Re: [Dovecot] How to use Master Users.

3 Apr 2006

      I got it to work!  I'll explain how in case anyone else is interested:
First, the documentation is wrong about the username format.  The config
file documentation said <username><separator><master username>, but I had
to reverse that to <master username><separator><username>.
Second, I had some extra passdb lines that worked before, but once I
turned on master=yes, they broke Dovecot.  Before, right after my LDAP
passdb line, I had:
passdb passwd {
}
passdb shadow {
}
userdb passwd (
}
...because I wanted to first check LDAP, and if a user wasn't found, check
the local system users as well.  But I think the problem was I have the
system setup to use LDAP nameservices as well, so maybe it was complaining
about me having two LDAP queries?  I don't know.  It used to work fine
until I threw in the master user option.  So, I replaced the above with:
passdb passwd-file {
args = /etc/shadow
}
userdb passwd-file {
args = /etc/passwd
}
...and everything worked.  That's probably better anyway.  The above still
loads my local user accounts, after first checking LDAP, and allows master
users.
telnet localhost imap
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

OK IMAP server ready.
1 login testuser*realuser "testpass"
1 OK Logged in.

~Adam
On Mon, 3 Apr 2006, Adam M. Dunn wrote:
...
Hi.
I'm testing out the new 'master users' feature, and I'm not having any
luck getting it to work.  Anyone out there using it yet?
Here's what I have so far:
dovecot.conf:
auth_master_user_separator = *
auth default {
passdb passwd-file {
# Master users that can login as anyone else
args = /etc/dovecot/dovecot.masterusers
master = yes
pass = yes
}
LDAP database
passdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
}
...
...
}
dovecot.masterusers:
testuser:{plain}testpass
telnet localhost imap
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

OK IMAP server ready.
1 login realuser*testuser "testpass"
1 NO Authentication failed.

As you can see I get authentication failed.  The log shows it fails for
the 'realuser' that exists in ldap.  Any ideas out there?  I have the
'testuser' also setup in /etc/passwd.
Thanks
Adam