Hi All. I have a some problem with dovecot, when I try to use nss in auth userdb. nss was setup to resolve users and group by winbind. nss and winbind works well, command "id user" shows remote user's info. I would like to use nss userdb, but dovecot crashes on start. Is this a bug or incorrect settings? Thank you for any help.
dovecot log Nov 18 14:58:36 mail dovecot: auth: Panic: file userdb-nss.c: line 110 (userdb_nss_preinit): assertion failed: (bufsize > 0) Nov 18 14:58:36 mail dovecot: auth: Fatal: master: service(auth): child 19387 killed with signal 6 (core dumped) Nov 18 14:58:36 mail dovecot: master: Error: service(auth): command startup failed, throttling for 8 secs
# doveconf -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE-p12 amd64 ufs auth_cache_size = 256 M auth_failure_delay = 3 secs auth_username_format = %n auth_verbose = yes auth_winbind_helper_path = /usr/local/bin/ntlm_auth base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = * mail_location = maildir:/home/%u/Maildir passdb { args = dovecot driver = pam } protocols = imap service anvil { client_limit = 2051 } service auth { client_limit = 3000 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1000 process_min_avail = 5 service_count = 1 vsz_limit = 64 M } service imap { process_limit = 2048 vsz_limit = 256 M } ssl = no userdb { args = service=winbind driver = nss } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 20 }
# gdb /usr/local/libexec/dovecot/auth /home/tabolin/auth.core GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"...(no debugging symbols found)... Core was generated by `auth'. Program terminated with signal 6, Aborted. Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libcrypt.so.5...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypt.so.5 Reading symbols from /usr/lib/libpam.so.5...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libpam.so.5 Reading symbols from /usr/local/lib/libldap-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libldap-2.4.so.2 Reading symbols from /usr/local/lib/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/liblber-2.4.so.2 Reading symbols from /lib/libc.so.7...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /usr/lib/libssl.so.7...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libssl.so.7 Reading symbols from /lib/libcrypto.so.7...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypto.so.7 Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols found)...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x00000000114ece1a in kill () from /lib/libc.so.7 (gdb)
# cat /etc/nsswitch.conf group: files winbind group_compat: nis hosts: files dns networks: files passwd: files winbind passwd_compat: nis shells: files services: compat services_compat: nis protocols: files rpc: files
# cat /etc/pam.d/dovecot auth required /usr/local/lib/pam_winbind.so account required /usr/local/lib/pam_winbind.so
-- http://speechpro.com С уважением, *Таболин Юрий Олегович* Системный администратор Центр Речевых Технологий Best regards, Tabolin Yuriy System administrator Speech Technology Center Тел/Tel: +7 (812) 325-8848, доб/ext 6225 Факс/Fax: +7 (812) 327-92-97 Моб/Mob: +7 (981) 130-23-03
<http://www.linkedin.com/company/speech-technology-center>
https://twitter.com/speechpro_ru http://vk.com/speechpro https://www.facebook.com/speechpro.ru