-1

I know about Postfix MTA configuration concepts: there's tree of them and the last one is most-appropriate only because it doesn't require new Unix user to be created for new mailbox creation. From manual:

As a system hosts more and more domains and users, it becomes less desirable to give every user their own UNIX system account.

How many Unix users is too much?

greenV
  • 111
  • 2

2 Answers2

4

Ahh, this hearkens back to the good old days, when Unix systems were (nearly) the exclusive domain of universities and large enterprises, and Linux - with a version number starting with 0 - was almost unheard of. Back in these days the Web was just getting started; the Internet was email, Usenet, FTP, IRC, and not a whole lot more.

Everyone who needed to have access to the Internet would be given an account on one or more of the Unix systems, and often log on to it from a green screen dumb terminal. They would typically have "full" access to a shell, along with the email service they were expecting, and most simply used it as such.

Though, for security reasons, some places did not grant a full shell, and just dumped people into the program they were expected to use, such as an email client, factory application to run the conveyor belts, whatever. But the shell was still lurking in the background, and some of these programs had ways to get to it...

When Internet access became more common on regular PCs and Macs in the late 1990s, people began downloading email via the POP3 and IMAP protocols directly to their home computers. These people (usually) wouldn't know what to do with a shell if they had one, and didn't really need one to get their email and Web access anyway. So mail servers started implementing "virtual" users, for whom mail was handled but there was no corresponding Unix account.

Michael Hampton
  • 244,070
  • 43
  • 506
  • 972
-3

uid/gid usually are two-byte INTs so max value is limited to 65535. As for me, when some limited resource is exhausted for one third I've become nervous.

Widely used solution is to use virtual accounts (for mail, ftp etc) that are not limited to 65535.

Kondybas
  • 6,964
  • 2
  • 20
  • 24
  • 2
    32bit UIDs where introduced on Linux with Kernel release 2.4 in 2001, making 2^32 uids/gids available. The same is true for most other modern Unix systems. – Sven May 31 '14 at 11:46
  • `uid=248800001 gid=248800001 groups=248800001,979,248800000,248800004` ... I think you get the point. – Michael Hampton May 31 '14 at 13:56