dovecot/original-hg/dovecot-1.2: dovecot-example.conf annotate

annotate dovecot-example.conf @ 1040:299f59fb9ff4 HEAD

Authentication named socket permissions were insecure, an exploited login process could have replaced it with it's own and began reading plaintext passwords sent by other login processes.

author	Timo Sirainen <tss@iki.fi>
date	Mon, 27 Jan 2003 04:42:02 +0200
parents	fe49ece0f3ea
children	a72bba3f8a55

rev	line source
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	1 ## Dovecot 1.0 configuration file
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	2
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	3 # Default values are shown after each value, it's not required to uncomment
435 06576f1d9e69 doc updates Timo Sirainen <tss@iki.fi> parents: 284 diff changeset	4 # any of the lines. Exception to this are paths, they're just examples
06576f1d9e69 doc updates Timo Sirainen <tss@iki.fi> parents: 284 diff changeset	5 # with real defaults being based on configure options. The paths listed here
06576f1d9e69 doc updates Timo Sirainen <tss@iki.fi> parents: 284 diff changeset	6 # are for configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
657 85a888d2766e Added script to easily generate self-signed certificate. Timo Sirainen <tss@iki.fi> parents: 644 diff changeset	7 # --with-ssldir=/etc/ssl
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	8
872 6377d4f7a31c Added base_dir setting, so the configure time --localstatedir can be Timo Sirainen <tss@iki.fi> parents: 817 diff changeset	9 # Base directory where to store runtime data.
6377d4f7a31c Added base_dir setting, so the configure time --localstatedir can be Timo Sirainen <tss@iki.fi> parents: 817 diff changeset	10 #base_dir = /var/run/dovecot/
6377d4f7a31c Added base_dir setting, so the configure time --localstatedir can be Timo Sirainen <tss@iki.fi> parents: 817 diff changeset	11
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	12 # Port to listen in for IMAP connections. This port is used for TLS
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	13 # connections as well. Setting it to 0 disables it.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	14 #imap_port = 143
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	15
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	16 # Port to listen in for SSL IMAP connections. Setting it to 0 disables it.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	17 #imaps_port = 993
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	18
780 1cc947617c8b imap_listen and imaps_listen accepts now "" as "all IPv4 interfaces" and Timo Sirainen <tss@iki.fi>* parents: 779 diff changeset	19 # IP or host address where to listen in for IMAP connections. It's not
1cc947617c8b imap_listen and imaps_listen accepts now "" as "all IPv4 interfaces" and Timo Sirainen <tss@iki.fi>* parents: 779 diff changeset	20 # possible to specify multiple addresses. "*" listens in all IPv4 interfaces.
1cc947617c8b imap_listen and imaps_listen accepts now "" as "all IPv4 interfaces" and Timo Sirainen <tss@iki.fi>* parents: 779 diff changeset	21 # "::" listens in all IPv6 interfaces, but may also listen in all IPv4
1cc947617c8b imap_listen and imaps_listen accepts now "" as "all IPv4 interfaces" and Timo Sirainen <tss@iki.fi>* parents: 779 diff changeset	22 # interfaces depending on the operating system.
1cc947617c8b imap_listen and imaps_listen accepts now "" as "all IPv4 interfaces" and Timo Sirainen <tss@iki.fi>* parents: 779 diff changeset	23 #imap_listen = *
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	24
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	25 # IP or host address where to listen in for SSL IMAP connections. Defaults
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	26 # to imap_listen if not specified.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	27 #imaps_listen =
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	28
666 36ac2fd352ff Added ssl_disable setting. Timo Sirainen <tss@iki.fi> parents: 661 diff changeset	29 # Disable SSL support.
