On Tuesday 10 March 2015 18:38:40 Tom Hendrikx wrote:

On 10-03-15 18:20, Chris Adams wrote:

...

I see this has been asked a few times over the years (but not in several years), and the response was along the lines of "maybe someday", so I figured I'd see if someday was here yet...

I have a need to have a different default realm for different listeners. Basically, I've a bunch of different domains, and a few of them insist their users not be required to authenticate with "user@domain" and just use "user", and I'm trying to make this work without separate daemons and/or VMs.

I'll be using Dovecot 2.2 (most likely 2.2.10 as provided by RHEL/CentOS 7).

Thanks. If there's not a way to do this directly in Dovecot, does anybody have any suggestion that doesn't require several different VMs?

You could drop the default realm completely, and create a second passdb lookup which uses only the username part to lookup credentials. This means that, as long as you have no conflicts as usernames 'john@foo.com' vs 'john@bar.com', you'd be able to support username 'john'.

Well, I think "conflict" is the keyword here. Everybody want an e-mail address called "contact" or "office" :)

When you're able to use the password in your sql WHERE statement [1] too, you could even work around that, because you'd only have mismatches when 'john@foo.com' and 'john@bar.com' have the same passphrase.

[1] http://wiki2.dovecot.org/AuthDatabase/SQL#Password_verification_by_SQL_serve r

Tom

-- Mihai Bădici http://mihai.badici.ro

Once upon a time, Chris Adams <cma@cmadams.net> said:

All my users are in MySQL. Reading the docs, I see that "%l" expands to the local IP address "almost everywhere". If that's available in the userdb SQL expansion, I could write a (somewhat convoluted) SQL statement that adds a domain based on the local IP. Does that sound like it'll work? Not quite as "elegant" as just setting auth_default_realm in separate listeners, but should work I guess.

Just a follow-up for the archives: this worked. This is my MySQL password_query:

password_query =
SELECT username AS user, password,
concat('/srv/mail/',maildir) AS userdb_home, 1000 AS userdb_uid,
1000 AS userdb_gid
FROM mailbox WHERE active = 1 AND username = case
when '%d' <> '' then '%u'
when '%l' = '10.0.9.73' then '%u@domain1.com'
when '%l' = '10.0.9.74' then '%u@domain2.net'
else '%u' end

-- Chris Adams <cma@cmadams.net>