summaryrefslogtreecommitdiffstats
path: root/doc/wiki/PasswordDatabase.ExtraFields.AllowNets.txt
blob: 5c80fa4f85c0745dee48a5b086127338d1038654 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
Allow_nets extra field
----------------------

The allow_nets field is a comma separated list of IP addresses and/or networks
where the user is allowed to log in from. If the user tries to log in from
elsewhere, the authentication will fail the same way as if a wrong password was
given.

Example: 'allow_nets=127.0.0.0/8,192.168.0.0/16,1.2.3.4,4.5.6.7'.

IPv6 addresses are also allowed. IPv6 mapped IPv4 addresses (eg.
'::ffff:1.2.3.4') are converted to standard IPv4 addresses before matching. 
Example:'allow_nets=::1,2001:abcd:abcd::0:0/80,1.2.3.4'

passwd-file example
-------------------

---%<-------------------------------------------------------------------------
user:{plain}password::::::allow_nets=192.168.0.0/24
---%<-------------------------------------------------------------------------

Keyword 'local'
---------------

The keyword 'local' is accepted for Non-IP connections like Unix socket. For
example, with a Postfix/LMTP delivery setup, you must include 'local' for
Postfix to verify the email account:

---%<-------------------------------------------------------------------------
passdb {
  driver = static
  args = password=test allow_nets=local,127.0.0.1/32
}
---%<-------------------------------------------------------------------------

Otherwise, you will see this error in the log:

---%<-------------------------------------------------------------------------
[/var/run/dovecot/lmtp] said: 550 5.1.1 <test2@example.com> User doesn't exist:
test2@example.com (in reply to RCPT TO command))
---%<-------------------------------------------------------------------------

(This file was created from the wiki on 2019-06-19 12:42)