36ac2fd352ff Added ssl_disable setting. Timo Sirainen <tss@iki.fi> parents: 661 diff changeset	30 #ssl_disable = no
36ac2fd352ff Added ssl_disable setting. Timo Sirainen <tss@iki.fi> parents: 661 diff changeset	31
519 9e121e74c188 and a couple more fixes.. Timo Sirainen <tss@iki.fi> parents: 518 diff changeset	32 # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
518 1f9b96080525 Updated SSL certificate comments. Timo Sirainen <tss@iki.fi> parents: 472 diff changeset	33 # dropping root privileges, so keep the key file unreadable by anyone but
657 85a888d2766e Added script to easily generate self-signed certificate. Timo Sirainen <tss@iki.fi> parents: 644 diff changeset	34 # root. Included doc/mkcert.sh can be used to easily generate self-signed
85a888d2766e Added script to easily generate self-signed certificate. Timo Sirainen <tss@iki.fi> parents: 644 diff changeset	35 # certificate, just make sure to update the domains in dovecot-openssl.cnf
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	36 #ssl_cert_file = /etc/ssl/certs/imapd.pem
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	37 #ssl_key_file = /etc/ssl/private/imapd.pem
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	38
615 0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	39 # SSL parameter file. Master process generates this file for login processes.
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	40 # It contains Diffie Hellman and RSA parameters.
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	41 #ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	42
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	43 # How often to regenerate the SSL parameters file. Generation is quite CPU
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	44 # intensive operation. The value is in hours, 0 disables regeneration
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	45 # entirely.
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	46 #ssl_parameters_regenerate = 24
0d852af6842e Master process generates DH/RSA parameters now and stores them into file Timo Sirainen <tss@iki.fi> parents: 614 diff changeset	47
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	48 # Disable LOGIN command and all other plaintext authentications unless
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	49 # SSL/TLS is used (LOGINDISABLED capability)
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	50 #disable_plaintext_auth = no
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	51
35 b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	52 # Use this logfile instead of syslog()
b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	53 #log_path =
b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	54
811 664de3231e33 Added info_log_file setting and i_info() function to write to it. Default is Timo Sirainen <tss@iki.fi> parents: 788 diff changeset	55 # For informational messages, use this logfile instead of the default
664de3231e33 Added info_log_file setting and i_info() function to write to it. Default is Timo Sirainen <tss@iki.fi> parents: 788 diff changeset	56 #info_log_path =
664de3231e33 Added info_log_file setting and i_info() function to write to it. Default is Timo Sirainen <tss@iki.fi> parents: 788 diff changeset	57
35 b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	58 # Prefix for each line written to log file. % codes are in strftime(3)
b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	59 # format. Note the extra space at the end of line.
b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	60 #log_timestamp = %b %d %H:%M:%S
b420373f88f6 Added log_path and log_timestamp settings to config file. Removed -l command Timo Sirainen <tss@iki.fi> parents: 27 diff changeset	61
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	62 ##
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	63 ## Login process
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	64 ##
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	65
1040 299f59fb9ff4 Authentication named socket permissions were insecure, an exploited login Timo Sirainen <tss@iki.fi> parents: 1035 diff changeset	66 # Executable location.
661 b88b5488bcfd updated lib paths to libexec ones Timo Sirainen <tss@iki.fi> parents: 657 diff changeset	67 #login_executable = /usr/libexec/dovecot/imap-login
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	68
1040 299f59fb9ff4 Authentication named socket permissions were insecure, an exploited login Timo Sirainen <tss@iki.fi> parents: 1035 diff changeset	69 # User to use for imap-login process. The user must belong to a group
299f59fb9ff4 Authentication named socket permissions were insecure, an exploited login Timo Sirainen <tss@iki.fi> parents: 1035 diff changeset	70 # where only it has access, it's used to control access for authentication
299f59fb9ff4 Authentication named socket permissions were insecure, an exploited login Timo Sirainen <tss@iki.fi> parents: 1035 diff changeset	71 # process named sockets.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	72 #login_user = imapd
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	73
722 0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	74 # Set max. process size in megabytes. If you don't use
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	75 # login_process_per_connection you might need to grow this.
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	76 #login_process_size = 16
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	77
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	78 # Directory where imap-auth places authentication UNIX sockets which login
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	79 # needs to be able to connect to. The sockets are created when running as
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	80 # root, so you don't need to give imap-auth any access for it.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	81 #login_dir = /var/run/dovecot/login
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	82
435 06576f1d9e69 doc updates Timo Sirainen <tss@iki.fi> parents: 284 diff changeset	83 # chroot imap-login process to the login_dir. Only reason not to do this
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	84 # is if you wish to run the whole imapd without roots.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	85 #login_chroot = yes
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	86
613 1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	87 # Should each login be processed in it's own process (yes), or should one
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	88 # login process be allowed to process multiple connections (no)? Yes is more
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	89 # secure, espcially with SSL/TLS enabled. No is faster since there's no need
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	90 # to create processes all the time.
