[Date Prev][Date Next] [Chronological] [Thread] [Top]

posixGroup integrated with linux via nss

To: openldap-technical@openldap.org
Subject: posixGroup integrated with linux via nss
From: Scott Classen <SClassen@lbl.gov>
Date: Thu, 02 Apr 2009 13:33:21 -0700
Content-disposition: inline
Content-language: en

I have a happily running LDAP installation (2.4.15) running on Fedora 8 with numerous other linux machines using it as a source of authentication and name services.

I have a problem with group permissions. Most of my groups have less than 10 members, but I have a few super users that need to belong to many groups (100-200) so that they can help individual users process their data. I can easily add the super users to each group using ldapmodify or GQ, and when I type "groups" or "id" in a terminal window as the super user I see that they belong to all the groups. The problem come when I try to read the contents of a directory that is owned by one of these secondary groups. Maybe its a Fedora/Linux thing, but the super user only has read permissions for the first 16 groups. The super user can not do an "ls -la /home/userwhoisin17thgroup"

What is up with that?

Also  can anyone recommend another way to achieve the one user/many groups scenario using LDAP?

Thanks,
Scott

Follow-Ups:
- Re: posixGroup integrated with linux via nss
  - From: Howard Chu <hyc@symas.com>

Prev by Date: Re: unable to get openldap to bind to AD
Next by Date: Re: posixGroup integrated with linux via nss
Index(es):
- Chronological
- Thread