samba-users August 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] Samba and ZFS

Re: [Samba] Samba and ZFS

From: David Magda <dmagda_at_nospam>
Date: Wed Aug 04 2010 - 19:35:58 GMT
To: gaiseric.vandal@gmail.com

On Wed, August 4, 2010 10:33, Gaiseric Vandal wrote:
> the ngroup_max issue isn't specific to an active directory
> environment. I found with samba 3.0.x, if you were in more than 16
> groups, you might not have all the access you thought you should but you
> could still logon. (samba didn't check the system ngroups_max.) With
> samba 3.5.x if you are in more groups than "ngroups_max" you won't even
> be able to logon to windows.
>
> NFS is the limiting factor for ngroups_max. If you aren't using nfs you
> can up ngroups_max. Of if you are using nfs with kerberos
> authentication then I think you should also be able to up ngroups_max.
> If you up ngroups_max and a user has > 16 groups, he would be able to
> login to windows BUT non-krb nfs would be broken.

ngroups_max has been expanded in recent versions of OpenSolaris, but this
has not (yet?) been back-ported Solaris 10:

http://www.c0t0d0s0.org/archives/6135-At-last-or-NGROUPS-revisited.html

This change was done to help with the creation of the built-in CIFS server
in OpenSolaris. The new limit is 1024, which is the same maximum as
Windows has for groups.

-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba