Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Allow SSO users to send and recieve mail via master password
SSO users do not have a password set, and the auto provisioning of mail does not work for SSO user. It is also inconvenient to synchronize the password database between Nextcloud and the mail server used. So to allow SSO user to use the mail app we can instead configure a shared password for all users, this will work well with for example Dovecot that has a concept of a "master password"[0] that can be used to authenticate users. To use this feature we must convince the mail app that the user has a password available, which we can set with occ like so: ``` ./occ config:app:set mail master_password --value 'very-secret-master-password' ``` We can then configure dovecot to allow this password from the Nextcloud server, in this example 89.46.21.198: ``` passdb { args = password=very-secret-master-password allow_nets=89.46.21.198/32 driver = static } ``` If we configure postfix to use SASL auth against dovecot, we can then both send and recieve mail from Nextcloud mail app, for SSO users. 0. https://doc.dovecot.org/configuration_manual/authentication/master_users/ Signed-off-by: Micke Nordin <[email protected]>
- Loading branch information