[RC1] Login not possible

[Brooks Davis]

On Fri, Dec 12, 2003 at 02:27:36PM -0800, Kris Kennaway wrote:
> On Fri, Dec 12, 2003 at 10:19:29PM +0100, Klaus-J. Wolf wrote:
> > Hi,
> > 
> > I am trying to migrate a 5.1-RELEASE machine to a 5.2-RC1. I have 
> > discovered that the following passage in /etc/group stops me (kjwolf) 
> > from logging in. I had copied it directly from my old group file. The 
> > error message is the one attached below. I don't get more info. To me, 
> > that's kind of funny.
> > 
> > kjwolf:*:1000:kjwolf
> > mwolf:*:1001:mwolf
> > wolf:*:1200:kjwolf,mwolf
> > wstaff:*:2000:kjwolf
> > mm:*:2001:kjwolf,mwolf
> > develop:*:2002:kjwolf
> > classifd:*:2003:kjwolf
> > mirror:*:2004:kjwolf
> > mirrors:*:2005:kjwolf
> > sw:*:2006:kjwolf
> > yanestra:*:2007:kjwolf
> > coll:*:2008:
> > lusers:*:2009:
> > exusers:*:2010:
> > 
> > Dec 12 21:37:24 golulu login: setusercontext() failed - exiting
> > 
> > _With_ those lines in /etc/group, id gives:
> > 
> > uid=1000(kjwolf) gid=20(staff) groups=20(staff), 0(wheel), 5(operator), 
> > 13(games), 68(dialer), 69(network), 100(users), 1000(kjwolf), 
> > 1200(wolf), 2000(wstaff), 2001(mm), 2002(develop), 2003(classifd), 
> > 2004(mirror), 2005(mirrors), 2006(sw)
> 
> That's 18 groups..there might be a limit of 16 somewhere that is
> causing login to have problems.

A recent change to initgroups() changed the behavior of having too many
groups from silent truncation to error which breaks login...  One of
our users at work ran into this.  Fortunately, we were able to delete a
number of groups for projects that never go cleaned up, but it was
annoying and the error in extremely non-obvious.

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20031212/6bbe8346/attachment.bin