Re: [Dovecot] Disabling users whilst still allowing logins with a 'master password'

[Timo Sirainen]

On May 5, 2009, at 10:24 AM, Dominic Hargreaves wrote:

On Fri, May 01, 2009 at 04:38:46PM -0400, Timo Sirainen wrote:

But, anyway, how about using mail_executable script that checks if the logging in user is a master or user not, and if not check if the user is

in some deny database. http://wiki.dovecot.org/PostLoginScripting

One question about thie mechanism that isn't made explicit, although

certainly implied by the examples: are $USER and $IP guaranteed to exist

and be sanitised?

Yes.