large group missing in getent group

Hi,

this might be a known problem, but I was unable to resolve it:

I'm using Directory Server 5.2 Patch 4 (2005Q4) and I have a group with about 2400 Members. The Problem is when I do a "getent group <grpname> I dont get any results!?

Here are some commands I tried:

bash-2.05# getent group

root::0:root

other::1:

[..]

cb_ai::15027:bm005,ms001

cb_aktuell::15015:cvdab,cvdcb,bb018,bk014,[..]

[..]

[gp_everyone is missing]

bash-2.05# getent group gp_everyone

[no output]

Server-Log:

[11/Jun/2007:11:07:15 +0200] conn=390 op=8 msgId=9 - SRCH base="o=****" scope=2 filter="(&(objectClass=posixGroup)(cn=gp_everyone))" attrs="cn gidNumber userPassword memberUid"

bash-2.05# ldapsearch -v -b "o=*****" "(&(objectClass=posixGroup)(cn=gp_everyone))" cn gidNumber userPassword memberUid

cn=gp_everyone,ou=groups,ou=****,o=****

cn=gp_everyone

gidNumber=10000

memberUid=hft

memberUid=frrap1

memberUid=frrap2

[..]

1 matches

Server-Log:

[11/Jun/2007:11:19:35 +0200] conn=409 op=0 msgId=1 - SRCH base="o=****" scope=2 filter="(&(objectClass=posixGroup)(cn=gp_everyone))" attrs="cn gidNumber userPassword memberUid"

Note that the Server-Log of the last two commands is almost identical and both return something similar like this:

RESULT err=0 tag=101 nentries=1 etime=0

Hence, using ldapsearch with the same search filter as the one getent is using, I'm getting my group. Why is getent not listing it?

I am on a Sparc Sol 9 system and I have the latest ldap-patch (112960-51) by the way. DS is running on the same system.

I have heard of problems with groups containing more than 2000 members. Does anybody know a solution to this?

I hope somebody can help. Thanks.

David

[1882 byte] By [DavidSchulza] at [2007-11-27 7:10:16]
# 1
AFAIK it is a bug in Solaris group management, but it was fixed in some rev.Check for bug 4667251.
scripetoa at 2007-7-12 19:01:45 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2
Thanks for your answer. I checked out bug 4667251, but thats not it! Also I couldnt find an other patch related to my problem..The same thing happens on a Solaris 10 box also.
DavidSchulza at 2007-7-12 19:01:45 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3

I found out that this is definitely no DS problem!

I put the group with all members into local /etc/group file and still cant see the group. I checked Bug 4667251 again, but I already have the patch which should solve the issue.

I now think that it has something to do with the Solaris line limit (LINE_MAX in /usr/include/limits.h). When editing the group file with vi it also sais: line too long..

I will change to the solaris forum with my problem now..

thanks,

--David

DavidSchulza at 2007-7-12 19:01:45 > top of Java-index,Web & Directory Servers,Directory Servers...