Set large group suffix for NIS daemon

Specify the suffix string or character to use in group names when automatically splitting up a group with a large number of members. The default value is _.

Because group.bygid and group.byname NIS maps often contain membership lists that exceed the 1024 limit of NIS data that can be served to clients, the adnisd process automatically truncates the membership list when this limit is reached. When you enable this group policy, the Centrify DirectControl Network Information Service automatically splits a large group into as many new groups as needed to deliver the complete membership list.

When a group's data size exceeds the 1024 data limit, a new group is created. The new group name is formed using the original group name, followed by the string defined for this policy, and ending in a number that represents the numeric order of the new group created.

For example, for a large group named performix-worldwide-corp, a suffix string defined as -all, and the maximum length for group names as 10, the performix-worldwide-corp group membership is split into these multiple groups:

performix-worldwide-corp-all1
performix-worldwide-corp-all2
performix-worldwide-corp-all3
performix-worldwide-corp-all4

All of the new groups have the same group identifier (GID) as the original group. If the new group names would exceed the maximum length for group names on a platform, you can use the "Set large group name length for NIS daemon" policy to set the maximum length for the new groups created.

If this policy is not enabled, the adnisd process truncates the group membership list such that each group entry is under 1024 characters.

This group policy modifies the nisd.largegroup.suffix setting in the Centrify DirectControl configuration file.


Supported on:
centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)