標題: 用戶所屬的組,怎樣才能擴大超過16個? [打印本頁] 作者: myniker 時間: 2008-12-02 09:57 標題: 用戶所屬的組,怎樣才能擴大超過16個? 如題,solaris10手冊上說了,用戶可以屬于一個主組和最多15個輔助組。
現(xiàn)在客戶想把一個用戶屬于盡可能多的組,怎么弄?作者: Snowict 時間: 2008-12-02 09:57
下面是相關(guān)的文檔資料。注意:一定要升級KERNEL PATCH 到最新,否則可能導致NFS異常。
****************************************************************
By default, a user can only belong to a total of 16 groups;
1 primary group, the group that the operating system assigns to files created by the user,
and
15 secondary groups.
This number can be increased by tuning the ngroup_max kernel parameter in the /etc/system file up to a maximum value of 32.
This is done by adding the following to the /etc/system file:
set ngroups_max = 20
... and rebooting. This example will allow for a user to be part of 20 groups in total (1 primary and 19 secondary).
WARNING: Increasing this value above 16 will cause NFS to stop working (See Symptoms and Resolution Document 16151). This is due to a limitation in the RPC protocol specifications (RFC 1057).
As a result of this limitation, tuning this variable is not recommended. An alternate solution is to implement Access Control Lists (ACL) to restrict access to directories and files.
Details on configuring ACL's can be found in the setfacl(1) and getfacl(1) man pages and the System Administration Guide for the appropriate release of Solaris on http://docs.sun.com
**************************************************************************