Date: Sat, 10 Dec 2005 09:26:36 +1030 From: Ian Moore <no-spam@swiftdsl.com.au> To: freebsd-questions@freebsd.org Cc: Igor Robul <igorr@speechpro.com> Subject: Re: Changing maximum number of groups in FBSD - is it feasible? Message-ID: <200512100926.44709.no-spam@swiftdsl.com.au> In-Reply-To: <20051208083015.GE89624@sysadm.stc> References: <200512071741.57495.no-spam@swiftdsl.com.au> <fb6605670512071048h4235c584l48574cda7a2214a2@mail.gmail.com> <20051208083015.GE89624@sysadm.stc>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart4668279.CAnrE6lIaS Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 08 December 2005 19:00, Igor Robul wrote: > On Wed, Dec 07, 2005 at 01:48:04PM -0500, Michael P. Soulier wrote: > > On 12/7/05, Ian Moore <no-spam@swiftdsl.com.au> wrote: > > > Hi, > > > > > > I'm toying with the idea of increasing the maximum number of groups a > > > user can belong to on one of my servers - we have a rather complex > > > organisation and we're hitting the 15 group limit for some people. > > > > Have you considered cascading groups? That's the normal workaround on > > Enterprise Unix systems like HP-UX and Solaris. > > > > Instead of putting everyong in "group", do this instead. > > > > group:*:100:group1,group2 > > group1:*:101:user1,user2 > > group2:*:102:user3, user4 > > AFAIK FreeBSD (and Linux) does not support nested groups (I'm not sure > about POSIX) :-( Well, there goes that idea! > So you can use ACLs (as I do now), or you can recompile world/kernel > with changed syslimits.h: > syslimits.h:#define NGROUPS_MAX 16 > > as I did with FreeBSD-4.X. But be careful on system upgrading. > You need compile both world and kernel because these limits get compiled > to libc, kernel and some static linked utilite and some static linked > utilites.. So it actually does work! And there's no need to adjust or re-compile any=20 ports, just world and kernel? Cheers, =2D-=20 Ian gpg key: http://home.swiftdsl.com.au/~imoore/no-spam.asc --nextPart4668279.CAnrE6lIaS Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQBDmgusPUlnmbKkJ6ARAvcJAKCI5gDwvPhV0Mcu9dNqQEKaFwA5eACfe9qM uzF8Se+T1+vWSyZO0hQLQPQ= =bAsB -----END PGP SIGNATURE----- --nextPart4668279.CAnrE6lIaS--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200512100926.44709.no-spam>