dovecot - Jan 2007 - One User Cannot Log In

Attempting to log in through Squirrelmail.

Jan 19 09:34:07 montreal dovecot: imap-login: Login: user=<steve>,
method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Jan 19 09:34:07 montreal dovecot: IMAP(steve): initgroups(steve, 15)
failed: Invalid argument

This entry appears nowhere else in the log.

montreal# id steve
uid=268(steve) gid=15(users) groups=15(users), 626(moodleCreators),
80(www), 98(ident), 28(saweb), 303(helpdeskweb), 53(bind), 86(cgi),
206(oacmail), 70(shakes), 43(xfs), 83(acweb), 10(wheel), 208(nasa),
54(lock), 244(helpdeskadmin)
montreal# id chandler
uid=119833(chandler) gid=15(users) groups=15(users)

We did have the problem of his low UID causing trouble, but I've
temporarily changed the Lowest UID setting in dovecot.conf until we can
get about 200 users moved.

Any suggestions?

-- 
Jay Chandler
Network Administrator, Chapman University
714.628.7249 / chandler at chapman.edu
Today's Excuse: PEBKAC (Problem Exists Between Keyboard And Chair)

On Fri, 2007-01-19 at 10:58 -0800, Jay Chandler wrote:
> Attempting to log in through Squirrelmail.
> 
> Jan 19 09:34:07 montreal dovecot: imap-login: Login: user=<steve>,
> method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
> Jan 19 09:34:07 montreal dovecot: IMAP(steve): initgroups(steve, 15)
> failed: Invalid argument
With some googleing I found:

http://www.freebsd.org/cgi/man.cgi?query=initgroups&apropos=0&sektion=0&manpath=FreeBSD+6.1-RELEASE&format=html

Which says its error values come from setgroups():

http://www.freebsd.org/cgi/man.cgi?query=setgroups&sektion=2&apropos=0&manpath=FreeBSD+6.1-RELEASE

Which contains:

     [EINVAL]		The number specified in the ngroups argument is larger
			than the NGROUPS limit.
> montreal# id steve
> uid=268(steve) gid=15(users) groups=15(users), 626(moodleCreators),
> 80(www), 98(ident), 28(saweb), 303(helpdeskweb), 53(bind), 86(cgi),
> 206(oacmail), 70(shakes), 43(xfs), 83(acweb), 10(wheel), 208(nasa),
> 54(lock), 244(helpdeskadmin)
So you have 16 groups, which I believe is the default maximum.. But
maybe initgroups() tries to add the gid=15 there twice and fails because
of it, or something. Anyway, I don't think I can do anything about this
in Dovecot.

You could of course just make Dovecot use only the default group for
users, although that would require modifying the sources (eg. remove the
initgroups() call completely).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20070119/c41d4f56/attachment.bin>