diff --git a/winsup/utils/ChangeLog b/winsup/utils/ChangeLog index c67a94d38..a21d0a9de 100644 --- a/winsup/utils/ChangeLog +++ b/winsup/utils/ChangeLog @@ -1,3 +1,7 @@ +2009-03-26 Yaakov Selkowitz + + * utils.sgml (passwd -R): Remove references to CYGWIN="server". + 2009-03-24 Corinna Vinschen * cygcheck.cc (dump_sysinfo): Fix compiler warning in printf. diff --git a/winsup/utils/utils.sgml b/winsup/utils/utils.sgml index cffaa9d8b..8593bd348 100644 --- a/winsup/utils/utils.sgml +++ b/winsup/utils/utils.sgml @@ -933,8 +933,7 @@ operate on current user. System operations must not be mixed with user operations. Don't specify a USER when triggering a system operation. Don't specify a user or any other option together with the -R option. -Non-Admin users can only store their password if cygserver is running and -the CYGWIN environment variable is set to contain the word 'server'. +Non-Admin users can only store their password if cygserver is running. Note that storing even obfuscated passwords in the registry is not overly secure. Use this feature only if the machine is adequately locked down. Don't use this feature if you don't need network access within a remote @@ -1029,11 +1028,8 @@ privileged operation which only administrative accounts are allowed to do. If normal, non-admin users should be allowed to enter their passwords using passwd -R, it's required to run cygserver as a service under the LocalSystem account -and the environment variable CYGWIN -(see ) -must be set to contain the "server" setting before running -passwd -R. This only affects storing passwords. -Using passwords in privileged processes does not require +before running passwd -R. This only affects storing +passwords. Using passwords in privileged processes does not require cygserver to run. Limitations: Users may not be able to change their password on