limitation of usermod/useradd concering number of groups

[Quark]

Hello,

we have apparently run into a problem where you cannot specify more then 20 unix groups using the useradd/usermod command.

Thus if you issue the command:
# useradd -G group1,group2,...,group20,group21

you get an error stating the following:
"
Group does not exist
"

Is this a know issue or bug or a limitation of HP-UX?

With kind regards,

Kris

[James R. Ferguson]

Hi Kris:

Its a limit:

# getconf NGROUPS_MAX

Regards!

...JRF...

[Peter Godron]

Kris,
please see:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=923012

System change and kernel rebuild

[Gary L. Paveza, Jr. · Accepted solution]

Modifying the kernel is not supported. I opened a JAG back in May of '04. Here is HP's response:

"The Enhancement Request for NGROUPS to be increased is JAGaf08926.
Conclusions: contacted lab answer is ""not in 11.31"". It's on the radar screen, but he didn't know if it was above or below the cut line for post 11.31. The NGROUPS_MAX variable is just the most obvious change that is required. The lab said a value over 20 will break other applications and the kernel won't support it without modification. The lab has the enhancement request to increase the limit. It will take a lot of work to complete and they have not planned to include the change for the next release so far. Alternative 1) What has been described below can be accomplished using the ACL's available in HP-UX. They can put the administrators in a common group (admin) and modify the ACL's on all of the application files to allow ""admin"" to have group access. ACL's are also available on Solaris, AIX and Linux. "

I recently received word that this would make it to 11.41.

[Duncan Edmonstone]

OK, I know I shouldn't resurrect extremely old threads, but I thought it was worth mentioning that the NGROUPS_MAX limit of 20 finally went away in the September release of 11.31:

http://docs.hp.com/en/5992-4174/ch05s22.html

Note the whitepaper mentioned in the release notes hasn't been posted yet.

HTH

Duncan

[Gokul Chandola]

Hi,
There is the default limit but in newer versions we can define in kernal tunable.

Regards,
Gokul Chandola

[Duncan Edmonstone]

Ok, the whitepaper has been posted - just not where the release notes pointed.

It's here:

http://docs.hp.com/en/14531/4AA2-1738ENW.pdf

HTH

Duncan