3.1.6 Auth

These options control the authorization and authentication module lists. For a description of authentication concepts, refer to See section 3.2 Authorization and Authentication Principles.

`--authorization modlist'

This option allows to set up a list of modules to be used for authorization. modlist is a colon-separated list of modules. Valid modules are:

system

User credentials are retrieved from the system user database (`/etc/password').

sql

User credentials are retrieved from the SQL database. The set of `--sql-' options (see below) is used to configure access to the database.

virtdomain

User credentials are retrieved from a "virtual domain" user database.

`--authentication modlist'

This option allows to set up a list of modules to be used for authentication. modlist is a colon-separated list of modules. Valid modules are:

generic

The generic authentication type. User password is hashed and compared against the hash value returned in authorization stage.

system

The hashed value of the user password is retrieved from `/etc/shadow' file on systems that support it.

sql

The hashed value of the user password is retrieved from the SQL database using query supplied by `--sql-getpass' option (see below).

pam

The user is authenticated via pluggable authentication module (PAM). The PAM service name to be used is configured via `--pam-service' option (see below).

`--pam-service name'

When compiled with PAM support, this option specifies the name of PAM service to be used when authenticating.

The following options exist in this group if the package was configured with `--enable-sql' option. They take effect only if the `sql' module is used in authentication and/or authorization.

`--sql-interface iface'

Specify SQL interface to use. Iface is either `mysql' or `postgres'. This allows to select SQL subsystem on runtime if mailutils was compiled with support for several SQL drivers.

If this option is omitted, mailutils will use the first available SQL driver.

`--sql-host name'

Name or IP of MySQL server to connect to.

`--sql-user name'

SQL user name

`--sql-passwd string'

SQL connection password

`--sql-db string'

Name of the database to connect to.

`--sql-port number'

Port to use

`--sql-getpwnam query'

SQL query to retrieve a passwd entry based on username

`--sql-getpwuid query'

SQL query to retrieve a passwd entry based on user ID

`--sql-getpass query'

SQL query to retrieve a password from the database