From owner-freebsd-questions@FreeBSD.ORG Tue Apr 20 07:21:42 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 432E216A4CE for ; Tue, 20 Apr 2004 07:21:42 -0700 (PDT) Received: from postfix3-2.free.fr (postfix3-2.free.fr [213.228.0.169]) by mx1.FreeBSD.org (Postfix) with ESMTP id D6B6743D2F for ; Tue, 20 Apr 2004 07:21:41 -0700 (PDT) (envelope-from kip68@free.fr) Received: from imp1-q.free.fr (imp1-q.free.fr [212.27.42.1]) by postfix3-2.free.fr (Postfix) with ESMTP id AD38AC1CD for ; Tue, 20 Apr 2004 16:21:40 +0200 (CEST) Received: by imp1-q.free.fr (Postfix, from userid 33) id A13641EEF2; Tue, 20 Apr 2004 16:21:40 +0200 (MEST) Received: from 212.155.103.251 ([212.155.103.251]) by imp1-q.free.fr (IMP) with HTTP for ; Tue, 20 Apr 2004 16:21:40 +0200 Message-ID: <1082470900.408531f444050@imp1-q.free.fr> Date: Tue, 20 Apr 2004 16:21:40 +0200 From: kip68@free.fr To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 Subject: Freebsd 5.2.1 & Samba X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Apr 2004 14:21:42 -0000 My goal is to replace an old NT4 file server by a freebsd/samba server. My NT 4 server is a domain member and my freebsd/samba has also to be configured as NT4 domain member. To do this I have installed Freebsd 5.2.1 and samba 2.2.8a (WITH_WINBIND_NSS=yes). Using an nt domain login I am now able to map my freebsd/samba share... This works fine when my domain users do not have more than 16 groups. Otherwise when I try to map the same share I get the following error "The network name can not be found". And I also get the following error in the samba log file : smbd/sec_ctx.c:initialise_groups(244) Unable to initgroups. Error was Operation not permitted smbd/service.c:make_connection(599) This limit is maybe link to this "A fix in the initgroups(3) library function now causes logins to fail if the login process is unable to successfully set the process credentials to include all groups defined for a user. The current kernel limit is 16 groups; administrators may wish to check that users do not have more than 16 groups defined, or they will be unable to log in." (FreeBSD/i386 5.2.1-RELEASE Release Notes) I look for a way to overide this limit. Any help is welcome. Patrick