diff dovecot-example.conf @ 4357:ffb59f920018 HEAD

Don't call pam_setcred() unless setcred=yes PAM passdb argument was given.
author Timo Sirainen <tss@iki.fi>
date Fri, 16 Jun 2006 12:45:16 +0300
parents e53deec5e422
children 92ad9dbcde85
line wrap: on
line diff
--- a/dovecot-example.conf	Fri Jun 16 12:43:54 2006 +0300
+++ b/dovecot-example.conf	Fri Jun 16 12:45:16 2006 +0300
@@ -692,11 +692,15 @@
   # REMEMBER: You'll need /etc/pam.d/dovecot file created for PAM
   # authentication to actually work.
   passdb pam {
-    # [session=yes] [cache_key=<key>] [<service name>]
+    # [session=yes] [setcred=yes] [cache_key=<key>] [<service name>]
     #
     # session=yes makes Dovecot open and immediately close PAM session. Some
     # PAM plugins need this to work, such as pam_mkhomedir.
     #
+    # setcred=yes makes Dovecot establish PAM credentials if some PAM plugins
+    # need that. They aren't ever deleted though, so this isn't enabled by
+    # default.
+    #
     # cache_key can be used to enable authentication caching for PAM
     # (auth_cache_size also needs to be set). It isn't enabled by default
     # because PAM modules can do all kinds of checks besides checking password,