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	91 #login_process_per_connection = yes
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	92
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	93 # Number of imap-login processes to create. If login_process_per_user is
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	94 # yes, this is the number of extra processes waiting for users to log in.
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	95 #login_processes_count = 3
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	96
614 e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	97 # Maximum number of extra login processes to create. The extra process count
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	98 # usually stays at login_processes_count, but when multiple users start logging
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	99 # in at the same time more extra processes are created. To prevent fork-bombing
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	100 # we check only once in a second if new processes should be created - if all
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	101 # of them are used at the time, we double their amount until limit set by this
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	102 # setting is reached. This setting is used only if login_process_per_use is yes.
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	103 #login_max_processes_count = 128
e60620644af3 login_process_per_connection = yes scales now better when multiple users are Timo Sirainen <tss@iki.fi> parents: 613 diff changeset	104
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	105 # Maximum number of connections allowed in login state. When this limit is
613 1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	106 # reached, the oldest connections are dropped. If login_process_per_user
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	107 # is no, this is a per-process value, so the absolute maximum number of users
1906116a62ce Finally support for handling each login connection in it's own process. Timo Sirainen <tss@iki.fi> parents: 600 diff changeset	108 # logging in actually login_processes_count * max_logging_users.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	109 #max_logging_users = 256
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	110
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	111 ##
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	112 ## IMAP process
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	113 ##
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	114
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	115 # Executable location
661 b88b5488bcfd updated lib paths to libexec ones Timo Sirainen <tss@iki.fi> parents: 657 diff changeset	116 #imap_executable = /usr/libexec/dovecot/imap
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	117
722 0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	118 # Set max. process size in megabytes. Most of the memory goes to mmap()ing
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	119 # files, so it shouldn't harm much even if this limit is set pretty high.
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	120 #imap_process_size = 256
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	121
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	122 # Maximum number of running imap processes. When this limit is reached,
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	123 # new users aren't allowed to log in.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	124 #max_imap_processes = 1024
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	125
596 ab3590c3a7d9 Added verbose_proctitle setting: Show more verbose process titles (in ps). Timo Sirainen <tss@iki.fi> parents: 519 diff changeset	126 # Show more verbose process titles (in ps). Currently shows user name and
ab3590c3a7d9 Added verbose_proctitle setting: Show more verbose process titles (in ps). Timo Sirainen <tss@iki.fi> parents: 519 diff changeset	127 # IP address. Useful for seeing who are actually using the IMAP processes
ab3590c3a7d9 Added verbose_proctitle setting: Show more verbose process titles (in ps). Timo Sirainen <tss@iki.fi> parents: 519 diff changeset	128 # (eg. shared mailboxes or if same uid is used for multiple accounts).
ab3590c3a7d9 Added verbose_proctitle setting: Show more verbose process titles (in ps). Timo Sirainen <tss@iki.fi> parents: 519 diff changeset	129 #verbose_proctitle = no
ab3590c3a7d9 Added verbose_proctitle setting: Show more verbose process titles (in ps). Timo Sirainen <tss@iki.fi> parents: 519 diff changeset	130
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	131 # Valid UID/GID ranges for imap users, defaults to 500 and above.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	132 # Note that denying root logins is hardcoded to imap-master binary and
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	133 # can't be done even if first_valid_uid is set to 0.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	134 #first_valid_uid = 500
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	135 #last_valid_uid = 0
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	136
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	137 #first_valid_gid = 1
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	138 #last_valid_gid = 0
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	139
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	140 # ':' separated list of directories under which chrooting is allowed for imap
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	141 # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too).
