wie...@porcupine.org (Wietse Venema) wrote:
> Andrzej A. Filip:
>> wie...@porcupine.org (Wietse Venema) wrote:
>> [...]
>> > In any case, using UNIX system account names with @ is a mistake,
>> > and I will not put in a great deal of effort to make that easy.
>> 
>> IMHO it does make sense at big system shared by a few+ "loosely coupled"
>> organizations or in server group sharing common authentication system.
>
> Do those users really require shell access on your server? I would
> allow only UNIX shell accounts via PAM, and look up the remainder
> with the Postfix LDAP client.
> [...]

Would you agree with "diplomatic compromise" that you are right in huge
majority of cases but I am right in some (presently very rare) cases? :-)
I can easily agree that @ in names of Unix OS accounts will stay as
"not _recommended_" for LONG.  I disagree it *must* stay this way.

P.S.
My investigation of the problem has been triggered by another person question
at ServerFault site.  I was curious to compare available "Postfix hacks" to
"Sendmail hacks"

-- 
A. Filip

Reply via email to