On Wed, Jan 01, 2003 at 06:40:11PM -0800, Three Letter Acronym wrote:
> So, the question is twofold:  First, does anyone actually run
> courier-imap as a non-root user in production?

Yep, do here.

> Second, and
> more important, is it possible to do this using userdb
> authentication?

I don't use that, I use LDAP. I run with

TCPDOPTS="-nodnslookup -noidentlookup -user=exim"

In authldaprc I have

LDAP_GLOB_UID           exim
LDAP_GLOB_GID           exim

and LDAP_HOMEDIR and LDAP_MAILDIR both point to the same attribute.

> I expect that if the entire mail hierarchy
> were owned by the imap daemon, things would be fine.  However,
> userdb authentication will not allow everyone to have the
> same uid

I don't see any fundamental reason why that should be. All the auth modules
call the same function - authsuccess() in authlib/success.c. Look at the top
of that function to see its logic. Try adding some fprintf(stderr...)'s to
work out what is going on. The functions it calls to change uid/gid are in
numlib/changeuidgid.c

You don't state exactly what you have in your userdb and your system. Do you
have an 'imap' user and an 'imap' group, and the 'imap' entry in /etc/passwd
has the 'imap' group as its group? Then

uid=<imap-uid>,gid=<imap-gid>

in your userdb?

Regards,

Brian.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to