[Samba] Samba and ZFS
David Magda
dmagda at ee.ryerson.ca
Wed Aug 4 13:35:58 MDT 2010
On Wed, August 4, 2010 10:33, Gaiseric Vandal wrote:
> the ngroup_max issue isn't specific to an active directory
> environment. I found with samba 3.0.x, if you were in more than 16
> groups, you might not have all the access you thought you should but you
> could still logon. (samba didn't check the system ngroups_max.) With
> samba 3.5.x if you are in more groups than "ngroups_max" you won't even
> be able to logon to windows.
>
> NFS is the limiting factor for ngroups_max. If you aren't using nfs you
> can up ngroups_max. Of if you are using nfs with kerberos
> authentication then I think you should also be able to up ngroups_max.
> If you up ngroups_max and a user has > 16 groups, he would be able to
> login to windows BUT non-krb nfs would be broken.
ngroups_max has been expanded in recent versions of OpenSolaris, but this
has not (yet?) been back-ported Solaris 10:
http://www.c0t0d0s0.org/archives/6135-At-last-or-NGROUPS-revisited.html
This change was done to help with the creation of the built-in CIFS server
in OpenSolaris. The new limit is 1024, which is the same maximum as
Windows has for groups.
More information about the samba
mailing list