[Dovecot] authentication configuration

Timo Sirainen
Thu, 10 Jun 2004 15:37:27 -0000

On Tue, 2004-06-08 at 13:30, Tom Allison wrote:
> As I understand my set-up it's using unix authentication methods
> (/etc/passwd via pam?).
>
> Considering disable_plaintext_auth and auth_mechanisms, what exactly is
> being passed?  I was hoping to get
> auth_mechanism = digest-md5
> but that's not working out very well right now.  It seems I can only do
> plaintext authentication.

DIGEST-MD5 requires specially generated password field (see last line in
doc/auth.txt, realm means pretty much same as domain). PAM supports only
plaintext authentication, so you'll need to use something else
(passwd-file or postgresql).

> My current guess is:
> disable_plaintext_auth = yes
> auth = digest-md5
> auth_mechanism = digest_md5
> auth_passdb = /etc/mydigestfile
>
> How would I set this for pgsql?  auth_passdb = /etc/dovecot-pgsql.conf

auth_passdb requires as first parameter the database type name. eg.:

auth_passdb = passwd-file /etc/mydigestfile
auth_passdb = pgsql /etc/dovecot-pgsql.conf

Same goes for userdb.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20040610/6e4af3fa/attachment-0001.bin>