[Arthur de Jong] > Note that id -Gn without parameters can return different results > than id -Gn with a user parameter. On my system I use pam_group to > assign extra groups to users who login through gdm:
Yes. We use the same in Debian Edu. Not quite sure why the desktop-profile code appear to handle other users that the one logging in, but one should definitely keep in mind that it isn't sure all the users group will be listed by 'groups username'. > Also note that the id and groups commands from sid do the more > efficient call to initgroups() instead of going over all groups > (when the username is supplied). This helps a lot in terms of lookup > speed with nss-ldapd. Actually, initgroups is only called when the user log in, and then the result is cached by the kernel, so id and groups fetches it from the kernel using getgroups() and does not extract it again by calling initgroups(), when looking up the current user. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
