Re: Using user_deny.db

2017-09-19 Thread Ken Murchison
On 09/19/2017 11:31 AM, Michael Sofka wrote: On 09/19/2017 10:28 AM, Ken Murchison wrote: I believe that is it prior to authentication, based on my notes: https://lists.andrew.cmu.edu/pipermail/info-cyrus/2010-June/033119.html user_deny.db is NOT checked prior to completion of LOGIN

Re: Using user_deny.db

2017-09-19 Thread Michael Sofka
On 09/19/2017 10:28 AM, Ken Murchison wrote: I believe that is it prior to authentication, based on my notes: https://lists.andrew.cmu.edu/pipermail/info-cyrus/2010-June/033119.html user_deny.db is NOT checked prior to completion of LOGIN authentication, although it probably could/should. 

Re: Using user_deny.db

2017-09-19 Thread Ken Murchison
On 09/19/2017 10:17 AM, Dan White wrote: On 09/19/17 10:02 -0400, Michael Sofka wrote: We have many recalcitrant, bad, accounts constantly checking IMAP, long after the student has graduated. I would like to use user_deny.db to simply tell them to go away. First, would this offer an

Re: Using user_deny.db

2017-09-19 Thread Dan White
On 09/19/17 10:02 -0400, Michael Sofka wrote: We have many recalcitrant, bad, accounts constantly checking IMAP, long after the student has graduated. I would like to use user_deny.db to simply tell them to go away. First, would this offer an advantage? That is, does "login" check

Using user_deny.db

2017-09-19 Thread Michael Sofka
We have many recalcitrant, bad, accounts constantly checking IMAP, long after the student has graduated. I would like to use user_deny.db to simply tell them to go away. First, would this offer an advantage? That is, does "login" check user_deny.db before authenticating, or after? Second,