[PLUG] rebuilding kernel with NGROUPS_MAX changed
Michael Rasmussen
mikeraz at patch.com
Fri Jan 16 11:04:02 UTC 2004
Background
There is a problem if one if using SAMBA/Winbind and a user attempting to login to a system with their authentication from a NT Domain. If the user belongs to more than NGROUPS_MAX (defined in limits.h) their authentication will fail.
See http://lists.samba.org/archive/samba-technical/2003-March/027605.html for a reference.
In Linux this number is 32. We have many users that belong is 50 or more groups. (Don't ask, I didn't design the model.)
In a followup message to the one linked above it is stated that some utilities in userland are compiled with NGROUPS_MAX. So if one wants to fix the problem, a change to the kernel source and a recompile can lead to problems down the road. However, this was in the context of Solaris.
Question
Is this a problem in Linux land? Or can we indeed change NGROUPS_MAX, recompile the kernel and be good to go? What "shoot self in foot" potentials are we looking at?
--
Michael Rasmussen aka mikeraz
Be appropriate && Follow your curiosity
http://www.patch.com/ http://meme.patch.com/
Get Fixed: http://www.dampfixie.org
The fortune cookie says:
Under the wide and heavy VAX
Dig my grave and let me relax
Long have I lived, and many my hacks
And I lay me down with a will.
These be the words that tell the way:
"Here he lies who piped 64K,
Brought down the machine for nearly a day,
And Rogue playing to an awful standstill."
More information about the PLUG
mailing list