scl@sasha.acc.virginia.edu (Steve Losen) writes:
[...]
This is not a problem peculiar to netapps. All Unix systems that use NIS have to linearly scan the entire group map every time a user logs in, to find the user's groups.
Or find some way of optimisising things by using a user -> groups map; for example Solaris' netid.byname map combined with the setting NETID_AUTHORITATIVE=TRUE in /etc/default/nss.
And of course, "logs in" includes things like starting a job / crontab for the user, or running a process specifed in a user's .forward file.