978 d3433363bcaa comment update Timo Sirainen <tss@iki.fi> parents: 882 diff changeset	142 # This setting doesn't affect login_chroot or auth_chroot variables.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	143 # WARNING: Never add directories here which local users can modify, that
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	144 # may lead to root exploit. Usually this should be done only if you don't
979 fd1438d43443 comment update Timo Sirainen <tss@iki.fi> parents: 978 diff changeset	145 # allow shell access for users. See doc/configuration.txt for more information.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	146 #valid_chroot_dirs =
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	147
779 f126b666859e New setting: default_mail_env which can be used to specify where to find Timo Sirainen <tss@iki.fi> parents: 722 diff changeset	148 # Default MAIL environment to use when it's not set. By leaving this empty
f126b666859e New setting: default_mail_env which can be used to specify where to find Timo Sirainen <tss@iki.fi> parents: 722 diff changeset	149 # dovecot tries to do some automatic detection as described in
813 493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	150 # doc/mail-storages.txt. There's a few special variables you can use:
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	151 #
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	152 # %u - username
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	153 # %n - user part in user@domain, same as %u if there's no domain
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	154 # %d - domain part in user@domain, empty if user there's no domain
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	155 # %h - home directory
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	156 #
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	157 # You can also limit a width of string by giving the number of max. characters
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	158 # after the '%' character. For example %1u gives the first character of
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	159 # username. Some examples:
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	160 #
493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	161 # maildir:/var/mail/%1u/%u/Maildir
815 ef64c9a50326 Support for separate location of mbox INBOX folder. Timo Sirainen <tss@iki.fi> parents: 813 diff changeset	162 # mbox:~/mail/:INBOX=/var/mail/%u
817 86cf24da85f1 Added :INDEX=<dir> for both Maildir and mbox to specify different location Timo Sirainen <tss@iki.fi> parents: 815 diff changeset	163 # mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n
813 493bc8da9e80 default_mail_env behaviour changed. We use %u instead of $U now. Added also Timo Sirainen <tss@iki.fi> parents: 811 diff changeset	164 #
779 f126b666859e New setting: default_mail_env which can be used to specify where to find Timo Sirainen <tss@iki.fi> parents: 722 diff changeset	165 #default_mail_env =
f126b666859e New setting: default_mail_env which can be used to specify where to find Timo Sirainen <tss@iki.fi> parents: 722 diff changeset	166
462 67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	167 # Space-separated list of fields to cache for all mails. Currently these
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	168 # fields are allowed followed by a list of commands they speed up:
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	169 #
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	170 # Envelope - FETCH ENVELOPE and SEARCH FROM, TO, CC, BCC, SUBJECT,
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	171 # SENTBEFORE, SENTON, SENTSINCE, HEADER MESSAGE-ID,
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	172 # HEADER IN-REPLY-TO
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	173 # Body - FETCH BODY
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	174 # Bodystructure - FETCH BODY, BODYSTRUCTURE
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	175 # MessagePart - FETCH BODY[1.2.3] (ie. body parts), RFC822.SIZE,
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	176 # SEARCH SMALLER, LARGER, also speeds up BODY/BODYSTRUCTURE
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	177 # generation. This is always set with mbox mailboxes, and
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	178 # also default with Maildir.
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	179 #
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	180 # Different IMAP clients work in different ways, that's why Dovecot by default
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	181 # only caches MessagePart which speeds up most operations. Whenever client
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	182 # does something where caching could be used, the field is automatically marked
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	183 # to be cached later. For example after FETCH BODY the BODY will be cached
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	184 # for all new messages. Normally you should leave this alone, unless you know
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	185 # what most of your IMAP clients are. Caching more fields than needed makes
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	186 # the index files larger and generate useless I/O.
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	187 #
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	188 # With maildir there's one extra optimization - if nothing is cached, indexing
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	189 # the maildir becomes much faster since it's not opening any of the mail files.
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	190 # This could be useful if your IMAP clients access only new mails.
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	191
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	192 #mail_cache_fields = MessagePart
67d22b7b0918 Added mail_cache_fields and mail_never_cache_fields settings, plus settings Timo Sirainen <tss@iki.fi> parents: 435 diff changeset	193
987 cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	194 # Space-separated list of fields that Dovecot should never set to be cached.
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	195 # Useful if you want to save disk space at the cost of more I/O when the fields
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	196 # needed.
