Script to list mailboxes, useful for PAM auth

Bron Gondwana brong at fastmail.fm
Fri Apr 15 13:24:22 EDT 2011


On Fri, Apr 15, 2011 at 02:10:01PM -0300, D G Teed wrote:
> I didn't see many living examples of how to do this, so I thought
> it might be useful to share.
> 
> In our system, we have an LDAP auth backend which can be broader
> than the mailboxes on a system.  We didn't have any luck with
> using pam_groupdn in pam_ldap.conf, so it is useful to use the PAM
> module listfile.  In pam.d/imap (same for pop or sieve) we would include:
> 
> auth        required      pam_listfile.so onerr=fail item=user sense=allow
> file=/cyrus/mailmgmt/mysystemlist
> 
> If you are not in this file list of users, but you have
> authenticated against the backend OK, you won't get in.

Sounds like you want something that can check if a mailbox actually
exists.  Something like smmapd, but possibly not looking for postable
and quota.

Bron.


More information about the Info-cyrus mailing list