[Bug nis/10085] New: nss_compat cannot handle split groups in NIS for initgroups()

["pasky at suse dot cz" <sourceware-bugzilla at sourceware dot org>]

If NIS contains very large groups, there is trouble with hitting some inherent
length limits in the enumeration of members. A common practice to work-around
that is to have multiple group records with the same name.

However, nss_compat's getgrent_next_nss() code cannot handle this case properly
in case initgroups_dyn() is available - it will add the given group to the
user's group list only if it was present in the last record. This stems from the
nature of this optimized implementation.

The proposed patch adds a new SPLIT_GROUPS flag to /etc/default/nss that lets
users of such a setup to trade efficiency for correctness and disable the
optimized codepath, using the traditional getgrent()-sequence method instead.

-- 
           Summary: nss_compat cannot handle split groups in NIS for
                    initgroups()
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: nis
        AssignedTo: kukuk at suse dot de
        ReportedBy: pasky at suse dot cz
                CC: glibc-bugs at sources dot redhat dot com


http://sourceware.org/bugzilla/show_bug.cgi?id=10085

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.