects/2250. Off the list, I've sent e-mails
> to Corinna and CGF inviting them to join the project ;-)

gold star?




smime.p7s
Description: S/MIME Cryptographic Signature


Re: Coverity Scan

2014-05-16 Thread David Stacey

On 25/04/14 16:53, Christopher Faylor wrote:

On Fri, Apr 25, 2014 at 10:35:00AM +0200, Corinna Vinschen wrote:

On Apr 25 06:33, David Stacey wrote:

  Coverity Scan [1] is a commercial (paid for) static analysis tool, but
  they offer it to Open Source programmes for free. I was having a browse
  through the list of Open Source programmes using Coverity Scan, and
  noticed that Cygwin wasn't listed. Would there be any interest in
  analysing the cygwin1.dll source code on a fairly regular basis? If so,
  I would be happy to have a go at setting up an analysis job for Cygwin.
  
  I would imagine this would be of interest to CGF, Corinna and anyone

  else who regularly updates the Cygwin source code. Obviously, this is
  only worth doing if the analysis results are looked at and acted upon.

Depends.  If the report contains lots of false positives, it's getting
annoying pretty quickly.

We use coverity at work.  It is annoying and it does have false positive
but a lot of what look like false positives often turn out to be:  "Oh,
wait.  (#*(&$  Yeah.  That's a problem."

If we could use coverity I'm sure it would be interesting if we can get
it.


OK - we're in! You can find our project page at 
https://scan.coverity.com/projects/2250. Off the list, I've sent e-mails 
to Corinna and CGF inviting them to join the project ;-)


It would be responsible of us to restrict access to known 
vulnerabilities, so please _don't_ ask for visibility of the scan 
results. I will leave it to CGF and Corinna to decide who we give access 
to and when.


There is still a little work to do in setting up the Coverity scan. The 
next step is to group the code into logical clusters, which Coverity 
calls Components. Typically, this is done on directories or other file 
groupings, and the tool allows you to concentrate on just one of these 
components at once. If you let me know what components you'd like, I'll 
set them up.


The Coverity build is being performed on one of my PCs at the moment. 
I'll try to do this at least weekly using a snapshot from the snapshots 
page. I'll also try to submit patches as and when time allows. But if 
this is going to work then anyone who regularly contributes to the 
Cygwin source code will have to make use of the tool.


Finally, I'd like to thank Dakshesh Vyas at Coverity for allowing us to 
join the Scan programme.


Cheers,

Dave.


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: Does /etc/profile need to set MANPATH?

2014-05-16 Thread Chris J. Breisch

Corinna Vinschen wrote:

On May 15 09:17, Chris J. Breisch wrote:

Chris J. Breisch wrote:

Corinna Vinschen wrote:

On May 14 18:52, Achim Gratz wrote:

Corinna Vinschen writes:

Yes, this might be better discussed in cygwin-apps. I guess the setting
of MANPATH is mainly historical.

I'd be happy to not set MANPATH in /etc/profile if we no longer need it
for the standard installation.

I'm wondering if setting MANPATH was really ever required for the old
man either. In a tcsh environment, MANPATH is not set by default.
If you install the openssl package, MANPATH is set like this (in
/etc/profile.d/openssh.csh):

if ( ! $?MANPATH ) setenv MANPATH ""
setenv MANPATH "${MANPATH}:/usr/ssl/man"

which results in:

$ echo $MANPATH
:/usr/ssl/man

I have neither problems to see the man pages in the default paths nor
problems to see the openssl man pages.

Well, /etc/profile and /etc/profile.d/openssh.sh add a few more folders
to MANPATH in bash. If your man pages are working, then we probably
don't need MANPATH.

I'm guessing though that if you unset MANPATH, you can't see the man
pages in /usr/ssl/man. The new man from man-db doesn't find them either,
however.

But I think the proper solution to that is to add the appropriate lines
to man_db.conf rather than to force something into MANPATH. OTOH, we
already have the openssh.[c]sh files working, so maybe it's easier to
continue with that, rather than modifying the OpenSSL package to update
man_db.conf.


Or I could just add the values to man_db.conf, regardless of whether OpenSSL
is installed. It's not going to hurt anything to have them there.


You still have to be able to handle MANPATH.  Unfortunately the man page
of man-db is a little tight-lipped on how MANPATH is handled exactly,
other than that "its value is used as the path to search  for manual
pages."

