Beyond rtcyrus2 (sendmail integration)

[Gary Mills]

On Sun, Dec 03, 2006 at 05:33:15PM -0800, Jo Rhett wrote:
> Gary Mills wrote:
> >We've had excellent sendmail/cyrus integration for years, with
> >35,000 users.  It's done by having all users in the NIS map on
> >the mail server.  No modification to sendmail is necessary because
> >getpwnam() returns the passwd entry for the user.  Users can't log
> >in to the mail server, of course, because PAM rules prevent that.
> >The same thing could be done with other user databases, such as
> >LDAP.  Why would you ever need a different form of integration?
> 
> We've done the same by putting all user accounts into virtusertable with 
> the no-recursion option.
> 
> That said, it does require something to take user accounts and export 
> them into virtusertable/nis maps/etc.  So this approach is technically 
> superior to what you and I are doing.

Well, unless you are offering only e-mail service, you have to do that
anyway.  We offer many services to all, or subsets, of our users.
Having them all in one database is very convenient.  For example, we
have a web portal that authenticates users from the same database as
the e-mail server.

-- 
-Gary Mills-    -Unix Support-    -U of M Academic Computing and Networking-