[GRLUG] SuSE 13.2 group weirdness

L. V. Lammert lvl at omnitec.net
Tue Oct 6 15:28:18 EDT 2015

On Tue, 6 Oct 2015, Adam Tauno Williams wrote:

> Are you using SSSD for ident?
> This is sort of a 'new default'.  Group enumeration due to absurdities
> in the NSS functions can be scandalously inefficient;  even more so  now
> that many identity systems support nested groups [Ugh!]. Group
> membership may not be enumerated, but it should work for interrogation.
In this case it did not - had to enumerate the group manually before I
could write to the file.

> Lots of new code and subsystems work this way.
> It is a *feature* you can toggle *off* if you really need getpwent()  et
> al to enumerate all groups.  But generally all it will do is make
> things slower.
I can see where it would slow things down for larger environments, the
fuddle factor is two different 13.2 systems act differently - one the
"old" way, one your "new" way.



More information about the grlug mailing list