[Dovecot] RC1 broken - Authentication Failed

Timo Sirainen tss at iki.fi
Sat Jul 1 22:21:39 EEST 2006


On Sat, 2006-07-01 at 11:57 -0700, Marc Perkel wrote:
> OK - I just tried it again and here's what I got. Switching back to
> beta 9 fixes it so whatever you changed it started in rc1.

> dovecot: Jul 01 11:50:59 Error: auth(default): passwd-file /etc/vmail/shadow.ambrynet.com: User pat has invalid 
> GID -1

Well, I guess it's these. -1 really is invalid and I think it
practically means that the process would get root's GID, which really
isn't a good idea.

I'll add some extra checks to make sure this can't be done with other
userdbs either..

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20060701/68f14c43/attachment.pgp


More information about the dovecot mailing list