From owner-freebsd-questions@FreeBSD.ORG Wed Apr 6 15:54:03 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 789FF16A4CE for ; Wed, 6 Apr 2005 15:54:03 +0000 (GMT) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 202EE43D45 for ; Wed, 6 Apr 2005 15:54:03 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.13.1/8.13.3) id j36Fs25M013922; Wed, 6 Apr 2005 10:54:02 -0500 (CDT) (envelope-from dan) Date: Wed, 6 Apr 2005 10:54:02 -0500 From: Dan Nelson To: jonas Message-ID: <20050406155401.GJ64927@dan.emsphone.com> References: <200504061723.20099.jonas@schiebtsich.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200504061723.20099.jonas@schiebtsich.net> X-OS: FreeBSD 5.4-PRERELEASE X-message-flag: Outlook Error User-Agent: Mutt/1.5.8i cc: freebsd-questions@freebsd.org Subject: Re: strange kern.ngroups problems X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2005 15:54:03 -0000 In the last episode (Apr 06), jonas said: > I have a set of users in a NIS/YP database who may login on multiple > machines. > > Now for some reason, on one of those machines (5.3-RELEASE-p6), any > user who belongs to more groups than 4 on the NIS/YP server cannot > login any more. If I'm using su as root to become this user I get: > su: setusercontext: Invalid argument > > This is only the case on this one 5.3-R-p6 machine. All machines have > kern.ngroups set to 16. > > While I'm certain I have not changed a lot from the default install, > is there any place other than the kern.ngroups sysctl variable that I > may have changed by accident to decrease the max groups per user? > > I could also provide output from truss down to: > setgroups(0x11,0xbfbfe660) ERR#22 'Invalid argument' 0x11 = 17, which is a whole lot more than 4. Is the user a member of any local groups (see /etc/group)? What does "id nisuser" print? -- Dan Nelson dnelson@allantgroup.com