* NGROUPS limitation on RPCSEC_GSS/krb5?
@ 2006-08-24 14:14 Frank van Maarseveen
2006-08-24 16:03 ` Trond Myklebust
0 siblings, 1 reply; 2+ messages in thread
From: Frank van Maarseveen @ 2006-08-24 14:14 UTC (permalink / raw)
To: Linux NFS mailing list
I got a report from someone that RPCSEC_GSS/krb5 has a limit on the
number of secondary groups: no more than 32 groups are supported.
Can anyone confirm this?
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
NFS maillist - NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: NGROUPS limitation on RPCSEC_GSS/krb5?
2006-08-24 14:14 NGROUPS limitation on RPCSEC_GSS/krb5? Frank van Maarseveen
@ 2006-08-24 16:03 ` Trond Myklebust
0 siblings, 0 replies; 2+ messages in thread
From: Trond Myklebust @ 2006-08-24 16:03 UTC (permalink / raw)
To: Frank van Maarseveen; +Cc: Linux NFS mailing list
On Thu, 2006-08-24 at 16:14 +0200, Frank van Maarseveen wrote:
> I got a report from someone that RPCSEC_GSS/krb5 has a limit on the
> number of secondary groups: no more than 32 groups are supported.
>
> Can anyone confirm this?
<resending from a different account 'cos sourceforge apparently trusts
spamcop these days>
There is no reason why this limitation should exist, so that would have
to be an implementation "bug" in nfsd if true.
Hrmm... The kernel looks OK: the downcall stuff doesn't appear to be
limited.
...Ah. svcgssd appears to be using the NGROUPS macro. If your glibc is
old enough, then I suspect it might be setting that to 32, but at least
in my glibc, then /usr/include/sys/param.h would appear to be setting it
to NGROUPS_MAX, which again appears to evaluate to 65536.
Cheers,
Trond
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
NFS maillist - NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-08-24 16:04 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-08-24 14:14 NGROUPS limitation on RPCSEC_GSS/krb5? Frank van Maarseveen
2006-08-24 16:03 ` Trond Myklebust
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.