sbonazzo / rpms / cyrus-sasl

Forked from rpms/cyrus-sasl 2 years ago
Clone

Blame SOURCES/cyrus-sasl-2.1.26-saslauthd-user.patch

98b3ea
diff --git a/saslauthd/saslauthd.mdoc b/saslauthd/saslauthd.mdoc
98b3ea
index 37c6f6e..5b635ab 100644
98b3ea
--- a/saslauthd/saslauthd.mdoc
98b3ea
+++ b/saslauthd/saslauthd.mdoc
98b3ea
@@ -44,7 +44,27 @@ multi-user mode. When running against a protected authentication
98b3ea
 database (e.g. the
98b3ea
 .Li shadow
98b3ea
 mechanism),
98b3ea
-it must be run as the superuser.
98b3ea
+it must be run as the superuser. Otherwise it is recommended to run
98b3ea
+daemon unprivileged as saslauth:saslauth. You can do so by following
98b3ea
+these steps:
98b3ea
+.Bl -enum -compact
98b3ea
+.It
98b3ea
+create directory
98b3ea
+.Pa /etc/systemd/system/saslauthd.service.d/
98b3ea
+.It
98b3ea
+create file
98b3ea
+.Pa /etc/systemd/system/saslauthd.service.d/user.conf
98b3ea
+with content
98b3ea
+.Bd -literal
98b3ea
+[Service]
98b3ea
+User=saslauth
98b3ea
+Group=saslauth
98b3ea
+
98b3ea
+.Ed
98b3ea
+.It
98b3ea
+Reload systemd service file: run
98b3ea
+.Dq systemctl daemon-reload
98b3ea
+.El
98b3ea
 .Ss Options
98b3ea
 Options named by lower\-case letters configure the server itself.
98b3ea
 Upper\-case options control the behavior of specific authentication