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	197 #mail_never_cache_fields =
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	198
600 3b44bc64afd4 mailbox_check_interval setting: Dovecot can notify client of new mail in Timo Sirainen <tss@iki.fi> parents: 596 diff changeset	199 # Dovecot can notify client of new mail in selected mailbox soon after it's
3b44bc64afd4 mailbox_check_interval setting: Dovecot can notify client of new mail in Timo Sirainen <tss@iki.fi> parents: 596 diff changeset	200 # received. This setting specifies the minimum interval in seconds between
3b44bc64afd4 mailbox_check_interval setting: Dovecot can notify client of new mail in Timo Sirainen <tss@iki.fi> parents: 596 diff changeset	201 # new mail notifications to client - internally they may be checked more or
3b44bc64afd4 mailbox_check_interval setting: Dovecot can notify client of new mail in Timo Sirainen <tss@iki.fi> parents: 596 diff changeset	202 # less often. Setting this to 0 disables the checking.
788 5b2a247ed361 mailbox_check_interval is now disabled by default, at least Evolution breaks Timo Sirainen <tss@iki.fi> parents: 780 diff changeset	203 # NOTE: Evolution client breaks with this option when it's trying to APPEND.
5b2a247ed361 mailbox_check_interval is now disabled by default, at least Evolution breaks Timo Sirainen <tss@iki.fi> parents: 780 diff changeset	204 #mailbox_check_interval = 0
600 3b44bc64afd4 mailbox_check_interval setting: Dovecot can notify client of new mail in Timo Sirainen <tss@iki.fi> parents: 596 diff changeset	205
472 2fa0bfb65268 Added setting mail_save_crlf. Few other settings cleanups. Timo Sirainen <tss@iki.fi> parents: 462 diff changeset	206 # Save mails with CR+LF instead of plain LF. This makes sending those mails
2fa0bfb65268 Added setting mail_save_crlf. Few other settings cleanups. Timo Sirainen <tss@iki.fi> parents: 462 diff changeset	207 # take less CPU, especially with sendfile() syscall with Linux and FreeBSD.
2fa0bfb65268 Added setting mail_save_crlf. Few other settings cleanups. Timo Sirainen <tss@iki.fi> parents: 462 diff changeset	208 # But it also creates a bit more disk I/O which may just make it slower.
2fa0bfb65268 Added setting mail_save_crlf. Few other settings cleanups. Timo Sirainen <tss@iki.fi> parents: 462 diff changeset	209 #mail_save_crlf = no
2fa0bfb65268 Added setting mail_save_crlf. Few other settings cleanups. Timo Sirainen <tss@iki.fi> parents: 462 diff changeset	210
644 415498fa78d6 mail_read_mmaped: Use mmap() instead of read() to read mail files. read() Timo Sirainen <tss@iki.fi> parents: 643 diff changeset	211 # Use mmap() instead of read() to read mail files. read() seems to be a bit
415498fa78d6 mail_read_mmaped: Use mmap() instead of read() to read mail files. read() Timo Sirainen <tss@iki.fi> parents: 643 diff changeset	212 # faster with my Linux/x86 and it's better with NFS, so that's the default.
987 cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	213 # Currently mmap()ing is forced with mbox - this is a bug and will be fixed.
644 415498fa78d6 mail_read_mmaped: Use mmap() instead of read() to read mail files. read() Timo Sirainen <tss@iki.fi> parents: 643 diff changeset	214 #mail_read_mmaped = no
415498fa78d6 mail_read_mmaped: Use mmap() instead of read() to read mail files. read() Timo Sirainen <tss@iki.fi> parents: 643 diff changeset	215
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	216 # Copy mail to another folders using hard links. This is much faster than
987 cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	217 # actually copying the file. This is problematic only if something modifies
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	218 # the mail in one folder but doesn't want it modified in the others. I don't
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	219 # know any MUA which would modify mail files directly. IMAP protocol also
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	220 # requires that the mails don't change, so it would be problematic in any case.
