* uinfo.cc (pwdgrp::fetch_account_from_windows): Disallow user accounts

as groups.  Add comment.

winsup/cygwin/ChangeLog

@@ -1,3 +1,8 @@
+2014-08-31  Corinna Vinschen  <corinna@vinschen.de>
+
+	* uinfo.cc (pwdgrp::fetch_account_from_windows): Disallow user accounts
+	as groups.  Add comment.
+
 2014-08-31  Corinna Vinschen  <corinna@vinschen.de>
 
 	* uinfo.cc (cygheap_pwdgrp::init): Fix comment.  Rearrange code for

winsup/cygwin/uinfo.cc

@@ -1504,6 +1504,13 @@ pwdgrp::fetch_account_from_windows (fetch_user_arg_t &arg, cyg_ldap *pldap)
       switch (acc_type)
       	{
 	case SidTypeUser:
+	  /* Don't allow users as group.  While this is technically possible,
+	     it doesn't make sense in a POSIX scenario.  It *is* used for
+	     Microsoft Accounts, but those are converted to well-known groups
+	     above. */
+	  if (is_group ())
+	    return NULL;
+	  /*FALLTHRU*/
 	case SidTypeGroup:
 	case SidTypeAlias:
 	  /* Predefined alias? */