On Wed, August 4, 2010 10:33, Gaiseric Vandal wrote: > the ngroup_max issue isn't specific to an active directory > environment. I found with samba 3.0.x, if you were in more than 16 > groups, you might not have all the access you thought you should but you > could still logon. (samba didn't check the system ngroups_max.) With > samba 3.5.x if you are in more groups than "ngroups_max" you won't even > be able to logon to windows. > > NFS is the limiting factor for ngroups_max. If you aren't using nfs you > can up ngroups_max. Of if you are using nfs with kerberos > authentication then I think you should also be able to up ngroups_max. > If you up ngroups_max and a user has > 16 groups, he would be able to > login to windows BUT non-krb nfs would be broken.
ngroups_max has been expanded in recent versions of OpenSolaris, but this has not (yet?) been back-ported Solaris 10: http://www.c0t0d0s0.org/archives/6135-At-last-or-NGROUPS-revisited.html This change was done to help with the creation of the built-in CIFS server in OpenSolaris. The new limit is 1024, which is the same maximum as Windows has for groups. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
