Re: Old user can't log in

2009-02-16 Thread Mel
On Thursday 12 February 2009 19:17:05 Da Rock wrote: I've been following this thread with interest: are you saying FreeBSD logins cannot handle more than 16 groups? If so, why? Because the kernel needs to keep this info. At the time of conception, 16 shorts (16*4=64) per login and maxusers

Re: Old user can't log in

2009-02-13 Thread John Almberg
On Feb 13, 2009, at 1:21 AM, Da Rock wrote: On Thu, 2009-02-12 at 21:52 -0800, Chuck Swiger wrote: On Feb 12, 2009, at 8:52 PM, Da Rock wrote: With reasonable organization, and appropriate use of sudo or setgid binaries for things like people who use SVN or CVS, there generally isn't reason

Re: Old user can't log in

2009-02-13 Thread Chuck Swiger
On Feb 12, 2009, at 10:21 PM, Da Rock wrote: So you're talking in terms of the FS only? Nope. A filesystem might have ACL capability available in it's specification, but without kernel and userland support, that capability isn't accessible or meaningful. I thought you said the kernel

Re: Old user can't log in

2009-02-13 Thread Timur I. Bakeyev
On Fri, Feb 13, 2009 at 5:17 AM, Da Rock rock_on_the_...@comcen.com.au wrote: On Thu, 2009-02-12 at 21:48 -0500, John Almberg wrote: I've been following this thread with interest: are you saying FreeBSD logins cannot handle more than 16 groups? If so, why? Is this mitigated by using other

Old user can't log in

2009-02-12 Thread John Almberg
Just ran into a strange problem... I have a long-standing user account on my FreeBSD box that no longer works. She can't ssh into the box, and I can't even su to her account. $ su jessica Password: su: setusercontext: Invalid argument Doing some googling, I did find people with similar

Re: Old user can't log in

2009-02-12 Thread Chuck Swiger
On Feb 12, 2009, at 3:14 PM, John Almberg wrote: Just ran into a strange problem... I have a long-standing user account on my FreeBSD box that no longer works. She can't ssh into the box, and I can't even su to her account. $ su jessica Password: su: setusercontext: Invalid argument Does

Re: Old user can't log in

2009-02-12 Thread John Almberg
On Feb 12, 2009, at 7:19 PM, Chuck Swiger wrote: On Feb 12, 2009, at 3:14 PM, John Almberg wrote: Just ran into a strange problem... I have a long-standing user account on my FreeBSD box that no longer works. She can't ssh into the box, and I can't even su to her account. $ su jessica

Re: Old user can't log in

2009-02-12 Thread Da Rock
On Thu, 2009-02-12 at 21:48 -0500, John Almberg wrote: On Feb 12, 2009, at 7:19 PM, Chuck Swiger wrote: On Feb 12, 2009, at 3:14 PM, John Almberg wrote: Just ran into a strange problem... I have a long-standing user account on my FreeBSD box that no longer works. She can't ssh into

Re: Old user can't log in

2009-02-12 Thread Chuck Swiger
On Feb 12, 2009, at 8:17 PM, Da Rock wrote: I've been following this thread with interest: are you saying FreeBSD logins cannot handle more than 16 groups? If so, why? Is this mitigated by using other authentication methods (ie kerberos, ldap, etc)? There's a compile-time limit of the

Re: Old user can't log in

2009-02-12 Thread Da Rock
On Thu, 2009-02-12 at 20:37 -0800, Chuck Swiger wrote: On Feb 12, 2009, at 8:17 PM, Da Rock wrote: I've been following this thread with interest: are you saying FreeBSD logins cannot handle more than 16 groups? If so, why? Is this mitigated by using other authentication methods (ie

Re: Old user can't log in

2009-02-12 Thread Chuck Swiger
On Feb 12, 2009, at 8:52 PM, Da Rock wrote: With reasonable organization, and appropriate use of sudo or setgid binaries for things like people who use SVN or CVS, there generally isn't reason or need for a user to be in so many groups. For the exceptional cases, switching to using a full ACL

Re: Old user can't log in

2009-02-12 Thread Da Rock
On Thu, 2009-02-12 at 21:52 -0800, Chuck Swiger wrote: On Feb 12, 2009, at 8:52 PM, Da Rock wrote: With reasonable organization, and appropriate use of sudo or setgid binaries for things like people who use SVN or CVS, there generally isn't reason or need for a user to be in so many groups.