Re: sending email from Cygwin

[luke dot kendall at cisra dot canon dot com dot au]

On 14 Jul, Pierre A. Humblet wrote:
>  At 12:02 PM 7/15/2004 +1000, luke.kendall@cisra.canon.com.au wrote:
>  >On 14 Jul, Pierre A. Humblet wrote:
>  >>  Thanks for the feedback. 
>  >>   
>  >>  The problem is that the exim startup code thinks that you are a
>  privileged 
>  >>  user (see "privileged 1" above). It does that by checking that you have
>  the 
>  >>  "Create Token" privilege (you have not answered my question about having 
>  >>  given yourself unusual privileges).  
>  >>  However you are not in the admins group (544), so you can't setuid after 
>  >>  all. 
>  >
>  >So that the main user of the machine is able to install software, they
>  >are given admin privileges.  So, I have admin privileges.  I can find
>  >out more details about what that precisely means by asking our Windows
>  >sysadmin people, if it would help?
>  
>  You don't seem to have the admin privilege, at least not in the usual sense
>  of being in the Administrators group. You are not even a PowerUser.

Strange.  I am, you know.  If I call up User Accounts, I see myself listed
in the group "Administrators", and I certainly have the ability to install
and unistall software.

>  $ id 
>  uid=11021(luke) gid=10513(Domain Users) groups=12919(adaytum),10513(Domain
>  Users),13876(MS_VisualStudio),15155(RitaTS),13761(ZoneAlarm)
>  
>  Actually another explanation is that your /etc/group file is incomplete.
>  You don't seem to be in any local group... 
>  Are the lines produced by "mkgroup -l" in /etc/group?
>  If not, do "mkgroup -l >> /etc/group" and try exim -c again.
>  Check also that uid 18 (system) is in /etc/passwd.
>  Else do "mkpasswd -l >> /etc/passwd"

You're right about the mkgroup -l:

: /home/luke ; grep -i admin /etc/group
Domain Admins:S-1-5-21-5706737-76180391-208020174-512:10512:
Enterprise Admins:S-1-5-21-5706737-76180391-208020174-519:10519:
Schema Admins:S-1-5-21-5706737-76180391-208020174-518:10518:
sysadmin:S-1-5-21-5706737-76180391-208020174-3984:13984:
: /home/luke ; mkgroup -l 
root:S-1-5-32-544:0:
SYSTEM:S-1-5-18:18:
None:S-1-5-21-1694720459-1161744426-439199626-513:513:
Administrators:S-1-5-32-544:544:
Backup Operators:S-1-5-32-551:551:
Guests:S-1-5-32-546:546:
Network Configuration Operators:S-1-5-32-556:556:
Power Users:S-1-5-32-547:547:
Remote Desktop Users:S-1-5-32-555:555:
Replicator:S-1-5-32-552:552:
Users:S-1-5-32-545:545:
Debugger Users:S-1-5-21-1694720459-1161744426-439199626-1003:1003:
HelpServicesGroup:S-1-5-21-1694720459-1161744426-439199626-1001:1001:
: /home/luke ; mkgroup -l >> /etc/group
: /home/luke ; grep -i system /etc/passwd
SYSTEM:*:18:544:,S-1-5-18::


>  By the way, exim-config should give you warnings if those files are
>  incomplete. Did you ever run it?

No.  I never saw any mention of it in the man page, nor during setup,
nor when I ran exim manually, sorry.

>  The question I was asking is whether you have the "Create Token" privilege.
>  You can check that from the Users control panel, or with the
>  editrights cygwin tool. I am on WinME, so I can't give you
>  step by step instructions on how to do that. 

If I look at Control Panel -> User Accounts -> Advanced -> Advanced User
Management -> Local Users and Groups, I don't appear in the list of Users
there.  Odd?

I'm unsure if I'm looking in the right place.

Does this help? :

: /home/luke ; editrights -u luke -l -v
editrights version 1.01: a cygwin application to edit user rights
     on a Windows NT system.
Copyright Chris Rodgers <editrights-at-bulk.rodgers.org.uk>, Sep, 2003.
All rights reserved. See LICENCE for further details.

Listing rights for luke:

Done!

>  If your Windows sysadmin people give you that privilege, I think they
>  should reconsider their policies. 

There are excellent reasons for allowing all our users for having these
permissions - I can explain in more detail later, if you are
unconvinced.  (We are an unusual company.)

luke



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/