thr3ads.net - dovecot - Authdb NSS module [Jul 2019]

If this information is useful, please help other people find it:
Share via:

Eugene

2019-Jul-14 23:54 UTC

Authdb NSS module

Hello!

Upgrading manual tells that authdb [NSS module was removed][1] some time ago.

[1]: https://wiki2.dovecot.org/Upgrading/2.3#line-100
> userdb nss was removed. Use userdb passwd instead.
Can this change be reverted?
I'd like to use only libnss_sss.so.2 as dovecot userdb source. It's also
essential for me to enable files backend in nsswitch.conf so the system could
use local user db. At the same time dovecot must not see local users at all.
Authdb NSS module could help me there.
The other solution would be to use another instance of nsswitch.conf for dovecot
authdb passwd module. Is it possible?

Thanks!
-- 
Eugene Bright
IT engineer
Tel: + 79257289622

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20190715/f9607422/attachment.sig>

Aki Tuomi

2019-Jul-15 03:49 UTC

head link

Authdb NSS module

<!doctype html>
<html>
 <head> 
  <meta charset="UTF-8"> 
 </head>
 <body>
  <div>
   <br>
  </div>
  <blockquote type="cite">
   <div>
    On 15/07/2019 02:54 Eugene via dovecot <
    <a
href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a>>
wrote:
   </div>
   <div>
    <br>
   </div>
   <div>
    <br>
   </div>
   <div>
    Hello!
   </div>
   <div>
    <br>
   </div>
   <div>
    Upgrading manual tells that authdb [NSS module was removed][1] some time
ago.
   </div>
   <div>
    <br>
   </div>
   <div>
    [1]: 
    <a href="https://wiki2.dovecot.org/Upgrading/2.3#line-100"
rel="noopener"
target="_blank">https://wiki2.dovecot.org/Upgrading/2.3#line-100</a>
   </div>
   <div>
    <br>
   </div>
   <blockquote type="cite">
    <div>
     userdb nss was removed. Use userdb passwd instead.
    </div>
   </blockquote>
   <div>
    Can this change be reverted?
   </div>
   <div>
    I'd like to use only libnss_sss.so.2 as dovecot userdb source. It's
also essential for me to enable files backend in nsswitch.conf so the system
could use local user db. At the same time dovecot must not see local users at
all. Authdb NSS module could help me there.
   </div>
   <div>
    The other solution would be to use another instance of nsswitch.conf for
dovecot authdb passwd module. Is it possible?
   </div>
   <div>
    <br>
   </div>
   <div>
    Thanks!
   </div>
   <div>
    --
   </div>
   <div>
    Eugene Bright
   </div>
   <div>
    IT engineer
   </div>
   <div>
    Tel: + 79257289622
   </div>
  </blockquote>
  <div>
   <br>
  </div>
  <div>
   passwd uses getpwent library call which goes thru nssswitch. Your explanation
was strange though. If you don't want system users, why not use ldap or sql
directly?
  </div>
  <div class="io-ox-signature">
   <pre>---
Aki Tuomi</pre>
  </div> 
 </body>
</html>

Eugene Bright

2019-Jul-15 13:51 UTC

head link

Authdb NSS module

I use LDAP right now, but local cached sssd queries are much faster and
reliable.

On July 15, 2019 6:49:18 AM GMT+03:00, Aki Tuomi <aki.tuomi at
open-xchange.com> wrote:>
>
>On 15/07/2019 02:54 Eugene via dovecot < dovecot at dovecot.org>
wrote:
>
>
>
>Hello! 
>
>
>Upgrading manual tells that authdb [NSS module was removed][1] some
>time ago. 
>
>
>[1]: https://wiki2.dovecot.org/Upgrading/2.3#line-100 
>
>
>userdb nss was removed. Use userdb passwd instead. 
>
>Can this change be reverted? 
>
>I'd like to use only libnss_sss.so.2 as dovecot userdb source. It's
>also essential for me to enable files backend in nsswitch.conf so the
>system could use local user db. At the same time dovecot must not see
>local users at all. Authdb NSS module could help me there. 
>
>The other solution would be to use another instance of nsswitch.conf
>for dovecot authdb passwd module. Is it possible? 
>
>
>Thanks! 
>
>-- 
>
>Eugene Bright 
>
>IT engineer 
>
>Tel: + 79257289622 
>
>
>passwd uses getpwent library call which goes thru nssswitch. Your
>explanation was strange though. If you don't want system users, why not
>use ldap or sql directly?  
>
>--- Aki Tuomi 
---
Eugene Bright
IT-engineer
Tel.: +7 925 728 96 22
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20190715/30c9dc9c/attachment.html>

Reasonably Related Threads

Search for more possibly parallel threads

dovecot - Jul 2019 - Authdb NSS module

Authdb NSS module

Authdb NSS module

Authdb NSS module

Reasonably Related Threads