Renaud Allard wrote:

*SNIP*

> In fact, I must admit I would prefer a patch that would let
> dovecot authenticate against exim (which in turn supports
> cyrus-sasl libray even for PLAIN, LOGIN,...).
> 

Have care also as to what (system) users Exim and Dovecot run as.

One can cause them to utilize the UID:GID of the end-user for 
delivery/retrieval (common).

We prefer running each under its own UID, and as members of a 
common group. Virtual users thereby need no system accounts at 
all, have no rights to mail storage except as authenticated 
clients of Dovecot or Exim, and knowledge of a user's UID cannot 
be escalated to non-mail or other-folks-mail on-box access.
Less common, AFAIK.

HTH,

Bill

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to