[Dovecot] PAM and user at domain login?

Larry Rosenman larryrtx at gmail.com
Sat Nov 16 22:01:48 EET 2013


and how can I restrict it to PAM only?

# doveconf -n
# 2.2.6: /usr/local/etc/dovecot/dovecot.conf
# OS: FreeBSD 10.0-BETA3 amd64
auth_mechanisms = plain login
auth_username_format = %Ln
disable_plaintext_auth = no
lda_mailbox_autocreate = yes
lmtp_save_to_detail_mailbox = yes
mail_debug = yes
mail_location = mbox:~/mail:INBOX=~/mail/INBOX
mail_plugins = snarf fts fts_lucene stats
mail_privileged_group = mail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags
copy include variables body enotify environment mailbox date ihave
namespace Snarf {
  hidden = yes
  list = no
  location = mbox:~/mail:INBOX=/var/mail/%u:INDEX=MEMORY
  prefix = ~~Snarfbox/
  separator = /
}
namespace archive {
  hidden = no
  inbox = no
  list = no
  location = mbox:~/MAILARCHIVE
  prefix = "#ARCHIVE/"
  separator = /
}
namespace default {
  hidden = yes
  list = no
  location =
  prefix = ~~default/
  separator = /
}
namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox INBOX {
    auto = create
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix =
}
passdb {
  driver = pam
}
plugin {
  fts = lucene
  fts_lucene = whitespace_chars=@. normalize no_snowball
  mbox_snarf = ~/mail/INBOX
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
  snarf = ~~Snarfbox/INBOX
  stats_command_min_time = 1 mins
  stats_domain_min_time = 12 hours
  stats_ip_min_time = 12 hours
  stats_memory_limit = 16 M
  stats_refresh = 5s
  stats_session_min_time = 15 mins
  stats_track_cmds = yes
  stats_user_min_time = 1 hours
}
service auth {
  unix_listener auth-client {
    mode = 0666
  }
  unix_listener auth-master {
    mode = 0666
  }
}
service stats {
  chroot = empty
  client_limit = 0
  drop_priv_before_exec = no
  executable = stats
  extra_groups =
  fifo_listener stats-mail {
    group =
    mode = 0666
    user =
  }
  group =
  idle_kill = 4294967295 secs
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener stats {
    group =
    mode = 0666
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
ssl_cert = </etc/ssl/certs/dovecot.pem
ssl_key = </etc/ssl/private/dovecot.pem
userdb {
  driver = passwd
}
protocol imap {
  imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags
  mail_max_userip_connections = 50
  mail_plugins = snarf fts fts_lucene stats imap_stats
}
#



On Sat, Nov 16, 2013 at 1:45 PM, Benny Pedersen <me at junc.eu> wrote:

> Larry Rosenman skrev den 2013-11-15 19:47:
>
>  Yes, it does.  I wish the documentation on the Wiki was easier to find
>> gems
>> like this.
>>
>
>  Does auth_username_format=%n solve your issue?
>>>
>>
> should only be used for pam auth, not other auth backends, problem is not
> dovecot but unix logins is not possible with @ :=)
>
>
>


-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c)     E-Mail: larryrtx at gmail.com
US Mail: 108 Turvey Cove, Hutto, TX 78634-5688


More information about the dovecot mailing list