Whatever man does with MANPATH, it doesn't drop the default man paths,
apparently.



It's not that man-db doesn't handle MANPATH, it's that it gives too much 
power to it, I think.


MANPATH always overrides whatever is in man_db.conf, even if you specify 
an override conf file on the command line with man -C .


I have verified that this happens in my LFS system. So, either I don't 
understand how this is supposed to work, or this is an upstream problem.


I'll send something to the man-db group about it this weekend, and 
hopefully work some more on getting this packaged up as well.



--
Chris J. Breisch

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: ssh after update not resolving hostname from DNS or /etc/hosts

2014-05-16 Thread Corinna Vinschen
On May 16 10:10, Alex Lindberg wrote:
> After updating to the latest ssh from respiratory, ssh will not resolve names 
> from /etc/hosts or a DNS host.  It worked find previously.  
> 
> It seems to be an issue with host resolution with cygwin itself.  I also 
> installed lynx and it failed also.

Try the most recent developer snapshot from http://cygwin.com/snapshots/


Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat


pgpIoXdWcN7qQ.pgp
Description: PGP signature


Re: Re: email-3.1.4

2014-05-16 Thread Corinna Vinschen
On May 16 13:35, Corinna Vinschen wrote:
> On May 16 09:43, a...@gmx-topmail.de wrote:
> > On 6 May 2014 17:23, Corinna Vinschen wrote:
> > > On May  6 16:49, axd wrote:
> > > > On 6 May 2014 15:58, Corinna Vinschen wrote:
> > > > > If you can point me to the fix for this version I will create a new
> > > > > package, but I'm not going to debug this myself.
> > > > 
> > > > Would it be OK for you to get latest version directly from the 
> > > > repository?
> > > > http://cleancode.org/projects/email/repository
> > > 
> > > I don't know in which state of stability the repo is so I'd prefer an
> > > official upstream source archive.  I contacted the author.
> > 
> > Do you have any new information?
> 
> Not yet, no.  I pinged Dean twice, no answer yet.
> 
> I tried to build from git, but it doesn't work.  The dlib submodule
> is giving me headaches with cygport, and the svn and zip pulling
> methods omit the dlib subdir entirely.  I'll get to it eventually,
> but don't hold your breath.

I uploaded email-3.2.0-git-1.  This version is marked as "test", so
you have to cycle through the versions of email to get it.  Please
give it a try.


Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat


pgpraQJYEah5x.pgp
Description: PGP signature


Re: Emacs daemon exit with clients

2014-05-16 Thread Ken Brown

On 5/14/2014 10:18 PM, Arthur Tu wrote:

Yes, I am running emacs-w32.exe. And yes, it's specific to `emacs --daemon'.


I've just filed an emacs bug report about this:

  http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17510

Arthur, please send any further correspondence about this problem to 
17...@debbugs.gnu.org.


Ken

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: 32 and 64 bit cygwin on same machine?

2014-05-16 Thread Mark Geisert
Dominic Herity writes:
> Can I install 32 bit and 64 bit Cygwin on the same machine and choose
> to run either 32 bit or 64 bit python to test the corresponding dll?
> Or do I need to keep them on separate machines?

You can install both 32- and 64-bit Cygwin on the same machine.  Use
setup-x86.exe and setup-x86_64.exe respectively.  Specify separate root
directories for the two installations.  Works like a charm.

In my experience the only mild gotcha was making sure to run Cygwin services
(such as sshd) from just one environment or the other.  BTW, the two
environments won't see each others' processes.  That's as designed.

..mark


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



https://cygwin.com/ now live

2014-05-16 Thread Christopher Faylor
Red Hat (thanks fo Frank Eigler) has activated some certificates for cygwin.com
so everyone should be able to access the site via https://cygwin.com now.

There will probably be some gotchas to work out for places which refer to
http://cygwin.com/ directly.  Please send any issues here, as always.

cgf

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: 32 and 64 bit cygwin on same machine?

2014-05-16 Thread LMH
I have run multiple versions of cygwin on the same machine. In my case,
both versions were 32-bit, but I don't see how that would make a
difference. You need to make sure that the environment variable for the
path to cygwin.dll is correct so the 64-bit dll gets loaded when you
open a 64-bit terminal.  I did that my using a windows .bat file that
starts the cygwin shell and creates a properly configured local environment.

