[email protected] (Adrian Chadd) writes: >quickly bringing it back to NGROUPS > 16
AUTH_SYS is 16 groups. RPCSEC_GSS is no groups but server uses nameservice to get group list. Common extension for AUTH_SYS is to ignore groups and also use nameservice like RPCSEC_GSS. Nothing in that is NFSv4 specific. You need a mechanism to allow the kernel to query nameservice. and cache results. The extension for AUTH_SYS is obviously not compatible, but the different behaviour is usually accepted. It needs to be configurable on the server (globally or maybe per-export).
