tags 457936 + pending thanks On Mon, 2007-12-31 at 16:14 +0100, Arthur de Jong wrote: > On Thu, 2007-12-27 at 13:02 +0100, Petter Reinholdtsen wrote: > > Is there some problem with large groups? > > There could be some problems with groups with many members. I will > have to do some tests through I'm not aware of any limitations.
I have found an issue with large groups that would confuse the NSS
module.
The problem was that libc by default provides a small(ish) buffer to the
NSS module to fill in the information. If the buffer would overflow the
NSS modules signals this with NSS_STATUS_TRYAGAIN to ask libc to try
again with a larger buffer. However, this retry mechanism was not
working correctly with the {get,set,end}grent() calls. The getgrnam()
and related functions were behaving correctly.
The result was that "getent group largegroup" would return correct data
but that "getent group" would not include largegroup and any groups
after that.
I have implemented a mechanism that should work for larger groups. There
is still a size limit to groups though (4k currently).
If you want, you can try to get if from svn [1]. Revision 550 works for
me and does not introduce too many changes from the 0.5 release.
[1] http://arthurenhella.demon.nl/svn/nss-ldapd/nss-ldapd/
--
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --
signature.asc
Description: This is a digitally signed message part
