Editing the Netshare group size limit set by PGP

by Zebedee on Jan.09, 2009, under Linux, PGP

PGP’s Netshare product which encrypts windows folders and files has a limit on it that for some companies be a pain in the backside. Basically you can allow a group of users to all be able to encrypt and decrypt files and folders but if that group for a certain folder is over 50 PGP errors. There is a good reason for this error as if this is higher and you use PGP Universal to proxy your mail too it can slow down mail by a significant amount. But, if your company only uses PGP Universal to manage Netshare you can increase this number by quite a bit. I have personally increased this to 300 users and had no issues (touch wood).

Before I start a little disclaimer.

Establishing root access to your PGP Universal Server(s) may violate your support warranty with PGP Corporation, and could lead to system instability. You should not establish root access to your PGP Universal Server(s) unless directed to do so by PGP Worldwide Customer Support or PGP Engineering. In other words don’t do this on a live system.

If you have never established root access on your PGP have a look at the PGP Universal Admin guide. (I will right an tut on this later but when I have spare time)

Log on to the ssh shell as root.

once you have browse to /etc/ovid/

then edit prefs.xml in you favorite editor. vi, vim and nano are installed by default.
the command I ran was

nano /etc/ovid/prefs.xml

You will then see the PGP Universal prefs file. Scroll down to the entry “<mailing-list-cache-timeout>”

Under this command please enter the two following commands.

<mailing-list-expansion-limit-client>100</mailing-list-expansion-limit-client>
<mailing-list-expansion-limit-server>100</mailing-list-expansion-limit-server>

Exit your editor.

Ctrl-Z

After this change has been made you need to restart all services on the PGP Universal server. You can do this via the GUI page but as you are already on the command line enter the following command.

pgpsysconf –restart all

Now your PGP Netshare group limit will be extended from 50 to 100. If you need more or less change the 100 in the commands to the limit you would like. The highest I have gone is 300 but if you get higher with out any issue please let me know.

:,
2 comments for this entry:
  1. Bryan

    Nice tip, I’m wondering if this could be done without rooting the box by going into Policy / Internal User Policy / (select the policy group) / Advanced and clicking the Edit Preferences… button.

    Could this let you change the group expansion limit per policy group?

  2. Zebedee

    Hi Bryan,

    When I first decided to right the article I tried looking at entering this info in the GUI but I could not find the mailing-list-cache-timeout string in that file that you are meant to add the expansion list tag after.

    Zebedee

Leave a Reply

 

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

Visit our friends!

A few highly recommended friends...