Re: Cygrunsrv and special Windows virtual accounts "NT SERVICE"

[Corinna Vinschen <corinna-cygwin at cygwin dot com>]

On Dec  7 16:49, Lavrentiev, Anton (NIH/NLM/NCBI) [C] wrote:
> > per the bad user/pass combo, presumably).
> 
> Per MSDN, http://msdn.microsoft.com/en-us/library/windows/desktop/ms682450%28v=vs.85%29.aspx :
> 
> If the account name specified by the lpServiceStartName parameter is the name of a managed service account or virtual account name, the lpPassword parameter must be NULL.
> 
> But cygrunsrv passes either "" or the actual string (when any username is provided).
> 
> It should pass NULL for the username that look like "NT SERVICE\svcname":
> 
>   if (!(sh = CreateService (sm, san.name (), disp, SERVICE_ALL_ACCESS,
> 			    SERVICE_WIN32_OWN_PROCESS |
> 			    (interactive ? SERVICE_INTERACTIVE_PROCESS : 0),
> 			    type == Auto ? SERVICE_AUTO_START
> 			    		 : SERVICE_DEMAND_START,
> 			    SERVICE_ERROR_NORMAL, mypath, NULL, NULL,
> 			    dependencies,
> 			    username, username ? pass ?: "" : NULL)))

I'm wondering if it's such a bright idea to use a NULL password based on
a check for a certain domain.  That's practically guaranteed to break
at one point again.

Is it worth at all to support empty passwords?  If not, we could always
use NULL if !pass || pass[0] == '\0'.

Or, alternatively, what about something like `-w NULL'?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple