Re: [Dovecot] Denying user won't work as expected

[Frank Bonnet]

On 06/28/2011 02:11 AM, Timo Sirainen wrote:

On Mon, 2011-06-27 at 09:50 +0200, Frank Bonnet wrote:

passdb {
    driver = ldap
    deny = yes

    # File contains a list of usernames, one per line
    args = /usr/local/etc/dovecot/deny-users
}

I have tested writting one user (me) in the
/usr/local/etc/dovecot/deny-users

You have driver=ldap there, which means that LDAP tries to read the
deny-users file as its configuration file.

and the result is the login is denied for ALL users ...

I'm surprised that it even starts up..

If replacing driver=ldap with driver=passwd-file doesn't help, show your
actual dovecot -n output.

If I do that the denying does not work , I'we written my login in

/usr/local/etc/dovecot/deny-users and I am still able to log in ( after 
restarting dovecot of course )
see attached the dovecot -n output

Thanks



# 2.0.12: /usr/local/etc/dovecot/dovecot.conf
# OS: FreeBSD 7.4-RELEASE amd64  
auth_verbose_passwords = plain
auth_worker_max_count = 100
debug_log_path = /var/log/dovecot/debug.log
default_client_limit = 6144
default_process_limit = 1024
disable_plaintext_auth = no
info_log_path = /var/log/dovecot/info.log
log_path = /var/log/dovecot/dovecot.log
mail_location = 
mbox:%h/:INDEX=/raid/cache/dovecot/index/%u:INBOX=/raid/var/mail/%u
mail_temp_dir = /var/tmp
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date
mbox_lock_timeout = 3 mins
mbox_write_locks = fcntl
mmap_disable = yes
passdb {
  args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
plugin {
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
}
postmaster_address = postmas...@esiee.fr
protocols = imap pop3
sendmail_path = /usr/local/sbin/sendmail
service auth {
  client_limit = 7169
}
service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
  process_min_avail = 10
  service_count = 1
  vsz_limit = 1 G
}
service imap {
  process_limit = 2048
  vsz_limit = 1 G
}
service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
  inet_listener sieve_deprecated {
    port = 2000
  }
}
service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}
ssl_ca = /etc/ssl/RENATER/chain-1828-mail.esiee.fr.pem
ssl_cert = </etc/ssl/RENATER/cert-1828-mail.esiee.fr.pem
ssl_key = </etc/ssl/RENATER/mail.esiee.fr.key
userdb {
  args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
verbose_proctitle = yes
protocol lda {
  info_log_path = /var/log/dovecot/dovecot-lda.log
  log_path = /var/log/dovecot/dovecot-lda-errors.log
  mail_plugins = 
}
protocol imap {
  imap_client_workarounds = tb-extra-mailbox-sep
}
protocol sieve {
  managesieve_implementation_string = Dovecot Pigeonhole
}