[Dovecot] Postfix & Dovecot LDA

[Luca Corti]

On Mon, 2007-01-22 at 18:00 +0100, Jochen Schulz wrote:
> Hi,
> 
> before I start to write a lengthy email about something that isn't
> really possible anyway: can I make Postfix use Dovecot's LDA and start
> it with different user IDs?

In your master.cf you should have something like this, assuming your
postfix setup in correct (main.cf, virtual domains/recipients maps,
etc.):

dovecot   unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -d ${recipient}

the user= part controls under which uid/gid deliver runs. This way you
could run deliver as user vmail for all your virtual domains.


> I want to use a unique UID for every virtual domain, so I guess LDA
> needs to have permissions for every corresponding mailbox *and*
> Dovecot's auth_socket_path. Is there a good solution for this which
> doesn't involve severe security implications?

You can give vmail access to the auth socket. I haven't tried the
one-user-per-virual-domain setup myself. You could use the group rights
to give deliver access to all the vitual domains maildirs while having a
different uid per each virtual domain.

ciao

Luca