[Dovecot] where are variables expanded? Was: %d does not expand to domain

[Giuliano Gavazzi]

On T 30 Apr, 2009, at 18:31 , Timo Sirainen wrote:

> On Wed, 2009-04-29 at 22:21 +0200, Giuliano Gavazzi wrote:
>> I am trying to patch the source so that the %d expansion variable  
>> uses
>> original_username (instead of user I suppose) of auth_request, but I
>> cannot find where this expansion is done..
>> Pointers?
>
> Well, the problem is .. %d expansion is done from the whole username.
> And its life starts in dovecot-auth, but most of the expansions  
> outside
> auth settings is done by master process. So you'd probably have to  
> make
> dovecot-auth change the username back to original_username after
> authentication is finished.
>
> What passdb are you using anyway? Maybe this could be done more  
> easily.
>

sorry, I mentioned it en passant in a previous reply, so it passed  
unnoticed: system passwd.
Also, as I said, there is a slight chance that using an unchecked  
domain in a maildir location would permit access to someone else  
maildir (for virtual users only though).

Thanks

Giuliano