gid doesn't display correctly on SAMBA share using AD

Wed Feb 25 16:48:00 GMT 2015

On Feb 25 11:01, Len Giambrone wrote:
> Using the latest cygwin:
>> $ cygcheck -c cygwin
> Cygwin Package Information
> Package Version Status
> cygwin 1.7.34-6 OK
>> I've asked my admin to update the uidNumber and gidNumber in AD. He has
> done so:
>> DistinguishedName :
> CN=build,OU=GroupAccounts,OU=Users,OU=Cambridge,DC=iscinternal,DC=com
>> Enabled : True
>> gidNumber : 999
>> GivenName : build
>> Name : build
>> ObjectClass : user
>> ObjectGUID : 0901b540-b044-437f-a167-53e1453eab94
>> SamAccountName : build
>> SID : S-1-5-21-112145844-1872675854-1690816760-17189
>> Surname :
>> uidNumber : 56191
>> UserPrincipalName : build@iscinternal.com
>>> The username displays correctly, but the group name does not:
>> $ ls -la foo
> -rw-rw-r-- 1 build Unix_Group+999 0 Feb 25 10:52 foo
>> And this is confirmed by running getent:
>> $ getent passwd build
> build:*:1065765:1049089:U-ISCINTERNAL\build,S-1-5-21-112145844-1872675854-1690816760-17189:/home/build:/bin/bash
>> $ getent passwd group
>> I've read
> https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch-gecos
> 'til I'm blue in the face, and I think this should work.
> What am I missing? How can I debug?

If your admin changed your user account to have a gidNumber 999 only,
then that won't help, Consider: Cygwin tries to find a group with
gidNumber set to 999. How is it supposed to evaluate the right
gidNumber value from some arbitrary user account?
What Cygwin needs to get the right connection between a Windows group
and a gidNumber value is that the *group* entry in AD itself has the
gidNumber set to the right value.
I don't know if that's really the problem in your case, but that seems
the most likely.
Please report back. I'm excited that I'm not the only one interested
in getting this connection between unix and windows ids working :)
Corinna
-- 
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20150225/12d6f532/attachment.sig>