Re: kern.ngroups question

Julian Elischer wrote:
Reuben A. Popp wrote:
Hello all,

Can someone explain to me the rationale behind having ngroups_max set to 16 by default?


NFS only supports this much by default (from memory).

Samba (in the guise of Jeremy Allison)
has asked us to follow Linux's lead and support an arbitrary number of Groups
but it hasn't happened yet, Partly due to the question of "what to do about NFS" and partly just due to ENOTIME.
I think at the very least that there should be some more obvious warnings about this potentially serious limitation in either release notes of FreeBSD and or Samba.

I just had to deal with this limitation and it was quite annoying to say the least, it appears Samba is somewhat deliberately designed to give you a hard time when you run into this limit, because as soon as you add a user to more than 16 groups it declares the group file unreadable and as a security measure shuts down all shares and authentication which wrecks a network which relies on Samba.

Also as far as I know Solaris and Linux has long gone past this limitation.

Mike


_______________________________________________
freebsd-hackers@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: kern.ngroups question
    ... wrecks a network which relies on Samba. ... Also as far as I know Solaris and Linux has long gone past this limitation. ...
    (freebsd-hackers)
  • Re: 2GB limit on samba and nfs?
    ... >> file via ftp to the server which transfered without problem. ... >> transferring the file from the server to the client machine, ... >> the samba share on the server. ... >> setup seems to not have the file size limitation. ...
    (Fedora)
  • Re: Security Issues for Windows 2003
    ... Jeremy Allison, author of Samba, reported on SlashDot in April that he has ... reported numerous issues in the MS file sharing code that MS has failed to ... If not, look for the discussion "Samba Exploit Discovered, Fixed". ...
    (microsoft.public.windows.server.security)
  • Re: Are moves within a Samba share atomic?
    ... Jeremy Allison wrote: ... the covers Samba calls the POSIX rename() system call. ... If they're not on the same mounted filesystem (and note this isn't ...
    (comp.protocols.smb)