So the _nss_XXX_initgroups_dyn is required to *NOT* do a setgroups - just fill in the list groupsp. In that case, this API (and a user-facing getgrouplist call) solves the problem I cross-posted to several mailing lists a month ago - namely, that of things like pam_group having to do a setgrent/getgrent/endgrent loop over a potentially multi-megabyte database. Cool. I wonder if the LSB people would be amenable to making a "recommendation" this this call be used where approriate? Regards, Phil +------------------------------------------+ | Phil Mayers | | Network & Infrastructure Group | | Information & Communication Technologies | | Imperial College | +------------------------------------------+ -----Original Message----- From: Luke Howard [mailto:lukeh@PADL.COM] Sent: 17 September 2001 15:15 To: pam-list@redhat.com Subject: RE: getgrplist Modules can implement _nss_XXX_initgroups_dyn: enum nss_status _nss_XXX_initgroups_dyn (const char *user, gid_t group, long int *start, long int *size, gid_t ** groupsp, long int limit, int *errnop); Not sure if there is a libc API for this though... (apart from initgroups() of course) -- Luke >From: "Mayers, Philip J" <p.mayers@ic.ac.uk> >Subject: RE: getgrplist >To: "'pam-list@redhat.com'" <pam-list@redhat.com>, "'tomasw@cs.huji.ac.il'" > <tomasw@cs.huji.ac.il> >Date: Mon, 17 Sep 2001 11:43:28 +0100 > >Interesting - do you happen to know if there's an NSS hook for this call? > >Regards, >Phil -- Luke Howard | lukehoward.com PADL Software | www.padl.com _______________________________________________ Pam-list@redhat.com https://listman.redhat.com/mailman/listinfo/pam-list
