userdb-nss crash

Yuriy Tabolin tabolin at speechpro.com
Tue Nov 18 14:42:45 UTC 2014 

Hi All. I have a some problem with dovecot, when I try to use nss in 
auth userdb. nss was setup to resolve users and group by winbind. nss 
and winbind works well, command "id user" shows remote user's info. I 
would like to use nss userdb, but dovecot crashes on start. Is this a 
bug or incorrect settings? Thank you for any help.

dovecot log
Nov 18 14:58:36 mail dovecot: auth: Panic: file userdb-nss.c: line 110 
(userdb_nss_preinit): assertion failed: (bufsize > 0)
Nov 18 14:58:36 mail dovecot: auth: Fatal: master: service(auth): child 
19387 killed with signal 6 (core dumped)
Nov 18 14:58:36 mail dovecot: master: Error: service(auth): command 
startup failed, throttling for 8 secs

# doveconf -n
# 2.2.15: /usr/local/etc/dovecot/dovecot.conf
# OS: FreeBSD 10.0-RELEASE-p12 amd64  ufs
auth_cache_size = 256 M
auth_failure_delay = 3 secs
auth_username_format = %n
auth_verbose = yes
auth_winbind_helper_path = /usr/local/bin/ntlm_auth
base_dir = /var/run/dovecot/
disable_plaintext_auth = no
listen = *
mail_location = maildir:/home/%u/Maildir
passdb {
   args = dovecot
   driver = pam
}
protocols = imap
service anvil {
   client_limit = 2051
}
service auth {
   client_limit = 3000
}
service imap-login {
   inet_listener imap {
     port = 143
   }
   inet_listener imaps {
     port = 993
     ssl = yes
   }
   process_limit = 1000
   process_min_avail = 5
   service_count = 1
   vsz_limit = 64 M
}
service imap {
   process_limit = 2048
   vsz_limit = 256 M
}
ssl = no
userdb {
   args = service=winbind
   driver = nss
}
verbose_proctitle = yes
protocol imap {
   mail_max_userip_connections = 20
}

# gdb /usr/local/libexec/dovecot/auth /home/tabolin/auth.core
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...(no debugging 
symbols found)...
Core was generated by `auth'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...(no 
debugging symbols found)...done.
Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0
Reading symbols from /lib/libcrypt.so.5...(no debugging symbols 
found)...done.
Loaded symbols for /lib/libcrypt.so.5
Reading symbols from /usr/lib/libpam.so.5...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/libpam.so.5
Reading symbols from /usr/local/lib/libldap-2.4.so.2...(no debugging 
symbols found)...done.
Loaded symbols for /usr/local/lib/libldap-2.4.so.2
Reading symbols from /usr/local/lib/liblber-2.4.so.2...(no debugging 
symbols found)...done.
Loaded symbols for /usr/local/lib/liblber-2.4.so.2
Reading symbols from /lib/libc.so.7...(no debugging symbols found)...done.
Loaded symbols for /lib/libc.so.7
Reading symbols from /usr/lib/libssl.so.7...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/libssl.so.7
Reading symbols from /lib/libcrypto.so.7...(no debugging symbols 
found)...done.
Loaded symbols for /lib/libcrypto.so.7
Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols 
found)...done.
Loaded symbols for /libexec/ld-elf.so.1
#0  0x00000000114ece1a in kill () from /lib/libc.so.7
(gdb)

# cat /etc/nsswitch.conf
group: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: files winbind
passwd_compat: nis
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files

# cat /etc/pam.d/dovecot
auth            required        /usr/local/lib/pam_winbind.so
account         required        /usr/local/lib/pam_winbind.so

-- 
<http://speechpro.com> 	С уважением,
*Таболин Юрий Олегович*
Системный администратор
Центр Речевых Технологий
	Best regards,
Tabolin Yuriy
System administrator
Speech Technology Center
	Тел/Tel: +7 (812) 325-8848, доб/ext 6225
Факс/Fax: +7 (812) 327-92-97
Моб/Mob: +7 (981) 130-23-03

	<http://www.linkedin.com/company/speech-technology-center> 
<https://twitter.com/speechpro_ru> <http://vk.com/speechpro> 
<https://www.facebook.com/speechpro.ru>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: stc2.jpg
Type: image/jpeg
Size: 3397 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141118/760ba027/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: in-b.png
Type: image/png
Size: 1221 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141118/760ba027/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: tw-b.png
Type: image/png
Size: 1161 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141118/760ba027/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vk-b.png
Type: image/png
Size: 1169 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141118/760ba027/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fb-b.png
Type: image/png
Size: 3749 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141118/760ba027/attachment-0003.png>

More information about the dovecot mailing list