From owner-freebsd-current@freebsd.org Mon Apr 16 15:49:11 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 08FCEF8D4AD for ; Mon, 16 Apr 2018 15:49:11 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: from spindle.one-eyed-alien.net (spindle.one-eyed-alien.net [199.48.129.229]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A501187986; Mon, 16 Apr 2018 15:49:10 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: by spindle.one-eyed-alien.net (Postfix, from userid 3001) id 05F975A9F13; Mon, 16 Apr 2018 15:49:04 +0000 (UTC) Date: Mon, 16 Apr 2018 15:49:03 +0000 From: Brooks Davis To: Julian Elischer Cc: freebsd-current Subject: Re: anyone running with ngroups increased from 16? Message-ID: <20180416154903.GA44509@spindle.one-eyed-alien.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="XsQoSWH+UP9D9v3l" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Apr 2018 15:49:11 -0000 --XsQoSWH+UP9D9v3l Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Apr 16, 2018 at 06:37:53PM +0800, Julian Elischer wrote: > Windows users seem to have an almost unlimited number of groups and=20 > soem places seem to use them a LOT. > This gives Posix systems problems with deciding how to handle them=20 > all. Especially when getting > user credentials from winbindd (samba). >=20 > Does anyone know of any work done to either bypass this limit or to at=20 > least expand it? I fixed this in 2009 for everything but NFS AUTH_SYS. NGROUPS_MAX is 1023. IIRC the usual hack employed in storage systems is to ignore the groups provided by AUTH_SYS and get them from winbindd. I don't know of a public implementation of that. -- Brooks --XsQoSWH+UP9D9v3l Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJa1MXvAAoJEKzQXbSebgfAfMUH/3cAgVc4K+wYwqEszvbvbGrG V8WO8LCot3nwFMnVp1yfW4FpXf6Vsli4rTJIzQW9fuCgwAXHj5aiCDi8dp3HFLIK U7zlUrsMenNgPPdU/3yPlDAUo4Mmnh6qW5Vp4dsv8jnzoDRv0xeKXh4UffLi5+Rc gKjhPqeno+aG9aUiDUCFkkO/7bUG61qh5DWiwZFtuFyPzqUWm259OWvoxQoufgeE 6gFj5QOafFmN/xkrD2n0eMIcaX1VOpLG0vMGwxYoF+ZKSkbvvlByw1TjD0EV4/rm V8J/rvcU/ix6eIwdGUoJSknfmFeI1FynyIRUmiY6tBLOcRxT8k9qb+ze5Dw/dxM= =A7Eg -----END PGP SIGNATURE----- --XsQoSWH+UP9D9v3l--