Re: [Dovecot] Disabling users whilst still allowing logins with a 'master password'

2009-05-05 Thread Dominic Hargreaves
On Fri, May 01, 2009 at 04:38:46PM -0400, Timo Sirainen wrote: GSSAPI code is a bit of a mystery to me. :) I guess it would be possible to change it like that. But, anyway, how about using mail_executable script that checks if the logging in user is a master or user not, and if not check if

Re: [Dovecot] Disabling users whilst still allowing logins with a 'master password'

2009-05-05 Thread Dominic Hargreaves
On Fri, May 01, 2009 at 04:38:46PM -0400, Timo Sirainen wrote: But, anyway, how about using mail_executable script that checks if the logging in user is a master or user not, and if not check if the user is in some deny database. http://wiki.dovecot.org/PostLoginScripting One question about

Re: [Dovecot] Disabling users whilst still allowing logins with a 'master password'

2009-05-05 Thread Timo Sirainen
On May 5, 2009, at 10:24 AM, Dominic Hargreaves wrote: On Fri, May 01, 2009 at 04:38:46PM -0400, Timo Sirainen wrote: But, anyway, how about using mail_executable script that checks if the logging in user is a master or user not, and if not check if the user is in some deny database.

Re: [Dovecot] Disabling users whilst still allowing logins with a 'master password'

2009-05-01 Thread Timo Sirainen
On Thu, 2009-04-30 at 17:33 +0100, Dominic Hargreaves wrote: It would seem to be generally useful to be able to check GSSAPI logins against a deny passdb, but is this a valid code change? GSSAPI code is a bit of a mystery to me. :) I guess it would be possible to change it like that. But,

[Dovecot] Disabling users whilst still allowing logins with a 'master password'

2009-04-30 Thread Dominic Hargreaves
Hi, I'm having trouble coming up with an authentication configuration that does what we want with dovecot, and thought it would be worth passing it by the list in case anyone can spot an easy fix, or confirm my suspicions that code changes are required. You should probably be aware that this is

Re: [Dovecot] Disabling users whilst still allowing logins with a 'master password'

2009-04-30 Thread Matthijs Kooijman
Hi Dominic, Normally to disable logins for a user we chmod their mail store to 0 so they can't access it, which has the same effect, but this obviously also prevents the master password from being able to access it. Would it be feasible to chown the mailstore to some special user and use the