This is the .bat file I use,

:: This bat removes the C:\cygwin\bin PATH environment variable for the
cygwin1 install that is
:: loaded into the cmd shell environment block from the registry. The
C:\cygwin2\bin PATH environment
:: variable for the cygwin2 install is then added to the PATH for the
environment block. A mintty
:: terminal is started from within the cygwin2 installation. The mintty
process inherits the
:: modified environment block. When the bat file closes, a mintty
terminal (running bash) is left
:: and has the proper PATH environment to run from the cygwin2 installation.


@echo off

:: remove "C:\cygwin\bin" from PATH
set "PATH=;%PATH%;"
set "PATH=%PATH:;;=;%"
set "PATH=;%PATH:;C:\cygwin\bin;=;%;"
set "PATH=%PATH:;;=%"

set "PATH=C:\cygwin2\bin;%PATH%"
start "" /b C:\cygwin2\bin\mintty.exe -i /Cygwin-Terminal.ico -

I think you could use something similar, just make sure to name your
cygwin installation and local package directories differently for the
two installs.

Of course, you could just move your 32-bit cygwin off the machine,
deleted the cygwin path variable, and install the 64-bit version. It's
not hard to move the original version back later.

Hope this helps,

LMH


Dominic Herity wrote:
> I'm using Python and Cygwin to test a 32 bit Windows dll.
> Now I need to test a 64 bit build of the same dll.
> Can I install 32 bit and 64 bit Cygwin on the same machine and choose
> to run either 32 bit or 64 bit python to test the corresponding dll?
> Or do I need to keep them on separate machines?
> 
> Thanks
> Dominic
> 
> --
> Problem reports:   http://cygwin.com/problems.html
> FAQ:   http://cygwin.com/faq/
> Documentation: http://cygwin.com/docs.html
> Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple
> 
> 

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



32 and 64 bit cygwin on same machine?

2014-05-16 Thread Dominic Herity
I'm using Python and Cygwin to test a 32 bit Windows dll.
Now I need to test a 64 bit build of the same dll.
Can I install 32 bit and 64 bit Cygwin on the same machine and choose
to run either 32 bit or 64 bit python to test the corresponding dll?
Or do I need to keep them on separate machines?

Thanks
Dominic

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



[ANNOUNCEMENT] Updated: xpdf-3.03-4

2014-05-16 Thread Corinna Vinschen
Hi

A new version of 'xpdf' has been uploaded to a server near you.

This version is a security update, containing a fix for CVE-2012-2142.
See https://access.redhat.com/security/cve/CVE-2012-2142




CYGWIN-ANNOUNCE UNSUBSCRIBE INFO



If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:


http://cygwin.com/lists.html#subscribe-unsubscribe

If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message.  Send email to the address specified
there.  It will be in the format:


cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: [ANNOUNCEMENT] New package: getent-2.18.90-2

2014-05-16 Thread Corinna Vinschen
On May 16 15:31, Henry S. Thompson wrote:
> Works for me with the 2015-05-14 x86_64 snapshot.
> 
> However, note that
> 
>  > getent passwd
> and
>  > getent group
> 
> output duplicate lines for some users/groups:
> 
> > getent group | wc
>  18  31 731
> > getent group | sort -u | wc
>  15  28 587
> > getent passwd | wc
>   9  13 677
> > getent passwd | sort -u | wc
>   6   9 437
> 
> Bug or feature?

Feature.  Quote from my preliminary documentation (attached):

  Please note that getpwent/getgrent do *not* test if an account was
  already listed from another source, so an account can easily show up
  twice or three times.  Such a test would be rather tricky, nor does
  the Linux implementation perform such test.

For the full description of the new, very configurable "db_enum" setting
in /etc/nsswitch.conf, see the chapter called "The /etc/nsswitch.conf
file"


Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat
===
History
===

For as long as Cygwin has existed, it has stored user and group
information in /etc/passwd and /etc/group files.  Under the assumption
that these files would never be too large, the first process in a
process tree, as well as every execing process within the tree would
parse them into structures in memory.  Thus every Cygwin process would
contain an expanded copy of the full information from /etc/passwd and
/etc/group.

