[Dovecot] One User Cannot Log In

[Timo Sirainen]

On Fri, 2007-01-19 at 10:58 -0800, Jay Chandler wrote:
> Attempting to log in through Squirrelmail.
> 
> Jan 19 09:34:07 montreal dovecot: imap-login: Login: user=<steve>,
> method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
> Jan 19 09:34:07 montreal dovecot: IMAP(steve): initgroups(steve, 15)
> failed: Invalid argument

With some googleing I found:

http://www.freebsd.org/cgi/man.cgi?query=initgroups&apropos=0&sektion=0&manpath=FreeBSD+6.1-RELEASE&format=html

Which says its error values come from setgroups():

http://www.freebsd.org/cgi/man.cgi?query=setgroups&sektion=2&apropos=0&manpath=FreeBSD+6.1-RELEASE

Which contains:

     [EINVAL]		The number specified in the ngroups argument is larger
			than the NGROUPS limit.

> montreal# id steve
> uid=268(steve) gid=15(users) groups=15(users), 626(moodleCreators),
> 80(www), 98(ident), 28(saweb), 303(helpdeskweb), 53(bind), 86(cgi),
> 206(oacmail), 70(shakes), 43(xfs), 83(acweb), 10(wheel), 208(nasa),
> 54(lock), 244(helpdeskadmin)

So you have 16 groups, which I believe is the default maximum.. But
maybe initgroups() tries to add the gid=15 there twice and fails because
of it, or something. Anyway, I don't think I can do anything about this
in Dovecot.

You could of course just make Dovecot use only the default group for
users, although that would require modifying the sources (eg. remove the
initgroups() call completely).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20070119/c41d4f56/attachment.pgp