cbf096fbb9f0 comment updates Timo Sirainen <tss@iki.fi> parents: 979 diff changeset	221 # If you care about performance, enable it.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	222 #maildir_copy_with_hardlinks = no
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	223
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	224 # Check if mails' content has been changed by external programs. This slows
882 38b3bc6ddcc4 Changed maildir_check_content_changes = yes now to treat the message as new Timo Sirainen <tss@iki.fi> parents: 872 diff changeset	225 # down things as extra stat() needs to be called for each file. If changes are
38b3bc6ddcc4 Changed maildir_check_content_changes = yes now to treat the message as new Timo Sirainen <tss@iki.fi> parents: 872 diff changeset	226 # noticed, the message is treated as a new message, since IMAP protocol
38b3bc6ddcc4 Changed maildir_check_content_changes = yes now to treat the message as new Timo Sirainen <tss@iki.fi> parents: 872 diff changeset	227 # specifies that existing message are immutable.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	228 #maildir_check_content_changes = no
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	229
643 da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	230 # Which locking methods to use for locking mbox. All of them are used by
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	231 # default. flock is ignored in systems which don't have it. Note that the
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	232 # order of fcntl and flock are important to prevent deadlocks if they're both
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	233 # also used by other programs accessing the mailbox. Dotlock file is always
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	234 # created first.
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	235 #mbox_locks = dotlock fcntl flock
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	236
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	237 # Should we create dotlock file even when we want only a read-lock? Setting
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	238 # this to yes hurts the performance when the mailbox is accessed simultaneously
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	239 # by multiple processes, but it's needed for reliable reading if no other
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	240 # locking methods are available.
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	241 #mbox_read_dotlock = no
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	242
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	243 # Maximum time in seconds to wait for lock (all of them) before aborting.
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	244 #mbox_lock_timeout = 300
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	245
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	246 # If dotlock exists but the mailbox isn't modified in any way, override the
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	247 # lock file after this many seconds.
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	248 #mbox_dotlock_change_timeout = 30
da34bdd4e0c6 Added mbox lock settings to config file. Support timeouting fcntl() and Timo Sirainen <tss@iki.fi> parents: 615 diff changeset	249
101 edc37d046b08 Added overwrite_incompatible_index setting. Also we now try to use only Timo Sirainen <tss@iki.fi> parents: 35 diff changeset	250 # If main index file is incompatible with us, should we overwrite it or
edc37d046b08 Added overwrite_incompatible_index setting. Also we now try to use only Timo Sirainen <tss@iki.fi> parents: 35 diff changeset	251 # create a new index with another name. Unless you are running Dovecot in
edc37d046b08 Added overwrite_incompatible_index setting. Also we now try to use only Timo Sirainen <tss@iki.fi> parents: 35 diff changeset	252 # multiple computers with different architectures accessing the same
edc37d046b08 Added overwrite_incompatible_index setting. Also we now try to use only Timo Sirainen <tss@iki.fi> parents: 35 diff changeset	253 # mailboxes (eg. via NFS), it's safe to set this "yes".
edc37d046b08 Added overwrite_incompatible_index setting. Also we now try to use only Timo Sirainen <tss@iki.fi> parents: 35 diff changeset	254 #overwrite_incompatible_index = no
edc37d046b08 Added overwrite_incompatible_index setting. Also we now try to use only Timo Sirainen <tss@iki.fi> parents: 35 diff changeset	255
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	256 # umask to use for mail files and directories
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	257 #umask = 0077
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	258
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	259 ##
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	260 ## Authentication processes
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	261 ##
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	262
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	263 # You can have multiple processes; each time "auth = xx" is seen, a new
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	264 # process definition is started. The point of multiple processes is to be
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	265 # able to set stricter permissions to others. For example, plain/PAM
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	266 # authentication requires roots, but if you also use digest-md5 authentication
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	267 # for some users, you can authenticate them without any privileges in a
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	268 # separate auth process. Just remember that only one auth process is asked
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	269 # for the password, so you can't have different passwords with different
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	270 # processes (unless they have different auth methods, and you're ok with
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	271 # having different password for each method).
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	272
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	273 # Authentication process name.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	274 auth = default
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	275
1035 fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	276 # Space separated list of wanted authentication mechanisms:
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	277 # plain digest-md5
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	278 auth_mechanisms = plain
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	279
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	280 # Space separated list of realms with authentication methods that need them.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	281 # This is usually empty or the host name of the server (eg.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	282 # mail.mycompany.com).
