用戶所屬的組，怎樣才能擴(kuò)大超過(guò)16個(gè)？

myniker

如題，solaris10手冊(cè)上說(shuō)了，用戶可以屬于一個(gè)主組和最多15個(gè)輔助組。
現(xiàn)在客戶想把一個(gè)用戶屬于盡可能多的組，怎么弄？

Snowict

下面是相關(guān)的文檔資料。注意：一定要升級(jí)KERNEL PATCH 到最新，否則可能導(dǎo)致NFS異常。
****************************************************************
By default, a user can only belong to a total of 16 groups;

1 primary group, the group that the operating system assigns to files created by the user,
and

15 secondary groups.
This number can be increased by tuning the ngroup_max kernel parameter in the /etc/system file up to a maximum value of 32.

This is done by adding the following to the /etc/system file:

   set ngroups_max = 20
... and rebooting. This example will allow for a user to be part of 20 groups in total (1 primary and 19 secondary).

WARNING: Increasing this value above 16 will cause NFS to stop working (See Symptoms and Resolution Document 16151). This is due to a limitation in the RPC protocol specifications (RFC 1057).

As a result of this limitation, tuning this variable is not recommended. An alternate solution is to implement Access Control Lists (ACL) to restrict access to directories and files.

Details on configuring ACL's can be found in the setfacl(1) and getfacl(1) man pages and the System Administration Guide for the appropriate release of Solaris on http://docs.sun.com
**************************************************************************