On 2020-09-24, Hakan E. Duran <ehakandu...@gmail.com> wrote: > I set up a simple mail server on OpenBSD on a VPS, based on OpenSMTP > and Dovecot. The users will be the Unix users on the VPS for simplicity. > However, I now have the problem of allowing users setting and modifying > their own passwords (perhaps even their usernames) without giving them > ssh access to the host. I don't have technical background and training > for this type of work; however, I love doing this, please be gentle with > me. The mail server is a hobby that is intended for family and a few > friends, and is not mission critical.
The email daemons don't have to use the passwords associated with Unix accounts, they can do their own authentication against some database (LDAP/SQL). With this it will be a lot easier to allow self-service password changes via a web-based system as you're just updating a database record. FWIW on dedicated mailservers I find it simpler to skip the separate Unix user accounts completely and just use a single uid for mail storage, especially if using shared mailboxes. It's not difficult to setup - https://wiki.dovecot.org/VirtualUsers
