[GRLUG] SuSE 13.2 group weirdness
L. V. Lammert
lvl at omnitec.net
Tue Oct 6 15:28:18 EDT 2015
On Tue, 6 Oct 2015, Adam Tauno Williams wrote:
> Are you using SSSD for ident?
> This is sort of a 'new default'. Group enumeration due to absurdities
> in the NSS functions can be scandalously inefficient; even more so now
> that many identity systems support nested groups [Ugh!]. Group
> membership may not be enumerated, but it should work for interrogation.
In this case it did not - had to enumerate the group manually before I
could write to the file.
> Lots of new code and subsystems work this way.
> It is a *feature* you can toggle *off* if you really need getpwent() et
> al to enumerate all groups. But generally all it will do is make
> things slower.
I can see where it would slow things down for larger environments, the
fuddle factor is two different 13.2 systems act differently - one the
"old" way, one your "new" way.
More information about the grlug