From owner-freebsd-bugs@FreeBSD.ORG Sun Jan 27 15:40:05 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 473F916A419 for ; Sun, 27 Jan 2008 15:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 373F313C4D9 for ; Sun, 27 Jan 2008 15:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m0RFe5iQ014047 for ; Sun, 27 Jan 2008 15:40:05 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m0RFe5i1014046; Sun, 27 Jan 2008 15:40:05 GMT (envelope-from gnats) Date: Sun, 27 Jan 2008 15:40:05 GMT Message-Id: <200801271540.m0RFe5i1014046@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Bruce Cran Cc: Subject: Re: kern/103770: Group limitation X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Bruce Cran List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Jan 2008 15:40:05 -0000 The following reply was made to PR kern/103770; it has been noted by GNATS. From: Bruce Cran To: bug-followup@freebsd.org, dj@djcustom.com Cc: Subject: Re: kern/103770: Group limitation Date: Sun, 27 Jan 2008 15:33:02 +0000 It sounds like you may be bumping into the limit on group membership: in FreeBSD a user can only be a member of 16 groups due to a hard-coded limit in the NFS v2/3 protocol. There are also slightly higher limits imposed by both the kernel and userland because of the expectation that a user will only be a member of a small number of groups. While it is possible to fix this limitation, doing so will require quite a bit of work to change the data structures in the kernel and remove any limitations in userland programs which process groups. To verify that this is the issue you've found, does the login problem only occur when you're a member of 16 groups and everything works properly when you're a member of 15 or fewer groups? -- Bruce