Re: regarding support of NFS versions (Re: Changing NGROUPS_MAX to 1024?)

[Adrian Chadd <adrian%freebsd.org@localhost>]

On Thu, 23 Apr 2026 at 14:56, Michael van Elst <mlelstv%serpens.de@localhost> wrote:
>
> adrian%freebsd.org@localhost (Adrian Chadd) writes:
>
> >quickly bringing it back to NGROUPS > 16
>
> AUTH_SYS is 16 groups. RPCSEC_GSS is no groups but server uses
> nameservice to get group list. Common extension for AUTH_SYS
> is to ignore groups and also use nameservice like RPCSEC_GSS.
>
> Nothing in that is NFSv4 specific.
>
> You need a mechanism to allow the kernel to query nameservice.
> and cache results.
>
> The extension for AUTH_SYS is obviously not compatible, but
> the different behaviour is usually accepted. It needs to
> be configurable on the server (globally or maybe per-export).

Do you think it's worth starting to tackle extending NGROUPS out after
16 is released?
I figure there's a lot of stuff to get done but doing it just before a
release seems ill
timed. :-)


-adrian