OpenSSH and Solaris groups

Matt Studley mjs at ams.org
Wed Jun 19 04:24:42 EST 2002


I have an odd problem and I was wondering if anyone has ever run into this
before.  I have a machine running solaris 8, OpenSSH 3.1p1 and OpenSSL
0.9.6c and it has been working fine for quite some time (ssh that is).
Today, /etc/system was updated to increase the maximum number of groups
from 16 to 32.  After the system was rebooted, things seemed to be working
as expected, however one of our users who is a member of 21 groups (don't
ask) is now unable to log in.  Previously the extra groups over 16 were
ignored and things were fine, but it seems like now that the system is
recognizing membership to these groups ssh is failing.  The error that
appears in the log file and when connecting to a port running a debugging
server reports that getgroups failed with an invalid argument.  This is
happening from all machines... except one which is the strange thing.  If
the user connects via ssh from one certain machine, the error still
appears in the log file, however the login is successful.  Has anyone ever
run into something like this before?  Any and all advice would be greatly
appreciated.  Thanks.

sshd[847]: [ID 800047 auth.crit] fatal: getgroups: Invalid argument

Matt Studley
American Mathematical Society
UNIX Sys Admin        		  "Quantum Mechanics -
mjs at ams.org			  	The dreams that stuff is made of"




More information about the openssh-unix-dev mailing list