On Fri, Dec 12, 2003 at 02:27:36PM -0800, Kris Kennaway wrote: > On Fri, Dec 12, 2003 at 10:19:29PM +0100, Klaus-J. Wolf wrote: > > Hi, > > > > I am trying to migrate a 5.1-RELEASE machine to a 5.2-RC1. I have > > discovered that the following passage in /etc/group stops me (kjwolf) > > from logging in. I had copied it directly from my old group file. The > > error message is the one attached below. I don't get more info. To me, > > that's kind of funny. > > > > kjwolf:*:1000:kjwolf > > mwolf:*:1001:mwolf > > wolf:*:1200:kjwolf,mwolf > > wstaff:*:2000:kjwolf > > mm:*:2001:kjwolf,mwolf > > develop:*:2002:kjwolf > > classifd:*:2003:kjwolf > > mirror:*:2004:kjwolf > > mirrors:*:2005:kjwolf > > sw:*:2006:kjwolf > > yanestra:*:2007:kjwolf > > coll:*:2008: > > lusers:*:2009: > > exusers:*:2010: > > > > Dec 12 21:37:24 golulu login: setusercontext() failed - exiting > > > > _With_ those lines in /etc/group, id gives: > > > > uid=1000(kjwolf) gid=20(staff) groups=20(staff), 0(wheel), 5(operator), > > 13(games), 68(dialer), 69(network), 100(users), 1000(kjwolf), > > 1200(wolf), 2000(wstaff), 2001(mm), 2002(develop), 2003(classifd), > > 2004(mirror), 2005(mirrors), 2006(sw) > > That's 18 groups..there might be a limit of 16 somewhere that is > causing login to have problems. A recent change to initgroups() changed the behavior of having too many groups from silent truncation to error which breaks login... One of our users at work ran into this. Fortunately, we were able to delete a number of groups for projects that never go cleaned up, but it was annoying and the error in extremely non-obvious. -- Brooks -- Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:33 UTC