This approach has a few downsides.  One of them is that the idea to have
always small files is flawed.  Another one is that reading the entire
file is most of the time entirely useless, since most processes only
need information on their own user and the primary group.  Last but not
least, the passwd and group files have to be maintained separately from
the already existing Windows user databases, the local SAM and Active
Directory.

On the other hand, we have to have a mapping between Windows SIDs and
POSIX uid/gid values (see [1]), so we rely on some mechanism to convert
SIDs to uid/gid values and vice versa.

Microsoft "Services for UNIX" (SFU) (which are unfortunately deprecated
since Windows 8/Server 2012) never used passwd/group files.  Rather, SFU
used a fixed, computational mapping between SIDs and POSIX uid/gid.  It
allows to generate uid/gid values from SIDs and vice versa.  The
mechanism is documented, albeit in a confusing way and spread over
multiple MSDN articles.  The Cygwin approach clones the mapping, with
just tiny differences for backward compatibility.


=
How does it work?
=

The following description assumes you're comfortable with the concept of
Windows SIDs and RIDs.  For a brief introduction, please read [1].

Cygwin's new mapping between SIDs and uid/gid values works in two ways.

- Read /etc/passwd and /etc/group files, like before, mainly for
  backward compatibility.

- If no files are present, or if an entry is missing in the files, ask
  Windows.

At least, that's the default behaviour now.  It will be configurable
using a file /etc/nsswitch.conf, which is discussed in a later section.
Let's explore the default for now.

If files are present, they will be scanned on demand as soon as a
mapping from SIDs to uid/gid or account names is required.  The new
mechanism will never read the entire file into memory, but only scan for
the requested entry and cache this one in memory[2].

If no entry is found, or no passwd or group file was present, Cygwin
will ask the OS.

Note:  If the first process in a Cygwin process tree determines that no
   /etc/passwd or /etc/group file is present, no other process in
   the entire process tree will try to read the files later on.
   This is done for self-preservation.  It's rather bad if the uid
   or gid of a user changes during the lifetime of a process tree.

   For the same reason, if you delete the /etc/passwd or /etc/group
   file, this will be ignored.  The passwd and group records read
   from the files will persist in memory until either a new
   /etc/passwd or /etc/group files is created, or you exit all
   processes in the current process tree.

   See the note in the section on /etc/nsswitch.conf for some
   comprehensive examples.

So if we've drawn a blank reading the files, we're going to ask the OS.
First thing, we ask the local machine for the SID or the username.  The
OS functions LookupAccountSid and LookupAccountName[3] are pretty
intelligent.  They have all the stuff built in to ask for any account of
the local machine, the Active Directory domain of the machine, the
Global Catalog of the forest of the domain, as well as any trusted
domain of our forest for the information.  One OS call and we're
practically done...

Except, the calls only return the mapping between SID, account name and
the account's domain.  We don't have a mapping to POSIX uid/gid an

Re: [ANNOUNCEMENT] New package: getent-2.18.90-2

2014-05-16 Thread Henry S. Thompson
Works for me with the 2015-05-14 x86_64 snapshot.

However, note that

 > getent passwd
and
 > getent group

output duplicate lines for some users/groups:

> getent group | wc
 18  31 731
> getent group | sort -u | wc
 15  28 587
> getent passwd | wc
  9  13 677
> getent passwd | sort -u | wc
  6   9 437

Bug or feature?

ht 
-- 
   Henry S. Thompson, School of Informatics, University of Edinburgh
  10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440
Fax: (44) 131 650-4587, e-mail: h...@inf.ed.ac.uk
   URL: http://www.ltg.ed.ac.uk/~ht/
 [mail from me _always_ has a .sig like this -- mail without it is forged spam]

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: [ANNOUNCEMENT] Updated: screen 4.2.1-2 (test release)

2014-05-16 Thread Tom Schutter
On Thu 2014-05-15 20:24, Andrew Schulman wrote:
> A new version of screen, 4.2.1-2, is available in the Cygwin
> distribution.  This is a new Cygwin-only test release.  
> 
> This release includes a patch that may fix the scrolling corruption bug
> when screen is used in mintty in 64-bit Cygwin
> (http://cygwin.com/ml/cygwin/2014-01/msg00223.html).  If you are
> affected by that bug, please install the new release and report here
> whether it fixes it for you.  Thanks to Shaddy Baddah for the patch
> (http://cygwin.com/ml/cygwin/2014-05/msg00331.html).

