Ian McDonald wrote:
Please, what are the groups, if not using Unix auth?
AFAIK you'd have to use Kerberos. If you have --with-auth=unix, the group lookups go to the normal getpwnam()/getgrnam() functions, which finally consult anything your name service switch is configured to do. Theoretically this could use nss_ldap to get groups from LDAP, but more probably you'll get the infamous death by signal 11 due to SASL library version clashes... It wouldn't probably be very hard to write a patch to do direct LDAP (or whatever) group queries regardless of auth_unix and Kerberos, but I don't think anybody has done that. --mika
