Howdi.
I'm new to dovcot (just succeded in compiling on unixware 713 today) I'm noww configuring for tests on other port. The sample configuration file is pretty well documented, however, I don't understand how I can firstt authenticate against passwd/shadow if not found against pgsql.
What's the syntax?
Please cc responses as I'm subscribed to digest
TIA Reghards
-- Olivier PRENANT Tel: +33-5-61-50-97-00 (Work) Quartier d'Harraud Turrou +33-5-61-50-97-01 (Fax) 31190 AUTERIVE +33-6-07-63-80-64 (GSM) FRANCE Email: ohp@pyrenet.fr
Make your life a dream, make your dream a reality. (St Exupery)
On Tue, 2003-06-17 at 21:13, ohp@pyrenet.fr wrote:
Howdi.
I'm new to dovcot (just succeded in compiling on unixware 713 today) I'm noww configuring for tests on other port. The sample configuration file is pretty well documented, however, I don't understand how I can firstt authenticate against passwd/shadow if not found against pgsql.
What's the syntax?
Well, short answer: You can't. Put them all to one place (eg. pgsql), maybe using some automated scripts. I don't know if I should even consider about supporting fallbacking..
On Tue, 17 Jun 2003, Timo Sirainen wrote:
Date: 17 Jun 2003 21:30:43 +0300 From: Timo Sirainen tss@iki.fi To: ohp@pyrenet.fr Cc: dovecot@procontrol.fi Subject: Re: [Dovecot] Multiple auth howto
On Tue, 2003-06-17 at 21:13, ohp@pyrenet.fr wrote:
Howdi.
I'm new to dovcot (just succeded in compiling on unixware 713 today) I'm noww configuring for tests on other port. The sample configuration file is pretty well documented, however, I don't understand how I can firstt authenticate against passwd/shadow if not found against pgsql.
What's the syntax?
Well, short answer: You can't. Put them all to one place (eg. pgsql), maybe using some automated scripts. I don't know if I should even consider about supporting fallbacking..
Hi Timo, Thanks for your answer. The reason I came to dovcot is that I thought it was possible. I've benn researching this for weeks now. First thought that cyrus would do that, it does but though SASL and pam whitch I don't have.
How difficult would it be to implement a fallback?
Regards
Olivier PRENANT Tel: +33-5-61-50-97-00 (Work) Quartier d'Harraud Turrou +33-5-61-50-97-01 (Fax) 31190 AUTERIVE +33-6-07-63-80-64 (GSM) FRANCE Email: ohp@pyrenet.fr
Make your life a dream, make your dream a reality. (St Exupery)
On Wed, 18 Jun 2003 ohp@pyrenet.fr wrote:
Well, short answer: You can't. Put them all to one place (eg. pgsql), maybe using some automated scripts. I don't know if I should even consider about supporting fallbacking.. Hi Timo, Thanks for your answer. The reason I came to dovcot is that I thought it was possible. I've benn researching this for weeks now. First thought that cyrus would do that, it does but though SASL and pam whitch I don't have. How difficult would it be to implement a fallback?
Does this tool do what you want? (checkpassword only though, but I bet you will find checkpassword compatible authenticators that suit your needs):
http://www.andreas.hanssen.name/software/multichkpwds.c
-- Andreas Aardal Hanssen
On Wed, 2003-06-18 at 14:05, ohp@pyrenet.fr wrote:
Well, short answer: You can't. Put them all to one place (eg. pgsql), maybe using some automated scripts. I don't know if I should even consider about supporting fallbacking..
Hi Timo, Thanks for your answer. The reason I came to dovcot is that I thought it was possible. I've benn researching this for weeks now. First thought that cyrus would do that, it does but though SASL and pam whitch I don't have.
How difficult would it be to implement a fallback?
Not very. I'm mostly concerned about what happens if the user exists in both authenticators. I guess normally this shouldn't happen, but you can't really guarantee that and mistakes happen..
If fallbacking happened only when user isn't found from first authenticator, that could work a bit more safely, but I'm not sure if I can know with PAM if check failed because user wasn't found or because password didn't match.
participants (3)
-
Andreas Aardal Hanssen
-
ohp＠pyrenet.fr
-
Timo Sirainen