diff dovecot-example.conf @ 8560:b6a7bc10c19a HEAD

Replaced auth_worker_max_request_count setting with passdb pam { args = max_requests=n }
author Timo Sirainen <tss@iki.fi>
date Tue, 16 Dec 2008 08:06:56 +0200
parents adfe0b077dc7
children 9c4f9c47299b
line wrap: on
line diff
--- a/dovecot-example.conf	Tue Dec 16 07:50:44 2008 +0200
+++ b/dovecot-example.conf	Tue Dec 16 08:06:56 2008 +0200
@@ -798,10 +798,6 @@
 # automatically created and destroyed as needed.
 #auth_worker_max_count = 30
 
-# Number of auth requests to handle before destroying the process. This may
-# be useful if PAM plugins leak memory.
-#auth_worker_max_request_count = 0
-
 # Host name to use in GSSAPI principal names. The default is to use the
 # name returned by gethostname(). Use "$ALL" to allow all keytab entries.
 #auth_gssapi_hostname =
@@ -859,7 +855,7 @@
   # REMEMBER: You'll need /etc/pam.d/dovecot file created for PAM
   # authentication to actually work. <doc/wiki/PasswordDatabase.PAM.txt>
   passdb pam {
-    # [session=yes] [setcred=yes] [failure_show_msg=yes]
+    # [session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=<n>]
     # [cache_key=<key>] [<service name>]
     #
     # session=yes makes Dovecot open and immediately close PAM session. Some
@@ -869,6 +865,10 @@
     # need that. They aren't ever deleted though, so this isn't enabled by
     # default.
     #
+    # max_requests specifies how many PAM lookups to do in one process before
+    # recreating the process. The default is 100, because many PAM plugins
+    # leak memory.
+    #
     # cache_key can be used to enable authentication caching for PAM
     # (auth_cache_size also needs to be set). It isn't enabled by default
     # because PAM modules can do all kinds of checks besides checking password,