From: Joel Franco =?iso-8859-1?Q?Guzm=E1n?= <joel.franco@3WT.com.br>
Subject: Re: Insane permissions problem :)
Date: Thu, 18 Jul 2002 12:17:16 -0300
Sender: nfs-admin@lists.sourceforge.net
Message-ID: <20020718151716.GA14251@netlocal.com.br>
References: <20020717225841.GC4853@netlocal.com.br> <shsy9c9bcp6.fsf@charged.uio.no> <15670.39323.156232.887895@notabene.cse.unsw.edu.au> <15670.46011.421512.863931@charged.uio.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Cc: Neil Brown <neilb@cse.unsw.edu.au>, nfs@lists.sourceforge.net
To: Trond Myklebust <trond.myklebust@fys.uio.no>
In-Reply-To: <15670.46011.421512.863931@charged.uio.no>
Errors-To: nfs-admin@lists.sourceforge.net

Well.
It runs now.
The problem was effectively with the 16 limit. i just put the group
"intranet" in the front of the group file, and it runs.

Thank u.
It help me a lot :)
[]s

On Thu, Jul 18, 2002 at 02:25:31PM +0200, Trond Myklebust wrote:
> >>>>> " " == Neil Brown <neilb@cse.unsw.edu.au> writes:
> 
>      > Trond: is there a good reason why the client cannot make sure
>      > the groupid of a file is sorted first when accessing that file?
>      > It would solve 99% of these problems in a very simple way and
>      > should (says he who hasn't looked at the code) not be too hard
>      > to achieve.
> 
> It could be done, but doing so might break attempts to provide optimal
> reordering of groups by hand. The latter is needed in order to solve
> the remaining 1% of problems if, for instance, uid/gid mapping is
> being used on the server.
> 
> I'm also reluctant to implement a solution that would involve giving
> the NFS code intimate knowledge of the details of the RPC auth
> handling. After all, the problem+solution you outline only effects
> AUTH_SYS (a.k.a. AUTH_UNIX).
> 
> The workaround if one can't mess with /etc/groups in order to optimize
> the user's group membership at login is to use the 'newgrp' command.
> 
> 
> 
> 
> Note: I believe Frank van Marseveen once implemented a solution in
> which membership of > 16 groups would result in the RPC code
> reordering the groups and then retrying requests that fail with
> EACCES. I don't know if he still maintains that code, but he did claim
> that it worked for his case.
> 
> Cheers,
>   Trond

-- 
Joel Franco Guzm?n
Network Analyst
3WT - Wireless Web World Tech
joel.franco@3WT.com.br
tel: +55 16 3371-4343
fax: +55 16 3371-9847
cel: +55 16 9787-0478


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs