[Samba] Samba and ZFS

[David Magda]

On Wed, August 4, 2010 10:33, Gaiseric Vandal wrote:
> the ngroup_max issue isn't specific to an active directory
> environment.    I found with samba 3.0.x, if you were in more than 16
> groups, you might not have all the access you thought you should but you
> could still logon.  (samba didn't check the system ngroups_max.)  With
> samba 3.5.x if you are in more groups than "ngroups_max" you won't even
> be able to logon to windows.
>
> NFS is the limiting factor for ngroups_max.  If you aren't using nfs you
> can up ngroups_max.  Of if you are using nfs with kerberos
> authentication then I think you should also be able to up ngroups_max.
> If you up ngroups_max  and a user has > 16 groups, he would be able to
> login to windows BUT non-krb nfs would be broken.

ngroups_max has been expanded in recent versions of OpenSolaris, but this
has not (yet?) been back-ported Solaris 10:

http://www.c0t0d0s0.org/archives/6135-At-last-or-NGROUPS-revisited.html

This change was done to help with the creation of the built-in CIFS server
in OpenSolaris. The new limit is 1024, which is the same maximum as
Windows has for groups.