PDA

View Full Version : The order of groups




ewoh24
Feb 26, 2013, 01:31 PM
I heard that Macs have a 16 group limit that users can belong to. After that 16th group it doesn't recognize any other groups. Is that true? And is there a way to force order the groups?

Thanks,

Scott



chown33
Feb 26, 2013, 03:28 PM
You'll have to be more specific. Where did you read this? What OS version are you referring to?

Group management has changed over time in Mac OS X, as have the other capabilities and constraints of account management. No one answer applies to all OS versions.

As a test, I just added my user acct to some ad hoc groups I created, running under OS X 10.8.2, and there are now 18 groups that acct is a member of. So for this OS version, there is not a limit of 16. There may be a higher hard limit, or simply a pracitical limit at some level.

Whether there are hard limits in earlier OS versions, you'd have to tell us what version you need the info for. I have several at my disposal, but I'm not going to do an exhaustive test just for fun.


As to order of groups, I don't think you have any control over that.

Exactly what problem are you trying to solve that leads you to use groups, and ordered groups in particular? Maybe there's another way to solve that problem, if you told us what that is.
http://www.perlmonks.org/index.pl?node_id=542341
.. You want to do X, and you think Y is the best way of doing it.
.. Instead of asking about X, you ask about Y.


Since I first started using Unix, I have seen any number of attempts that use groups to solve a particular problem. These attempted solutions almost never work out in practice, usually due to scalability issues.

ewoh24
Feb 26, 2013, 04:16 PM
Basically I have since discovered that its an NFS limitation. I forgot to mention that thats where its getting hung up. Basically our Unix/Linux servers cannot see any groups beyond the 16 limit. Everyone is on 10.6.8 here.

Unfortunately, as crazy as it may be, our environment is built around groups. We're a government contractor and we have a lot of groups to organize access, per regulations. If there's a better way to set things up, no one here has discovered it yet. I should also mention we're a Windows/Mac/Linux environment so getting everything to work together is a challenge.