[Dovecot] One User Cannot Log In
Attempting to log in through Squirrelmail.
Jan 19 09:34:07 montreal dovecot: imap-login: Login: user=<steve>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 19 09:34:07 montreal dovecot: IMAP(steve): initgroups(steve, 15) failed: Invalid argument
This entry appears nowhere else in the log.
montreal# id steve uid=268(steve) gid=15(users) groups=15(users), 626(moodleCreators), 80(www), 98(ident), 28(saweb), 303(helpdeskweb), 53(bind), 86(cgi), 206(oacmail), 70(shakes), 43(xfs), 83(acweb), 10(wheel), 208(nasa), 54(lock), 244(helpdeskadmin) montreal# id chandler uid=119833(chandler) gid=15(users) groups=15(users)
We did have the problem of his low UID causing trouble, but I've temporarily changed the Lowest UID setting in dovecot.conf until we can get about 200 users moved.
Any suggestions?
-- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler@chapman.edu Today's Excuse: PEBKAC (Problem Exists Between Keyboard And Chair)
On Fri, 2007-01-19 at 10:58 -0800, Jay Chandler wrote:
Attempting to log in through Squirrelmail.
Jan 19 09:34:07 montreal dovecot: imap-login: Login: user=<steve>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 19 09:34:07 montreal dovecot: IMAP(steve): initgroups(steve, 15) failed: Invalid argument
With some googleing I found:
Which says its error values come from setgroups():
http://www.freebsd.org/cgi/man.cgi?query=setgroups&sektion=2&apropos=0&manpath=FreeBSD+6.1-RELEASE
Which contains:
[EINVAL] The number specified in the ngroups argument is larger
than the NGROUPS limit.montreal# id steve uid=268(steve) gid=15(users) groups=15(users), 626(moodleCreators), 80(www), 98(ident), 28(saweb), 303(helpdeskweb), 53(bind), 86(cgi), 206(oacmail), 70(shakes), 43(xfs), 83(acweb), 10(wheel), 208(nasa), 54(lock), 244(helpdeskadmin)
So you have 16 groups, which I believe is the default maximum.. But maybe initgroups() tries to add the gid=15 there twice and fails because of it, or something. Anyway, I don't think I can do anything about this in Dovecot.
You could of course just make Dovecot use only the default group for users, although that would require modifying the sources (eg. remove the initgroups() call completely).
participants (2)
-
Jay Chandler
-
Timo Sirainen