From owner-freebsd-questions@FreeBSD.ORG Mon Jul 24 15:08:52 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 46A9F16A4DA for ; Mon, 24 Jul 2006 15:08:52 +0000 (UTC) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4698243D6A for ; Mon, 24 Jul 2006 15:08:50 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.13.1/8.13.4) id k6OF8lfD012976; Mon, 24 Jul 2006 10:08:47 -0500 (CDT) (envelope-from dan) Date: Mon, 24 Jul 2006 10:08:46 -0500 From: Dan Nelson To: Roberto Nunnari Message-ID: <20060724150846.GF22820@dan.emsphone.com> References: <44C4D679.602@supsi.ch> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <44C4D679.602@supsi.ch> X-OS: FreeBSD 5.5-PRERELEASE X-message-flag: Outlook Error User-Agent: Mutt/1.5.12-2006-07-14 Cc: "'freebsd-questions@freebsd.org'" Subject: Re: max number of groups a user can be member of X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jul 2006 15:08:52 -0000 In the last episode (Jul 24), Roberto Nunnari said: > Hi everybody. > > Could anybody tell me the reason why by default FreeBSD > limits the number of groups a user can be member of to 16? Compatibility with the NFS protocol. A google search on "nfs 16 groups" returned a lot of hits. http://www.sunmanagers.org/archives/1998/1328.html http://nfsworld.blogspot.com/2005/03/whats-deal-on-16-group-id-limitation.html You can raise the limit, but you need to make sure that you raise it on all servers that share NFS mounts. If you don't you may end up with remote file access either failing or not passing the full group membership list to the remote server, which could cause incorrect "permission denied" errors. -- Dan Nelson dnelson@allantgroup.com