On Wed, Aug 17, 2016 at 09:57:22AM +0100, Craig Skinner wrote:
Hi Jeremy/all,

On Wed, 17 Aug 2016 00:25:30 -0500 Jeremy Volkening wrote:
....
The short of it is that to share the passwd file, either:

1. The file must be world-readable (not so good)

2. The opensmtpd and dovecot daemon users must share a primary group,
or

3. The daemons must call initgroups() or something similar after
dropping privileges.

4. As a workaround, in whatever script/Makefile which creates the file,
copy or hard link the file, e.g:

-rw-r----- 1 root postmasters 314 Aug 15 16:58 passwd
-rw-r----- 1 root opensmtpd   314 Aug 15 16:58 passwd-smtp
-rw-r----- 1 root dovecot     314 Aug 15 16:58 passwd-imap

Hard links (at least in Linux) can't have different owners/permissions, so that doesn't really solve this issue. But you're right, it's not a big deal to keep two copies of the database in sync if using a script of some sort to manage users.

Jeremy

--
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to