From owner-freebsd-questions@FreeBSD.ORG  Sat Feb 11 04:39:06 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9DA4D16A420
	for <freebsd-questions@freebsd.org>;
	Sat, 11 Feb 2006 04:39:06 +0000 (GMT)
	(envelope-from yontege@hal.rescomp.berkeley.edu)
Received: from rescomp.berkeley.edu (keyserver.Rescomp.Berkeley.EDU
	[169.229.70.167])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7396043D49
	for <freebsd-questions@freebsd.org>;
	Sat, 11 Feb 2006 04:39:06 +0000 (GMT)
	(envelope-from yontege@hal.rescomp.berkeley.edu)
Received: by rescomp.berkeley.edu (Postfix, from userid 1032)
	id 699255B788; Fri, 10 Feb 2006 20:39:06 -0800 (PST)
Date: Fri, 10 Feb 2006 20:39:06 -0800
From: "Ian A. Tegebo" <yontege@rescomp.berkeley.edu>
To: freebsd-questions@freebsd.org
Message-ID: <20060211043906.GB27755@rescomp.berkeley.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
Subject: Strange problem with user account
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Feb 2006 04:39:06 -0000

Somehow I've foobarred a user account.  It's on a system that first had
the account in /etc/passwd, but then I moved the system over to using
LDAP for user imformation.  Other accounts are fine, but this one will
not allow auth and gives the following error when trying to "su ian" as
root:

# su USER
su: setusercontext: Invalid argument

And doing the following shows

# ktrace su ian
# kdump -f ktrace.out
	...
       "<35>Feb 10 20:29:20 su: initgroups(ian,100): Invalid
       argument"
       ...
is near the end of the output.  Both "ian" and the GID "100" show up
just fine when I do:

# id ian
uid=1032(ian) gid=100(users) groups=100(users)

I suspect that something funny has happened to the account before the
migration; something like having been removed from /etc/passwd but
nowhere else.

The problem is that I can't figure out where to look now.

--
ian