[Samba] vfs_ChDir fails, even though the share is read-write for that user

[James R Grinter]

On Wed, Dec 12, 2007 at 02:15:45PM -0800, Jeremy Allison wrote:
> No, sorry. You need to find out if the smbd server has the
> correct groups associated with it's token when it's representing
> the user.
> 
> Not sure how to get ps to display this info.

pcred(1) will show all process credentials, on Solaris (8, 9, 10)

http://blogs.sun.com/peteh/date/20050614 has a discussion of the issues
with changing it in future Solaris releases.

NGROUPS_UMAX (a constant built into the Solaris kernel) caps the
tuneable ngroups_max to a maximum 32.

Using file ACLs is the only other approach, currently, for Solaris
(which is a pain, obviously, as maintaining individual entries for
users on ACLs is far more awkward than putting allowed users into a
group!)

James.