Using user_deny.db

Dan White dwhite at olp.net
Tue Sep 19 10:17:15 EDT 2017


On 09/19/17 10:02 -0400, Michael Sofka wrote:
>We have many recalcitrant, bad, accounts constantly checking IMAP, 
>long after the student has graduated.  I would like to use 
>user_deny.db to simply tell them to go away.
>
>First, would this offer an advantage?  That is, does "login" check 
>user_deny.db before authenticating, or after?

I believe that is it prior to authentication, based on my notes:

https://lists.andrew.cmu.edu/pipermail/info-cyrus/2010-June/033119.html

>Second, any examples of how to use cyr_dbtool (or other tool) to put 
>entries into user_deny.db?
>
>Finally, my reading of the documentation (2.4.17/18) is that 
>user_deny.db is a flat file by default, so I will need to set 
>userdeny_db to something like skiplist, or berkeley, etc.  Any 
>suggestions on a good choice assuming the list could grow to a few 
>thousand?  Any documentation on the sql option?


-- 
Dan White


More information about the Info-cyrus mailing list