Exclude disabled accounts

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 23 Nov 2017, Evgeniy Korneechev wrote:

> We have userdb=passwd.
> userdb {
>  driver = passwd #server was entered domain Active Directory
>  override_fields = home=/var/vmail/glu_vrem/%u
> }
>
> If I disable in AD user's account, he can not sign in.
> But he can and will receive letters, which of course is not correct.
>
> How can I exclude disabled accounts from 'userdb'?

Dovecot uses your system's getpwnam(), so if

getent passwd username

returns something, Dovecot uses it. There is no notion about "disabled" 
status in passwd databases.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBWhaz5cQnQQNheMxiAQJomQgAldUZ2F22x5aoMOkJyyRBi2H7ChRrvTWS
THDuYr9SfMoCSaeebrdvDeS7Cqs03/a3G9ffCXsvk15g8rWkEC98vtpUc6NObpLy
JhiXU6qL2O+j5jVdR1bCVTqt3IgmC+wQb+2z7C16+PPJMB0uBK3S0e8PBjrqbESI
ni/UFXwCUEybNrUiToqCuCvTSujFlnk83oeQhzN/NN1JZefPOixovn+vci1O9zba
NVMDrjbC0vb/e+EQkJQmQGjGmhwPsMb1Z0waTQPq5fjV3DgUy1XaPOoP3gMexKpx
dB3SPZ2WK3rNc1uR6CyrZrdjObLC6XKjN6xZg070dFX2kRcpJMyZOw==
=Dp0N
-----END PGP SIGNATURE-----