Bug 145494 - Membership in too many groups prevents login ("getgroups: Invalid argument")
Membership in too many groups prevents login ("getgroups: Invalid argument")
Status: CLOSED CURRENTRELEASE
Product: Fedora
Classification: Fedora
Component: openssh (Show other bugs)
2
All Linux
medium Severity medium
: ---
: ---
Assigned To: Tomas Mraz
Brian Brock
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2005-01-18 17:25 EST by Kenneth Porter
Modified: 2007-11-30 17:10 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2005-01-31 16:19:28 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description Kenneth Porter 2005-01-18 17:25:06 EST
I edited /etc/group to add myself to another group, raising my total
to 33, and I was no longer able to log in. /var/log/secure reported
"fatal: getgroups: Invalid argument". Some googling revealed the
source of the problem, that getgroups returns EINVAL when the number
of groups exceeds a kernel limit (NGROUPS_MAX in
/usr/include/linux/limits.h).

I'm not sure what the best fix is, but one shouldn't be locked out of
logging in when another group is added to one's list. sshd should fail
in a more graceful way, for example allowing the login but without all
supplmentary groups available, and a warning issued to the login
terminal and the syslog.

See also bug 145492.
Comment 1 Tomas Mraz 2005-01-31 16:19:28 EST
It seems to be working fine in FC3.

Note You need to log in before you can comment on or make changes to this bug.