Re: regarding support of NFS versions (Re: Changing NGROUPS_MAX to 1024?)

[mlelstv%serpens.de@localhost (Michael van Elst)]

adrian%freebsd.org@localhost (Adrian Chadd) writes:

>quickly bringing it back to NGROUPS > 16

AUTH_SYS is 16 groups. RPCSEC_GSS is no groups but server uses
nameservice to get group list. Common extension for AUTH_SYS
is to ignore groups and also use nameservice like RPCSEC_GSS.

Nothing in that is NFSv4 specific.

You need a mechanism to allow the kernel to query nameservice.
and cache results.

The extension for AUTH_SYS is obviously not compatible, but
the different behaviour is usually accepted. It needs to
be configurable on the server (globally or maybe per-export).