Skip to contentSkip to conversation

How to increase max number of groups per uid ?

DISCUSSION Stephan von Krawczynski 3 participants 5 messages Jul 29, 2004 – Aug 3, 2004

lore
Share & tools
lore
#0 lore raw

Hello,

is there a simple way in either 2.4 or 2.6 to get a lot more than 32 groups per uid?
Imagine a situation with lots of groups (lets assume 5000-10000). It is obvious that in such a large environment users are commonly members of more than 32 groups.

How can I solve that?
I'd say it should even be possible to be member of all available groups (in other words completely drop this limit).

Regards,
Stephan

#1 lore raw
Quoted 3 lines · Stephan von Krawczynski

is there a simple way in either 2.4 or 2.6 to get a lot more than 32 groups per uid?

2.6 kernels support up to 65536 groups per user.

#2 lore raw
Quoted 6 lines · On Thu, 29 Jul 2004 16:34:07 -0700 Andrew Morton <[email protected]> wrote:
Quoted 3 lines · Stephan von Krawczynski

is there a simple way in either 2.4 or 2.6 to get a lot more than 32 groups per uid?

2.6 kernels support up to 65536 groups per user.

Then this feature didn't seem to make it in the core utils.
On a 2.6-based SuSE 9.1 "groups" (which is in fact "id") lists exactly 32.

What about other distros?

Regards,
Stephan

#4 lore raw
In reply to Andrew Morton
Quoted 6 lines · On Thu, 29 Jul 2004 16:34:07 -0700 Andrew Morton <[email protected]> wrote:
Quoted 3 lines · Stephan von Krawczynski

is there a simple way in either 2.4 or 2.6 to get a lot more than 32 groups per uid?

2.6 kernels support up to 65536 groups per user.

Hello Andrew,

in the meantime - after some testing - I found out the problem lies around nfs. I cannot seem to change to directories (placed on nfs-volumes) whose group-member I am.
Is this a known problem? Can I do something about it?

The situation is:

nfs-server 2.4.24
nfs-client 2.6.7

Client knows about 1000 groups and quite a lot users.
Mounting some directories from the nfs-server and checking out rights we found that users belonging to a group owning a directory cannot access it. If the exact same tree is located on the clients' local fs everything is fine.

Regards,
Stephan