On February 18, 2024 4:05:58 AM GMT+01:00, "J. B. Crawford"
<je...@jbcrawford.us> wrote:
>Hello,
>I am in the process of moving a previously working dovecot setup to a new
>authentication system. The identity management system, kanidm, uses a Pam
>module and NSS backend to provide user info. Authentication works normally on
>the machine, but Dovecot is having a lot of trouble, logging:
>
>Error: Invalid uid in reply
>Error: Invalid gid in reply
What's the value of first_valid_uid and last_valid_uid in 10-mail.conf?
Also including the output of doveconf -n with your question helps others help
you.
>I ran doveadm -D user je...@waffle.tech as a test, and I see:
>
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Debug: auth-master:
>userdb lookup(je...@waffle.tech): Started userdb lookup
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Debug: auth-master: conn
>unix:/run/dovecot/auth-userdb: Connecting
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Debug: auth-master: conn
>unix:/run/dovecot/auth-userdb (pid=17635,uid=0): Client connected (fd=9)
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Debug: auth-master:
>userdb lookup(je...@waffle.tech): auth USER input: jesse
>system_groups_user=jesse uid=4123057063 gid=4123057063 home=/var/mail/jesse
>mail=maildir:/var/mail/jesse/Maildir
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Debug: auth-master:
>userdb lookup(je...@waffle.tech): Finished userdb lookup (username=jesse
>system_groups_user=jesse uid=4123057063 gid=4123057063 home=/var/mail/jesse
>mail=maildir:/var/mail/jesse/Maildir)
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Error: Invalid uid in
>reply
>Feb 17 21:58:33 doveadm(je...@waffle.tech)<17666><>: Error: Invalid gid in
>reply
>
>We can see the UID and GID in the debug output, but it comes out blank in the
>final info. I'm having a hard time finding what the cause could be, is it
>possible that these UID/GID values are too large? that's about the only thing
>I can think of right now.
>
>This is Dovecot 2.3.21 (47349e2482) on Fedora 39.
>
>Thanks,
>jc
>
--
Christian Kivalo
_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org
