X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fservers%2Fdrsnuggles.git;a=blobdiff_plain;f=etc%2Fpam_ldap_dovecot.conf;fp=etc%2Fpam_ldap_dovecot.conf;h=b5c31c81e5bc50013f787c65a6c11924a13b098b;hp=0000000000000000000000000000000000000000;hb=4ce691b560b037fc7a87219d92a175156c92f892;hpb=be02e552db38aa66658c5799f58e61bec39df736

diff --git a/etc/pam_ldap_dovecot.conf b/etc/pam_ldap_dovecot.conf
new file mode 100644
index 0000000..b5c31c8
--- /dev/null
+++ b/etc/pam_ldap_dovecot.conf
@@ -0,0 +1,21 @@
+#
+# See /usr/share/libpam-ldap/ldap.conf for example configuration and more
+# options.
+#
+#
+# Dovecot-specific version of pam_ldap.conf that checks the mailHost attribute
+# instead of the "host" attribute, so people without SSH access can still use
+# IMAP, and only people whose mail is delivered on this host can use IMAP.
+
+# The distinguished name of the search base.
+base dc=drsnuggles,dc=stderr,dc=nl
+
+# The LDAP server. ldaps:// is secure, ldapi:// is local socket
+uri ldap://ldap.drsnuggles.stderr.nl
+
+# The LDAP version to use
+ldap_version 3
+
+# Only allow people to login to dovecot when their email is delivered here.
+# Too bad this uses a hardcoded hostname, though...
+pam_filter mailHost=mail.drsnuggles.stderr.nl