Re: Promoting cygwin system to member server
Michael T. Davis wrote:
We have a standalone server running Windows Server 2003 SP2. We would like
to promote it to a member server in an existing Windows domain. Will this
affect how cygwin accounts are managed and maintained? We want to preserve
the functionality of the existing local accounts, and be able to continue
to manage them (add, remove, etc.) so that the users can continue to use
cygwin (esp. the SSH server) independent of the Windows domain. (In fact,
we don't want domain users to access the system via cygwin's SSH server,
only local users.)
I can't say for sure but advise caution. I once installed Cygwin as a local
machine user on a non-domain machine which I then joined to a domain and found
some screwy perms settings, but I just fixed them and got on with what I was
doing rather than investigate, so I don't even know whether it was related.
That was on a simple install with no services set up; your arrangement is more
complex. The best advice I can give in the circumstances is to use a system
imaging (or other backup) tool, try it, and test thoroughly.
we don't want domain users to access the system via cygwin's SSH server,
only local users.)
That bit should be easy; just don't use the -d option when generating
/etc/{passwd,group} and don't add their keys to the sshd authorized keys file.
cheers,
DaveK
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
Promoting cygwin system to member server
We have a standalone server running Windows Server 2003 SP2. We would like to promote it to a member server in an existing Windows domain. Will this affect how cygwin accounts are managed and maintained? We want to preserve the functionality of the existing local accounts, and be able to continue to manage them (add, remove, etc.) so that the users can continue to use cygwin (esp. the SSH server) independent of the Windows domain. (In fact, we don't want domain users to access the system via cygwin's SSH server, only local users.) Thanks, Mike -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Promoting cygwin system to member server
On Apr 2 07:45, Michael T. Davis wrote: We have a standalone server running Windows Server 2003 SP2. We would like to promote it to a member server in an existing Windows domain. Will this affect how cygwin accounts are managed and maintained? We want to preserve the functionality of the existing local accounts, and be able to continue to manage them (add, remove, etc.) so that the users can continue to use cygwin (esp. the SSH server) independent of the Windows domain. (In fact, we don't want domain users to access the system via cygwin's SSH server, only local users.) Cygwin doesn't make a difference but Windows does. The idea about what's a local account and what's a global account is a bit different on a domain server. However, I never did this promotion thingy of a server into an existing domain. I don't know what willl change, but *what* changes is Windows in the first place. If the local accounts persist, they should be managable as usual on the machine. Guarantee? Nope. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Promoting cygwin system to member server
Michael T. Davis wrote: We have a standalone server running Windows Server 2003 SP2. We would like to promote it to a member server in an existing Windows domain. Mike, Your description may have been not specific enough. I believe Corinna understood that you meant to make the server a member of the domain and then make it a domain controller. This would remove the local accounts. But you may not want to make the server a DC, just a member of the domain. Either way, I have no specific experience on this particular scenario. You need either a guru or a test server. Have fun, -- Sylvain RICHARD -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
