[GRLUG] SuSE 13.2 group weirdness

[L. V. Lammert]

On Tue, 6 Oct 2015, Adam Tauno Williams wrote:

> Are you using SSSD for ident?
> This is sort of a 'new default'.  Group enumeration due to absurdities
> in the NSS functions can be scandalously inefficient;  even more so  now
> that many identity systems support nested groups [Ugh!]. Group
> membership may not be enumerated, but it should work for interrogation.
>
In this case it did not - had to enumerate the group manually before I
could write to the file.

> Lots of new code and subsystems work this way.
> It is a *feature* you can toggle *off* if you really need getpwent()  et
> al to enumerate all groups.  But generally all it will do is make
> things slower.
>
I can see where it would slow things down for larger environments, the
fuddle factor is two different 13.2 systems act differently - one the
"old" way, one your "new" way.

	TFTR!

	Lee