Re: trace attached - Folders in NFS-share: permission denied, prob. not 16+ groups problem

[Peter Staubach <staubach@redhat.com>]

Steffen Kolbe wrote:

> -----------------------------------------------------------
> general question:
> Is their a real solution to use ~50 groups with nfs? Because we've 
> many project groups some team leaders, many crossover memberships over 
> some departments and .......
> How is this solved in bigger environments?
> ------------------------------------------------------------ 


The two most common solutions are either to use ACLs or use a security
flavor such as Kerberos.  The 16 group limit for AUTH_SYS is hard and
is an RPC limitation and not an NFS thing.

Unfortunately, ACLs are difficult to adminstrate and to manipulate for
ordinary users.  You could consider writing some tools to help your users
check and manipulate the ACLs as required.

The most common solution is to deploy Kerberos.  This eliminates the
16 group limit, but does incur the cost and complexity of deploying and
maintaining Kerberos.

The only other alternative that springs to mind is to rearchitect the
entire solution.  This is not usually something that people consider
doing...  :-)

    Thanx...

       ps


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs