authmgr(4gx)

💅 NAME 💅

ok so like — authmgr is the demultiplexer for authentication requests, and yes bestie, "demultiplexer" is a real word, we're gonna get through it together 🫶

This page lives in the Gromox admin reference, section 4gx. Hiiii, welcome, come in, sit down 💖

---

✨ DESCRIPTION ✨

authmgr is the component that handles mail account authentication, and the whole vibe is that it dynamically selects the authentication backend per user account. Not one giant backend for everyone — per account. Lowkey iconic of it. 👑

---

🎀 CONFIGURATION DIRECTIVES 🎀

The usual config file location is /etc/gromox/authmgr.cfg — that's where it hangs out, that's its home. 🏠

• auth_backend_selection — this baby controls how authmgr will verify passwords supplied with login operations. The details live down in the Authentication modes section, so go look there, iykyk 👀
  • Available: deny_all, allow_all, ldap, pam
  • Default: ldap

---

🌈 AUTHENTICATION MODES 🌈

okay, the actual modes, let's go mode by mode, no skips, no cap ⭐

1. deny_all — literally every single attempt at authentication gets rejected. That's the whole thing. This is at best useful for testing (so, like, a vibe check for your config, not a lifestyle 💀).
2. allow_all — every attempt at authentication is permitted, provided the user exists. Handy when you're doing the initial mass-import of mailboxes via external IMAP-to-IMAP synchronization utilities such as imapsync, without needing to actually know the user passwords. 🙈 Big "just get the mailboxes in here" energy.
3. ldap — old name: externid. authmgr will selectively pick LDAP/MySQL, depending on whether the externid column in the user database has a value or contains just the empty string. The particular value is ignored — it's only meaningful to the importer. 🦋
4. pam — authmgr will selectively pick PAM/MySQL. The PAM service name will be "gromox".

🚨 IMPORTANT bestie, listen to me: be sure that pam_gromox.so is not invoked as part of that PAM service stack, or it will lead to infinite recursion. Like a mirror in a mirror in a mirror. Do not do this. 😭

---

🧚 SIGNALS 🧚

Upon receipt of SIGHUP, configuration files are re-read — BUT 💅 only a few select directives can actually be changed this way, because many parts just do not implement reload. So, like, temper your expectations. It's giving "I re-read the config but I'm not changing for you." 💀

---

💜 SEE ALSO 💜

• gromox(7)
• ldap_adaptor(4gx)
• mysql_adaptor(4gx)

go read those too, bestie, I believe in you 🍓

---

kisses and bye-bye 💖 this was the authmgr(4gx) page from the Gromox admin reference — the authmgr(4gx) manual, specifically, so you know exactly where you are. Mwah, go authenticate responsibly ✨🎀