Ulrich Drepper <[EMAIL PROTECTED]> writes:
> Thomas Mueller <[EMAIL PROTECTED]> writes:

>> A little program illustrates what I mean:

> It doesn't explain nearly enough.  What is your setup (where do these
> 32xxx groups come from)?

Since this bug report is in the context of AFS, I can at least answer that
question.  AFS uses supplemental groups to control access to in-kernel
authentication information; this is called a PAG (process authentication
group).

Thomas, at least per the man page on Solaris, I think this is the default
behavior of initgroups.  initgroups says that it reads the groups database
and initializes the supplemental group list to match the user's membership
in various groups; implicit in "initializes" would be a discarding of all
existing memberships.

Sounds to me like a glibc 2.1 bug fixed in 2.2.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>
_______________________________________________
OpenAFS-devel mailing list
[EMAIL PROTECTED]
https://lists.openafs.org/mailman/listinfo.cgi/openafs-devel

Reply via email to