Chaning from ldap pam to pam authentication
Hello,
so far I used pam_ldap.so for authentication. nsss then imports all ldap users.
My Ldap Server went down today, so I want to migrate to a system that
uses users in /etc/passwd.
I created a user something.something and I can log in with pam.
But when I try to login via dovecot I get the error message: pam:
unknown user. I think its probably because its trying to authenticate
something@something@example.com which does not exist.
How do i fix that?
Thank you. Best, Lucienne
Hi!
See [1]https://doc.dovecot.org/2.4.5/core/summaries/settings.html#auth_username_for...
Aki
On 22/10/2026 17:56 EEST fc26wuqa--- via dovecot
<[2]dovecot@dovecot.org> wrote:
Hello,
so far I used pam_ldap.so for authentication.
nsss then imports all ldap users.
My Ldap Server went down today, so I want to migrate to a system that
uses users in /etc/passwd.
I created a user something.something and I can log in with pam.
But when I try to login via dovecot I get the error message: pam:
unknown user. I think its probably because its trying to authenticate
something@[3]something@example.com which does not exist.
How do i fix that?
Thank you.
Best,
Lucienne
_______________________________________________
dovecot mailing list -- [4]dovecot@dovecot.org
To unsubscribe send an email to [5]dovecot-leave@dovecot.org
References
Visible links
- https://doc.dovecot.org/2.4.5/core/summaries/settings.html#auth_username_for...
- mailto:dovecot@dovecot.org
- mailto:something@example.com
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
Hello, thank you. I already tried this.
I tried switching to passwd-file now.
How can I create users with that. Do I just edit some password file?
Isnt this a bad idea to store plain passwords this way? Or how can i
encrypt them that dovecot understands them?
Best,
Lucienne
Zitat von Aki Tuomi <aki.tuomi@open-xchange.com>:
Hi! See https://doc.dovecot.org/2.4.5/core/summaries/settings.html#auth_username_for... Aki
On 22/10/2026 17:56 EEST fc26wuqa--- via dovecot <dovecot@dovecot.org> wrote: Hello, so far I used pam_ldap.so for authentication. nsss then imports all ldap users. My Ldap Server went down today, so I want to migrate to a system that uses users in /etc/passwd. I created a user something.something and I can log in with pam. But when I try to login via dovecot I get the error message: pam: unknown user. I think its probably because its trying to authenticate something@something@example.com which does not exist. How do i fix that? Thank you. Best, Lucienne
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
Yes. That's all actually in the documentation.
But what *exactly* did you try with pam?
passdb pam { auth_username_format = %{user|username} }
usually works, if you have /etc/pam.d/dovecot file done right.
Aki
On 22/10/2026 18:23 EEST fc26wuqa--- via dovecot <dovecot@dovecot.org> wrote:
Hello, thank you. I already tried this.
I tried switching to passwd-file now. How can I create users with that. Do I just edit some password file? Isnt this a bad idea to store plain passwords this way? Or how can i
encrypt them that dovecot understands them? Best, Lucienne Zitat von Aki Tuomi <aki.tuomi@open-xchange.com>:Hi! See https://doc.dovecot.org/2.4.5/core/summaries/settings.html#auth_username_for... Aki
On 22/10/2026 17:56 EEST fc26wuqa--- via dovecot <dovecot@dovecot.org> wrote: Hello, so far I used pam_ldap.so for authentication. nsss then imports all ldap users. My Ldap Server went down today, so I want to migrate to a system that uses users in /etc/passwd. I created a user something.something and I can log in with pam. But when I try to login via dovecot I get the error message: pam: unknown user. I think its probably because its trying to authenticate something@something@example.com which does not exist. How do i fix that? Thank you. Best, Lucienne
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
Better is to setup regular pam auth for dovecot, and configure linux to use users from ldap and then cache credentials with sssd. But also have local ldap copy.
-----Original Message----- From: fc26wuqa--- via dovecot <dovecot@dovecot.org> Sent: Thursday, 22 October 2026 16:57 To: dovecot@dovecot.org Subject: Chaning from ldap pam to pam authentication
Hello,
so far I used pam_ldap.so for authentication. nsss then imports all ldap users.
My Ldap Server went down today, so I want to migrate to a system that uses users in /etc/passwd. I created a user something.something and I can log in with pam.
But when I try to login via dovecot I get the error message: pam: unknown user. I think its probably because its trying to authenticate something@something@example.com which does not exist.
How do i fix that?
Thank you. Best, Lucienne
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
participants (3)
-
Aki Tuomi
-
fc26wuqa@studserv.uni-leipzig.de
-
Marc