[Samba] Samba 2.2.7a - Unix groups bug?

[Paul Taylor]

Further to comments made in another thread, Samba 2.2.7a appears to
limit the maximum number of Unix groups a user can have to 13
(NGROUPS_MAX - 3.)

The cause appears to be Samba adding to the groups list returned
by the getgroups() system call, such that a subsequent setgroups()
call has the number of groups set to (# of groups + 3).

For instance, my account has 12 groups; running truss against the smbd
thread for my account showed it calling "setgroups(15, 0x.....);"
For another user who has 14 groups, the call is "setgroups(17, 0x....);"
- this fails with "Err#22 EINVAL", since 17 is greater than NGROUPS_MAX
(= 16 under Solaris.)

The difference of 3 groups may be environment/implementation specific.

This behaviour didn't occur under Samba 2.2.0, so I suspect that
one of the fixes to group handling mentioned in the Changelogs is
responsible.

Any ideas?

Thanks in advance.

-- 

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
   Paul Taylor
   taylpm at si1.dod.gov.au