[Dovecot] Disabling users whilst still allowing logins with a 'master password'

[Timo Sirainen]

On May 5, 2009, at 10:24 AM, Dominic Hargreaves wrote:

> On Fri, May 01, 2009 at 04:38:46PM -0400, Timo Sirainen wrote:
>> But, anyway, how about using mail_executable script that checks if  
>> the
>> logging in user is a master or user not, and if not check if the  
>> user is
>> in some deny database. http://wiki.dovecot.org/PostLoginScripting
>
> One question about thie mechanism that isn't made explicit, although
> certainly implied by the examples: are $USER and $IP guaranteed to  
> exist
> and be sanitised?

Yes.