[Samba] AD group membership limits?

Gibbs, Simon Simon.Gibbs at informa.com
Wed Mar 9 16:19:22 GMT 2005


Thanks for the info (and sorry about my delay in posting back).

I've just tested FC3 running the 2.6 kernel and it does resolve the issue.
So in an ideal world I'd prefer to wait for RHEL4 but because of required
third party drivers and apps that are required it looks like I'm going to
have to recompile with the patches.

I've downloaded the patches from the paths you gave me but I'm not to sure
how to apply them as I've never had to do anything like this before.

Have you (or anyone else out there) got any good pointers - specifically for
these patches.

Thanks for your help.


> From: "Kaplan, Marc" <marc_kaplan at adaptec.com>
> Date: Wed, 2 Mar 2005 13:24:28 -0800
> To: "Gibbs, Simon" <Simon.Gibbs at informa.com>, <samba at lists.samba.org>
> Subject: RE: [Samba] AD group membership limits?
> Simon,
> Yes, I have recompiled the kernel with support for a static NGROUPS with
> a patch from tridge and Rusty Russell. This does not seem to cause any
> problems at all on Samba servers, or with the Linux box in general and
> it does properly allow more supplementary groups.
> Here is what I used IIRC:
> http://ccache.samba.org/ftp/tridge/misc/more_groups_simple.patch
> http://ccache.samba.org/ftp/tridge/misc/maxgroups.patch
> Though I just checked on this, and maybe support for dynamic NGROUPS is
> now in the 2.6 kernel? See:
> http://www.linuxhq.com/kernel/changelog/v2.6/4/
> -Marc
>> -----Original Message-----
>> From: samba-bounces+marc_kaplan=adaptec.com at lists.samba.org
> [mailto:samba-
>> bounces+marc_kaplan=adaptec.com at lists.samba.org] On Behalf Of Gibbs,
> Simon
>> Sent: Wednesday, March 02, 2005 2:58 AM
>> To: samba at lists.samba.org
>> Subject: [Samba] AD group membership limits?
>> Hi,
>> I'm running Samba 3.0.11 on RedHat ES 3 kernel version
> 2.4.21-15.0.4.ELsmp
>> and have a quick question about AD group membership limits
>> Am I right in assuming that Samba is limited by the group membership
>> parameters (ie NGROUP = 32) imposed by the Linux kernel? Is there any
>> workaround in Samba for this?
>> At the moment if a user is a member of more then 32 domain groups they
>> cannot access any shares. If I remove some of the groups to below the
> 32
>> group limit everything is fine.
>> If there isn't a workaround in Samba has anyone reliably recompiled
> the
>> kernel and run Samba after changing the group parameters?
>> I guess this must be a fairly common problem in a lot of sites?
>> Any help with this much appreciated.
>> Cheers,
>> Simon
> ************************************************************************
> **
>> ******
>> The information contained in this email message may be confidential.
> If
>> you are not the intended recipient, any use, interference with,
> disclosure
>> or copying of this material is unauthorised and prohibited. Although
> this
>> message and any attachments are believed to be free of viruses, no
>> responsibility is accepted by T&F Informa for any loss or damage
> arising
>> in any way from receipt or use thereof.  Messages to and from the
> company
>> are monitored for operational reasons and in accordance with lawful
>> business practices.
>> If you have received this message in error, please notify us by return
> and
>> delete the message and any attachments.  Further enquiries/returns can
> be
>> sent to postmaster at tfinforma.com
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list