Re: Q: Informix & Large Unix password files

shemminga@cix.compulink.co.uk ("Stuart Hemming") wrote: >> IMHO, it's rather difficult to mantain 50,000 Unix users. Maybe, >> you can >> replace them with only 2 ? >> First user ID can be used to log in to unix. It has no rights >> granted on the database. (And, maybe, no password) It can only run >> application with SUID to second user. Second user has some rights on >> database, and application must perform their own authentication. If user >> names and encrypted passwords are stored in the indexed table, access >> time can be more acceptable. > >This could cause other problems though couldn't it? I mean you'd have to >massively increase the number of processes and open files available to a >user to cope with the large number of "real" users logging in as a single >user. This will have a knock-on effect on other areas of the kernel. > >This, of course, may all be bunk. Not bunk at all. If managing 50,000 uid's isn't practical, you could set up users in small groups. Even then you'd need to bump up the procees/file handles available.