[Samba] Question regarding user or group quantity limits

PIGNOL, Christian christian_pignol at merck.com
Thu Jan 15 08:18:17 GMT 2004

Hello Brian,

For your information, I've found the solution ... For Redhat 9.0 I suppose !

In the "smb.conf" the "winbind uid" and "winbind gid" parameters indicates
respectvely the uid and gid range  dynamically allocated during remote
identifications ... By defaults winbind uid=10000-20000 and winbind
gid=10000-20000 ... This values explains than you don't retrieve all your
windows users and groups ! After uid (or gid) reach the upper limit of the
range (20000) the getent command is stopped.

In another way, the "/etc/login.defs file" (redhat 9.0) contain some
parameters which are also importants in this situation ... like maximum uid
for the "useradd" command an maximum gid for the "groupadd" command. This
file is probably different on RH Enterprise 3.0 !

After increasing the "login.defs" parameters and the winbind uid and gid in
the "smb.conf", I'm now able (after a very very long time of course !) to
see all my windows domain users and groups with the "getent passwd" and
"getent group" commands.


Christian PIGNOL
* (+33) 473 67 62 96
*   (+33) 473 67 61 29
*  christian_pignol at merck.com

-----Original Message-----
From: Brian Otto [mailto:ottob at dteenergy.com] 
Sent: mardi 13 janvier 2004 17:45
To: PIGNOL, Christian
Subject: RE: [Samba] Question regarding user or group quantity limits

The problem disappeared under redhat 3.0 enterprise


So I never figured out how to fix it.  Sorry,


On Tue, 2004-01-13 at 11:11, PIGNOL, Christian wrote:
> Well,
> It seems that I have exactly the same problem with my Samba 2.2.7a-8.9.0
> (Redhat 9.0) !
> I have ... around ... 60000 users and 140000 groups !
> The "getent passwd" command don't show me all the existing users but
> 10000 and the "getent group" command take a very long time but seems to be
> active ! When I redirect in a groups.txt file the result of the "getent
> group", the size of this file regularely grow ... But ... Very very slowly
> Have you receive a respons to your question ? I'm very interrested.
> Thanks a lot for your help.
> Best regards
> Christian PIGNOL
> -----Original Message-----
> From: Brian C Otto [mailto:ottob at dteenergy.com] 
> Sent: mardi 2 septembre 2003 17:12
> To: samba at lists.samba.org
> Subject: [Samba] Question regarding user or group quantity limits
> Anyone know what the max # of domain users or groups samba will
> effectively support?
> I'm running samba v3.0.0RC2, and authenticating it against an ADS
> server, and the domain has a massive number of users and groups (14000+
> and 4000+), when I run a 'getent group'   winbindd seems to die on me.
> 'getent passwd' doesn't seem to show all users, either.
> Any ideas?  OS is SuSE enterprise 8.0.
> -Brian Otto
> --
> The opinions expressed herein are my own and do not necessarily reflect
> those of my employers

Notice:  This e-mail message, together with any attachments, contains
information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New
Jersey, USA 08889), and/or its affiliates (which may be known outside the
United States as Merck Frosst, Merck Sharp & Dohme or MSD) that may be
confidential, proprietary copyrighted and/or legally privileged, and is
intended solely for the use of the individual or entity named on this message.
If you are not the intended recipient, and have received this message in
error, please immediately return this by e-mail and then delete it.

More information about the samba mailing list