FS#61852 - [dovecot] lacking pam.d policy

Attached to Project: Community Packages
Opened by Eli Schwartz (eschwartz) - Sunday, 24 February 2019, 19:53 GMT
Last edited by Thore Bödecker (foxxx0) - Tuesday, 26 February 2019, 12:25 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Johannes Löthberg (demize)
Thore Bödecker (foxxx0)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 3
Private No

Details

As per the wiki documentation: https://wiki.archlinux.org/index.php/Dovecot#PAM_Authentication

dovecot has long required pam in order to function properly. However, until recently the permissive "other" policy has let this slide. This was recently changed in  FS#48650 .

I could not find an existing policy in the dovecot sources, so we will need to write our own. The wiki suggestion could be acceptable as-is, but needs to ship with the package by default.

Currently this breaks existing dovecot setups including our own email server on orion.archlinux.org.

There are also the usual boatload of forum posts and mailing list threads about the issue, including:
https://bbs.archlinux.org/viewtopic.php?id=243167
https://bbs.archlinux.org/viewtopic.php?id=244119
https://lists.archlinux.org/pipermail/arch-general/2019-February/046038.html
This task depends upon

Closed by  Thore Bödecker (foxxx0)
Tuesday, 26 February 2019, 12:25 GMT
Reason for closing:  Fixed
Additional comments about closing:  fixed as of dovecot 2.3.4.1-2

Loading...