Accessing to mail as another user
Peter Chiochetti
pch at myzel.net
Tue Feb 9 11:03:29 UTC 2016
Am 2016-02-09 um 10:54 schrieb Angel L. Mateo:
> […]
> Looking at documentation, at [1], in the "auth_user" variable says:
> "... If username changes during authentication, this value contains the
> original username..." what leads me to think that there is some way to
> change the user during the authentication process, but I don't know how
> or maybe I'm assuming wrong.
If I fully understand, user switching is done by having userdb return
arbitrary uid,gid,user for the principal used in authentication. After
being switched, you ARE the other one, so in my (possibly limited)
understanding you can no longer read your own mail. That might not be
intended?
--
peter
More information about the dovecot
mailing list