Darren J Moffat <Darren.Moffat at sun.com> wrote:
> > Specifically it may cause non-deterministic behavior. Sorting the group
> > list will cause deterministic behavior, but that is probably worse.
> > Ideally we could just wave our hands and make AUTH_SYS go away. But we
> > can't. What we can do though is this: the NFS server could look up the
> > group memberships of the UID asserted by an AUTH_SYS client.
>
> That would actually help in a few edge case configs even when the group
> list is less than 16. Having AUTH_SYS just ignore the supplementary
> groups all together and collect them itself would be useful - but likely
> a performance impact since now we need a nameservice lookup.
There may be a problem with not sorting in case that order of the supplemtary
groups is a result if hashing or using binry trees in the naming service.
Not sorting in such a case could result in non-deterministic behavior after
an data base upgrade was done.
J?rg
--
EMail:joerg at schily.isdn.cs.tu-berlin.de (home) J?rg Schilling D-13353 Berlin
js at cs.tu-berlin.de (uni)
joerg.schilling at fokus.fraunhofer.de (work) Blog:
http://schily.blogspot.com/
URL: http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily
