Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 7 Dec 2005 10:32:29 -0800 (PST)
From:      Jon Falconer <jfalconer@puc.edu>
To:        Ian Moore <no-spam@swiftdsl.com.au>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Changing maximum number of groups in FBSD - is it feasible?
Message-ID:  <Pine.BSI.4.05L.10512071030440.26983-101000@ecf.puc.edu>
In-Reply-To: <200512071741.57495.no-spam@swiftdsl.com.au>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--nextPart1821036.HiO5d0GaCl
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.BSI.4.05L.10512071030442.26983@ecf.puc.edu>
Content-Disposition: INLINE


On Wed, 7 Dec 2005, Ian Moore wrote:

> Hi,
> 
> I'm toying with the idea of increasing the maximum number of groups a user can 
> belong to on one of my servers - we have a rather complex organisation and 
> we're hitting the 15 group limit for some people.
> 
> There seems to be differing opinions on how to do this and if it's actually 
> feasible. One post I found said:
> 
> > in src/sys/sys/syslimits.h there is a constant named 'NGROUPS_MAX'. 
> > change it to however many you need (within reason), rebuild/install world 
> > and kernel. 
> 
> Another said you have to change all sorts of things in the source, modify a 
> kernel parameter, rebuild world and rebuild any port that uses NGROUPS - 
> which probably means a portupgrade -fa.
> 
> There is talk of a maxgroups() parameter in the kernel, but NOTES makes no 
> mention of this.
> 
> I wonder too if some apps would need their own configuration altered to allow 
> them to work with the higher limit.
> 
> So I just wanted to ask if anyone has successfully raised the NGROUPS_MAX 
> limit, especially when running samba & nfs on the system?
> 
> If not, I'll work around the problem a different way.
> 
> (BTW I'm running 5.4-RELEASE)
> 
> Cheers,
> -- 
> Ian
> gpg key: http://home.swiftdsl.com.au/~imoore/no-spam.asc
> 

Ian,

Since you are running FreeBSD 5.x, have you considered using ACLs? See the
handbook section 14.12.

Jon

--nextPart1821036.HiO5d0GaCl
Content-Type: APPLICATION/PGP-SIGNATURE; CHARSET=US-ASCII
Content-ID: <Pine.BSI.4.05L.10512071030443.26983@ecf.puc.edu>
Content-Description: 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQBDlos9PUlnmbKkJ6ARAlCEAJ95glkBVOXNux1o39QjWTCSFe3+JQCdHx/j
5kDR7OdsCCjt6yYRiUM46Bs=
=kiG+
-----END PGP SIGNATURE-----

--nextPart1821036.HiO5d0GaCl--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.05L.10512071030440.26983-101000>