samba - Mar 2005 - AD group membership limits?

Hi,

I'm running Samba 3.0.11 on RedHat ES 3 kernel version 2.4.21-15.0.4.ELsmp
and have a quick question about AD group membership limits

Am I right in assuming that Samba is limited by the group membership
parameters (ie NGROUP = 32) imposed by the Linux kernel? Is there any
workaround in Samba for this?

At the moment if a user is a member of more then 32 domain groups they
cannot access any shares. If I remove some of the groups to below the 32
group limit everything is fine.

If there isn't a workaround in Samba has anyone reliably recompiled the
kernel and run Samba after changing the group parameters?
I guess this must be a fairly common problem in a lot of sites?

Any help with this much appreciated.

Cheers,

Simon




********************************************************************************
The information contained in this email message may be confidential. If you are
not the intended recipient, any use, interference with, disclosure or copying of
this material is unauthorised and prohibited. Although this message and any
attachments are believed to be free of viruses, no responsibility is accepted by
T&F Informa for any loss or damage arising in any way from receipt or use
thereof.  Messages to and from the company are monitored for operational reasons
and in accordance with lawful business practices.
If you have received this message in error, please notify us by return and
delete the message and any attachments.  Further enquiries/returns can be sent
to postmaster@tfinforma.com

Simon,

Yes, I have recompiled the kernel with support for a static NGROUPS with
a patch from tridge and Rusty Russell. This does not seem to cause any
problems at all on Samba servers, or with the Linux box in general and
it does properly allow more supplementary groups.

Here is what I used IIRC:
http://ccache.samba.org/ftp/tridge/misc/more_groups_simple.patch
http://ccache.samba.org/ftp/tridge/misc/maxgroups.patch

Though I just checked on this, and maybe support for dynamic NGROUPS is
now in the 2.6 kernel? See:
http://www.linuxhq.com/kernel/changelog/v2.6/4/

		-Marc
> -----Original Message-----
> From: samba-bounces+marc_kaplan=adaptec.com@lists.samba.org
[mailto:samba-
> bounces+marc_kaplan=adaptec.com@lists.samba.org] On Behalf Of Gibbs,
Simon
> Sent: Wednesday, March 02, 2005 2:58 AM
> To: samba@lists.samba.org
> Subject: [Samba] AD group membership limits?
> 
> Hi,
> 
> I'm running Samba 3.0.11 on RedHat ES 3 kernel version
2.4.21-15.0.4.ELsmp
> and have a quick question about AD group membership limits
> 
> Am I right in assuming that Samba is limited by the group membership
> parameters (ie NGROUP = 32) imposed by the Linux kernel? Is there any
> workaround in Samba for this?
> 
> At the moment if a user is a member of more then 32 domain groups they
> cannot access any shares. If I remove some of the groups to below the
32
> group limit everything is fine.
> 
> If there isn't a workaround in Samba has anyone reliably recompiled
the
> kernel and run Samba after changing the group parameters?
> I guess this must be a fairly common problem in a lot of sites?
> 
> Any help with this much appreciated.
> 
> Cheers,
> 
> Simon
> 
> 
> 
> 
>
************************************************************************
**
> ******
> The information contained in this email message may be confidential.
If
> you are not the intended recipient, any use, interference with,
disclosure
> or copying of this material is unauthorised and prohibited. Although
this
> message and any attachments are believed to be free of viruses, no
> responsibility is accepted by T&F Informa for any loss or damage
arising
> in any way from receipt or use thereof.  Messages to and from the
company
> are monitored for operational reasons and in accordance with lawful
> business practices.
> If you have received this message in error, please notify us by return
and
> delete the message and any attachments.  Further enquiries/returns can
be
> sent to postmaster@tfinforma.com
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba