Editing the Netshare group size limit set by PGP
by Zebedee on Jan.09, 2009, under Linux, PGP
PGP’s Netshare product which encrypts windows folders and files has a limit on it that for some companies be a pain in the backside. Basically you can allow a group of users to all be able to encrypt and decrypt files and folders but if that group for a certain folder is over 50 PGP errors. There is a good reason for this error as if this is higher and you use PGP Universal to proxy your mail too it can slow down mail by a significant amount. But, if your company only uses PGP Universal to manage Netshare you can increase this number by quite a bit. I have personally increased this to 300 users and had no issues (touch wood).
Before I start a little disclaimer.
Establishing root access to your PGP Universal Server(s) may violate your support warranty with PGP Corporation, and could lead to system instability. You should not establish root access to your PGP Universal Server(s) unless directed to do so by PGP Worldwide Customer Support or PGP Engineering. In other words don’t do this on a live system.
If you have never established root access on your PGP have a look at the PGP Universal Admin guide. (I will right an tut on this later but when I have spare time)
Log on to the ssh shell as root.
once you have browse to /etc/ovid/
then edit prefs.xml in you favorite editor. vi, vim and nano are installed by default.
the command I ran was
nano /etc/ovid/prefs.xml
You will then see the PGP Universal prefs file. Scroll down to the entry “<mailing-list-cache-timeout>”
Under this command please enter the two following commands.
<mailing-list-expansion-limit-client>100</mailing-list-expansion-limit-client>
<mailing-list-expansion-limit-server>100</mailing-list-expansion-limit-server>
Exit your editor.
Ctrl-Z
After this change has been made you need to restart all services on the PGP Universal server. You can do this via the GUI page but as you are already on the command line enter the following command.
pgpsysconf –restart all
Now your PGP Netshare group limit will be extended from 50 to 100. If you need more or less change the 100 in the commands to the limit you would like. The highest I have gone is 300 but if you get higher with out any issue please let me know.




January 14th, 2009 on 3:14 pm
Nice tip, I’m wondering if this could be done without rooting the box by going into Policy / Internal User Policy / (select the policy group) / Advanced and clicking the Edit Preferences… button.
Could this let you change the group expansion limit per policy group?
January 16th, 2009 on 5:37 am
Hi Bryan,
When I first decided to right the article I tried looking at entering this info in the GUI but I could not find the mailing-list-cache-timeout string in that file that you are meant to add the expansion list tag after.
Zebedee