On 4/22/20 12:09 PM, James Cassell wrote:
 Sounds like the "broken if UID > 65k" issue that was
fixed recently, but maybe not yet in RHEL... 
Do you have a link to that fix?  I noticed that login.defs didn't have 
values set for sub-uid/gid max or count, and the defaults are much too 
low for my use case (sssd needs values 10x bigger).  I set those, and 
that changed the error.  Now, instead of "invalid argument" I get 
"permission denied":
[gitlab-runner@dvpackerbld03 ~]$ podman run -it \
   --volume=/var/lib/sss/pipes/:/var/lib/sss/pipes/:rw \
   --volume=/etc/sssd/:/etc/sssd/:ro \
   --volume=/etc/krb5.conf:/etc/krb5.conf:ro \
   --volume=/etc/ipa/ca.crt:/etc/ipa/ca.crt:ro \
   --volume=/etc/nsswitch.conf:/etc/nsswitch.conf:ro \
   e1a20f08ebe2 su build -c ls
su: cannot open session: Permission denied