authentication back-ends - go to specific one?
Hi guys.
Is it possible to tell *dovecot* to authenticate with a specific back-end for a given domain? If it would not the only back-end a given account of a specific domain would try, then it would be the first back-end such account would try to auth against - possible?
many thanks, L.
Hi guys.
Is it possible to tell dovecot to authenticate with a specific back-end for a given domain? If it would not the only back-end a given account of a specific domain would try, then it would be the first back-end such account would try to auth against - possible?
many thanks, L.
Hi,
Yes this is possible with the passdb_username_filter (https://doc.dovecot.org/2.4.2/core/config/auth/passdb.html#passdb_username_f...)
So if you've got one passdb for example.com and another one for every other domain you would do something like:
passdb {
driver = ...
args = ...
...
username_filter = *@example.com # to skip this passdb for other domains
result_succes=|return-ok # to skip later passdbs result_fail=return-fail # again to
not ask later passdbs if auth failed } passdb { # passdb for other
domains .... } ``` |
|(this configuration example is for 2.3 and needs to be adapted for 2.4)|
||||
Kind regards,
Markus
On 11/11/25 18:14, lejeczek via dovecot wrote:
> Hi guys.
>
> Is it possible to tell dovecot to authenticate with a specific back-end
> for a given domain?
> If it would not the only back-end a given account of a specific domain
> would try, then it would be the first back-end such account would try to
> auth against - possible?
>
> many thanks, L.
>
> _______________________________________________
> dovecot mailing list --dovecot@dovecot.org
> To unsubscribe send an email todovecot-leave@dovecot.org
Hi,
Yes this is possible with the passdb_username_filter
([1]https://doc.dovecot.org/2.4.2/core/config/auth/passdb.html#passdb_username_filter)
So if you've got one passdb for example.com and another one for every
other domain you would do something like:
passdb { driver = ... args = ... ... username_filter = *@example.com # to skip this passdb for other domains result_succes=return-ok # to skip later passdbs result_fail=return-fail # again to not ask later passdbs if auth failed } passdb {
passdb for other domains
.... }
(this configuration example is for 2.3 and needs to be adapted for 2.4)
Kind regards,
Markus
On 11/11/25 18:14, lejeczek via dovecot wrote:
Hi guys.
Is it possible to tell dovecot to authenticate with a specific back-end
for a given domain?
If it would not the only back-end a given account of a specific domain
would try, then it would be the first back-end such account would try to
auth against - possible?
many thanks, L.
_______________________________________________
dovecot mailing list -- [2]dovecot@dovecot.org
To unsubscribe send an email to [3]dovecot-leave@dovecot.org
References
Visible links
1. https://doc.dovecot.org/2.4.2/core/config/auth/passdb.html#passdb_username_filter
2. mailto:dovecot@dovecot.org
3. mailto:dovecot-leave@dovecot.org
participants (2)
-
lejeczek
-
Markus Bach