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	283 # - plain auth checks the password from all realms specified in here
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	284 # - digest-md5 must have the password added for each realm separately, and
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	285 # many clients simply use the first realm listed here. so if you really
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	286 # need to add more realms, add them to end of the list.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	287 #auth_realms =
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	288
1035 fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	289 # Where user database is kept:
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	290 # passwd: /etc/passwd or similiar, using getpwnam()
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	291 # passwd-file <path>: passwd-like file with specified location
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	292 # static uid=<uid> gid=<gid> home=<dir template>: static settings
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	293 # vpopmail: vpopmail library
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	294 auth_userdb = passwd
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	295
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	296 # Where password database is kept:
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	297 # passwd: /etc/passwd or similiar, using getpwnam()
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	298 # shadow: /etc/shadow or similiar, using getspnam()
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	299 # pam: PAM authentication
1035 fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	300 # passwd-file <path>: passwd-like file with specified location
280 fa2d1a1d025e vpopmail authentication. compiles, not tested if it really works. Timo Sirainen <tss@iki.fi> parents: 101 diff changeset	301 # vpopmail: vpopmail authentication
1035 fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	302 auth_passdb = pam
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	303
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	304 # Executable location
661 b88b5488bcfd updated lib paths to libexec ones Timo Sirainen <tss@iki.fi> parents: 657 diff changeset	305 #auth_executable = /usr/libexec/dovecot/imap-auth
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	306
722 0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	307 # Set max. process size in megabytes.
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	308 #auth_process_size = 256
0438621d25ff Added virtual memory size limits to processes. Default values are pretty Timo Sirainen <tss@iki.fi> parents: 666 diff changeset	309
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	310 # User to use for the process. Only shadow and pam authentication requires
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	311 # roots, so use something else if possible.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	312 auth_user = root
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	313
435 06576f1d9e69 doc updates Timo Sirainen <tss@iki.fi> parents: 284 diff changeset	314 # Directory where to chroot the process. Most authentication backends don't
06576f1d9e69 doc updates Timo Sirainen <tss@iki.fi> parents: 284 diff changeset	315 # work if this is set, and there's no point chrooting if auth_user is root.
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	316 #auth_chroot =
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	317
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	318 # Number of authentication processes to create
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	319 #auth_count = 1
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	320
999 070aee0e5b9f Added auth_verbose Timo Sirainen <tss@iki.fi> parents: 987 diff changeset	321 # More verbose logging. Useful for figuring out why authentication isn't
070aee0e5b9f Added auth_verbose Timo Sirainen <tss@iki.fi> parents: 987 diff changeset	322 # working.
070aee0e5b9f Added auth_verbose Timo Sirainen <tss@iki.fi> parents: 987 diff changeset	323 #auth_verbose = no
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	324
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	325 # digest-md5 authentication process. It requires special MD5 passwords which
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	326 # /etc/shadow and PAM doesn't support, so we never need roots to handle it.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	327 # Note that the passwd-file is opened before chrooting and dropping root
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	328 # privileges, so it may be 0600-root owned file.
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	329
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	330 #auth = digest_md5
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	331 #auth_methods = digest-md5
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	332 #auth_realms =
1035 fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	333 #auth_userdb = passwd-file /etc/passwd.imap
fe49ece0f3ea We have now separate "userdb" and "passdb". They aren't tied to each others Timo Sirainen <tss@iki.fi> parents: 999 diff changeset	334 #auth_passdb = passwd-file /etc/passwd.imap
0 3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	335 #auth_user = imapauth
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	336 #auth_chroot = /var/run/dovecot/auth
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	337
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	338 # if you plan to use only passwd-file, you don't need the two auth processes,
3b1985cbc908 Initial revision Timo Sirainen <tss@iki.fi> parents: diff changeset	339 # simply set "auth_methods = plain digest-md5"

Mercurial > dovecot > original-hg > dovecot-1.2

annotate dovecot-example.conf @ 1040:299f59fb9ff4 HEAD