I have normal system users, some and some virtual domains (2 different flavors).

I have this job that runs from cron on my own userid to archive mail

I want Dovecot to use my system password for mail authentication.

I, therefore, use PAM to authenticate system users

Everything works great, modulo getting the auto-index to be visible using RoundCube (which if I log into roundcube using <user>@<domain> it does).

by default if I'm logged in as my normal OS user, default doveadm commands (as issued from the shell or from my archive script) use the user I'm logged in as *WITHOUT A DOMAIN*.

I want to default PAM auth'd users to append @lerctr.org (DOMAIN) to the OS user.

On Mon, Apr 15, 2019 at 7:34 AM John Fawcett via dovecot <dovecot@dovecot.org> wrote:

On 15/04/2019 13:43, Larry Rosenman via dovecot wrote:
> Again, this doesn't help with doveadm running as the local user, and
> also doesn't help with
> the PAM authentication.
>
> passdb {
> driver = pam
> #[session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=20]
> #[cache_key=<key>] [<service name>]
> args = failure_show_msg=yes session=yes max_requests=20
> skip = authenticated
> }
>
> How can I default the domain for PAM authentication?
> (I've set auth_default_realm and it doesn't help in this case).

Larry

I guess I don't understand enough about your setup or what is not now
working.

My understanding was that everything is now working when logging in as
user@domain, but that you would like to login as user and have dovecot
treat that as though you had logged in as user@domain, but at this point
I admit I may have misinterpreted your emails.

What's also not clear for me is the purpose in your setup of the three
passdb methods (sql, static, and pam) and two userdb methods (sql and
passwd-file). That's why I've pointed you to the docs and I'm hestitant
to give specific advice that may leave you worse off. Others on the list
may have more insights.

John