[OpenAFS-devel] Re: OpenAFS and glibc-2.2

[Russ Allbery]

Ulrich Drepper <drepper@redhat.com> writes:
> Thomas Mueller <thomas.mueller@hrz.tu-chemnitz.de> writes:

>> A little program illustrates what I mean:

> It doesn't explain nearly enough.  What is your setup (where do these
> 32xxx groups come from)?

Since this bug report is in the context of AFS, I can at least answer that
question.  AFS uses supplemental groups to control access to in-kernel
authentication information; this is called a PAG (process authentication
group).

Thomas, at least per the man page on Solaris, I think this is the default
behavior of initgroups.  initgroups says that it reads the groups database
and initializes the supplemental group list to match the user's membership
in various groups; implicit in "initializes" would be a discarding of all
existing memberships.

Sounds to me like a glibc 2.1 bug fixed in 2.2.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>