From owner-freebsd-hackers@FreeBSD.ORG  Wed Sep 26 21:00:46 2007
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id ECA0716A417
	for <freebsd-hackers@freebsd.org>; Wed, 26 Sep 2007 21:00:46 +0000 (UTC)
	(envelope-from julian@elischer.org)
Received: from outE.internet-mail-service.net (outE.internet-mail-service.net
	[216.240.47.228])
	by mx1.freebsd.org (Postfix) with ESMTP id B705213C48D
	for <freebsd-hackers@freebsd.org>; Wed, 26 Sep 2007 21:00:46 +0000 (UTC)
	(envelope-from julian@elischer.org)
Received: from mx0.idiom.com (HELO idiom.com) (216.240.32.160)
	by out.internet-mail-service.net (qpsmtpd/0.40) with ESMTP;
	Wed, 26 Sep 2007 14:00:24 -0700
X-Client-Authorized: MaGic Cook1e
X-Client-Authorized: MaGic Cook1e
Received: from julian-mac.elischer.org (nat.ironport.com [63.251.108.100])
	by idiom.com (Postfix) with ESMTP id A5D59126503;
	Wed, 26 Sep 2007 14:00:23 -0700 (PDT)
Message-ID: <46FAC866.5050602@elischer.org>
Date: Wed, 26 Sep 2007 14:00:22 -0700
From: Julian Elischer <julian@elischer.org>
User-Agent: Thunderbird 2.0.0.6 (Macintosh/20070728)
MIME-Version: 1.0
To: "rsync.net" <info@rsync.net>
References: <20070925093722.N21960@mail.rsync.net>
	<46FAA37B.3020903@elischer.org>
	<20070926130845.U21960@mail.rsync.net>
In-Reply-To: <20070926130845.U21960@mail.rsync.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-hackers@freebsd.org
Subject: Re: kern.ngroups (non) setting ... new bounty ?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Sep 2007 21:00:47 -0000

rsync.net wrote:
> 
> On Wed, 26 Sep 2007, Julian Elischer wrote:
> 
>> rsync.net wrote:
>>> It has been impossible to change kern.ngroups - at least for several years
>>> now.  It was not fixed in either 5.x or 6.x :
>>>
>>> http://lists.freebsd.org/pipermail/freebsd-bugs/2007-January/022140.html
>>>
>>> It is seemingly a difficult problem:
>>>
>>> http://www.atm.tut.fi/list-archive/freebsd-stable/msg09969.html   [1]
>>>
>>> However it should be solved - we can't be the only ones out there trying
>>> to add a UID to more than 16 groups...
>> the big question is what do you do for NFS?  remember something about
>> it only having a fixed storage for groups.
> 
> 
> (snip)
> 
> 
>>> [1]  Is it indeed true that these programs are broken by not following
>>>      NGROUPS_MAX from syslimits.h?
> 
> 
> Assuming the answer to the above footnote is "yes", would it be reasonable
> to fix the OS generally, but continue to hard code the limits in things
> like NFS ?
> 
> Are you saying that, unlike other items, NFS _does_ respect NGROUPS_MAX ?

actually it doesn't

see:

nfs/rpcv2.h:#define     RPCAUTH_UNIXGIDS 16

but what do we do if a user has > 16?