Ok,, I was half awake when I typed that 😀
Sent from my Sprint Samsung Galaxy S8+. -------- Original message --------From: Aki Tuomi <aki.tu...@dovecot.fi> Date: 7/13/17 6:19 AM (GMT-06:00) To: Dovecot List <dovecot@dovecot.org>, Larry Rosenman <larry...@gmail.com> Subject: Re: System users lookup via PAM: strip the domain name? No it's intentionally %Ln to convert user1@domain into user1 for PAM. Aki > On July 13, 2017 at 2:03 PM Larry Rosenman <larry...@gmail.com> wrote: > > > Is the %Ln on the 2nd passdb supposed to be a %Lu? > > > Sent from my Sprint Samsung Galaxy S8+. > -------- Original message --------From: Aki Tuomi <aki.tu...@dovecot.fi> > Date: 7/13/17 4:43 AM (GMT-06:00) To: Dovecot List <dovecot@dovecot.org>, > Larry Rosenman <larry...@gmail.com> Subject: Re: System users lookup via PAM: > strip the domain name? > No. > > It's just a placeholder, like %u or %d. > > Aki > > > On July 13, 2017 at 10:57 AM Larry Rosenman <larry...@gmail.com> wrote: > > > > > > Will %{original_username} set %d as well? > > > > > > Sent from my Sprint Samsung Galaxy S8+. > > -------- Original message --------From: Aki Tuomi <aki.tu...@dovecot.fi> > > Date: 7/13/17 12:34 AM (GMT-06:00) To: Dovecot List > > <dovecot@dovecot.org>, Larry Rosenman <larry...@gmail.com> Subject: Re: > > System users lookup via PAM: strip the domain name? > > > > > On July 13, 2017 at 4:27 AM Larry Rosenman <larry...@gmail.com> wrote: > > > > > > > > > I have a need for the following: > > > > > > Real system users in /etc/{passwd,shadow} (actually PAM on FreeBSD) > > > wirhOUT @domain in /etc/passwd > > > > > > Virtual Users in SQL (with full user@domain in the DB) > > > > > > > > > > > > When I have auth_username_format = %Ln I can’t auth the Virtual Users, > > > and if I have auth_username_format = %Lu I can’t auth System users. > > > > > > > > > > > > Is there a compromise somewhere? > > > > > > > > > > You could try using %{original_username} in SQL. > > > > Or you can try removing the auth_username_format and instead > > > > passdb { > >  driver = sql > >  args = ... > > } > > passdb { > >  driver = static > >  args = user=%Ln noauthenticate > > # you can remove next line if you want to always normalize your usernames > >  skip = authenticated > > } > > passdb { > >  driver = pam > >  args = ... > >  skip = authenticated > > } > > > > Aki