Date: Wed, 15 Feb 2006 19:20:39 -0800 From: "Ian A. Tegebo" <yontege@rescomp.berkeley.edu> To: freebsd-questions@freebsd.org Subject: Re: Strange problem with user account Message-ID: <20060216032039.GA688@rescomp.berkeley.edu> In-Reply-To: <20060211043906.GB27755@rescomp.berkeley.edu> References: <20060211043906.GB27755@rescomp.berkeley.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Feb 10, 2006 at 08:39:06PM -0800, Ian A. Tegebo wrote:
> Somehow I've foobarred a user account.
The account turned out not to have been foobared. The account had had
18 groups and this exceeded the kern.ngroups default of 16. Reducing
the number of groups solved the problem.
> # su USER
> su: setusercontext: Invalid argument
A better ktrace as root is:
# ktrace -di su yontege
# kdump -f ktrace.out
...
1080 su CALL setgroups(0x11,0xbfbfe5b0)
1080 su RET setgroups -1 errno 22 Invalid argument
...
# man setgroups
---------------------------------------------------------------------
ERRORS
The setgroups() system call will fail if:
[EPERM] The caller is not the super-user.
[EINVAL] The number specified in the ngroups argument is larger
than the NGROUPS limit.
[EFAULT] The address specified for gidset is outside the
process address space.
---------------------------------------------------------------------
and then it was elementary.
> I suspect that something funny has happened to the account before the
> migration; something like having been removed from /etc/passwd but
> nowhere else.
And this was an incorrect suspicion which was confirmed by investigating
all of the pwd.db related files.
Hope this helps someone someday.
--
ian
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060216032039.GA688>