[Dovecot] Allow/disallow mail access based on group membership
I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints?
Thanks in advance!
-- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11
On 28/03/2007 12:10, Taras Savchuk wrote:
I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints?
My quick thought is that this may be best achieved using PAM with Dovecot, and configuring your /etc/pam.d/dovecot to suit.
Cheers,
John.
John Robinson пишет:
On 28/03/2007 12:10, Taras Savchuk wrote:
I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints?
My quick thought is that this may be best achieved using PAM with Dovecot, and configuring your /etc/pam.d/dovecot to suit.
I already configured PAM auth for dovecot, but I don't understand how I can grant IMAP access only to users which are in group "email", for example.
Cheers,
John.
-- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11
pam_group!
John Robinson пишет:
On 28/03/2007 12:10, Taras Savchuk wrote:
I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints?
My quick thought is that this may be best achieved using PAM with Dovecot, and configuring your /etc/pam.d/dovecot to suit.
Cheers,
John.
-- С уважением, Савчук Тарас ООО "Элантек" : Аутсорсинг ИТ, WEB-разработка http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11
participants (2)
-
John Robinson
-
Taras Savchuk