Samba and groups > 16

Gerald (Jerry) Carter jerry at samba.org
Tue Mar 1 15:57:24 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Collier-Brown wrote:
|  Solaris supports getgroups, and I see tests in
| ./testsuite/nsswitch/initgroups.c
| which use it to find the number of groups so we can
| get them all, but  the code in source/lib/system_smbd.c
| finds the number of groups, but then then uses initgroups()
| which has a hard limit!

The problem is not finding the supplementary groups,
but rather establishing them when running under the
uid of that user.  We have to set the secondary groups
for the running process.  This is where the NGROUP_MAX
comes in to play.  The OS won't let a process have
more than NGROUS_MAX gids in its list of secondary
groups.






cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCJJDkIR7qMdg1EfYRAoCRAKCPacdKxQgj484YQq7/MWSmSItQJACfcFnk
OUh4rmQcH5Dwp2Edj8hA1jo=
=Mdr+
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list