- Timo Sirainen tss@iki.fi:
On Fri, 2010-10-08 at 15:38 +0200, Ralf Hildebrandt wrote:
# fuer user*masteruser logins passdb { args = /usr/dovecot-2/etc/dovecot/dovecot.masteruser driver = passwd-file master = yes pass = yes
You can't use pass=yes with passdb pam. From wiki:
Ah. I fixed it by using passdb shadow :) as well
"You should also add the pass=yes setting to the master passdb if possible. It means that Dovecot verifies that the login user really exists before allowing the master user to log in. Without the setting if a nonexistent login username is given, depending on the configuration, it could either return an internal login error (the userdb lookup failed) or create a whole new user (with eg. static userdb). pass=yes doesn't work with PAM or LDAP with auth_bind=yes, because both of them require knowing the user's password."
But .. yeah, maybe a fallback should be to do a userdb lookup instead. Or change it to a pass=yes|no|userdb setting.
-- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt@charite.de | http://www.charite.de