I can verify that this version fixes the scrolling corruption bug for me on 
64-bit Cygwin.

Extra thanks to Shaddy for his debugging work.  It set a shining example for 
the rest of us!

-- 
Tom Schutter

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



[ANNOUNCEMENT] New package: getent-2.18.90-2

2014-05-16 Thread Corinna Vinschen
Hi folks,


I just uploaded getent-2.18.90-2.

getent is a Glibc tool which allows to fetch host, passwd, group,
protocol, and service information via a simple tool.

The -2 version introduces the ability to ask for passwd and group
entries via their Windows SID, for instance:

  $ getent passwd S-1-5-18
  SYSTEM:*:18:544:,S-1-5-18::

or, with a recent developer snapshot from http://cygwin.com/snapshots/
and the upcoming Cygwin 1.7.30:

  $ getent passwd S-1-5-18
  +SYSTEM:*:18:18:U-NT AUTHORITY\SYSTEM,S-1-5-18:/home/SYSTEM:/bin/bash

=
IMPORTANT (not only) FOR CYGWIN PACKAGE MAINTAINERS
=

The most important aspect for Cygwin for the near future is this:

With the new passwd/group code just in testing (see
http://cygwin.com/ml/cygwin/2014-02/msg00306.html for lots and lots
of information), tools and scripts must not rely anymore on being able
to grep user and group information from /etc/passwd and /etc/group!

The new way to read passwd and group information from, for instance,
service installation helper scripts, is to use the getent tool for
this purpose.

I'd like to urge all maintainers which provide such scripts to look
into their packages and fix them to use the getent tool, rather than
grep'ing /etc/passwd and /etc/group directly.
=


Have fun,
Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple



Re: Does /etc/profile need to set MANPATH?

2014-05-16 Thread Corinna Vinschen
On May 15 13:47, Larry Hall (Cygwin) wrote:
> On 05/15/2014 09:39 AM, Corinna Vinschen wrote:
> >Hmm.  Interesting enough, the current /etc/man.conf already contains
> >/usr/ssl/man.  How long is it doing that already?  If I had known that,
> >I'd removed the /etc/profile.d/openssl.* files long ago :|
> 
> I'm not sure exactly but a quick look in the Cygwin email archives shows
> a reference from 2005 with it.  We were very forward-thinking back then. ;-)

It does?  Did I miss it?  Oh well.

Whatever, it looks like MANPATH can really go away.  Achim, do your worst.


Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat


pgpJ11ucECToD.pgp
Description: PGP signature


Re: Re: email-3.1.4

2014-05-16 Thread Corinna Vinschen
On May 16 09:43, a...@gmx-topmail.de wrote:
> On 6 May 2014 17:23, Corinna Vinschen wrote:
> > On May  6 16:49, axd wrote:
> > > On 6 May 2014 15:58, Corinna Vinschen wrote:
> > > > If you can point me to the fix for this version I will create a new
> > > > package, but I'm not going to debug this myself.
> > > 
> > > Would it be OK for you to get latest version directly from the repository?
> > > http://cleancode.org/projects/email/repository
> > 
> > I don't know in which state of stability the repo is so I'd prefer an
> > official upstream source archive.  I contacted the author.
> 
> Do you have any new information?

Not yet, no.  I pinged Dean twice, no answer yet.

I tried to build from git, but it doesn't work.  The dlib submodule
is giving me headaches with cygport, and the svn and zip pulling
methods omit the dlib subdir entirely.  I'll get to it eventually,
but don't hold your breath.


Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat


pgpHfZwRQ1xlv.pgp
Description: PGP signature


Aw: Re: email-3.1.4

2014-05-16 Thread axd
On 6 May 2014 17:23, Corinna Vinschen wrote:
> On May  6 16:49, axd wrote:
> > On 6 May 2014 15:58, Corinna Vinschen wrote:
> > > If you can point me to the fix for this version I will create a new
> > > package, but I'm not going to debug this myself.
> > 
> > Would it be OK for you to get latest version directly from the repository?
> > http://cleancode.org/projects/email/repository
> 
> I don't know in which state of stability the repo is so I'd prefer an
> official upstream source archive.  I contacted the author.

Do you have any new information?
TIA


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple