DOVEADM-AUTH(1)

NAME
doveadm-auth - Flush/lookup/test authentication data

SYNOPSIS
doveadm [-Dv] [-f formatter] auth command [OPTIONS] [ARGUMENTS]

DESCRIPTION
The doveadm auth COMMANDS can be used to perform various authentication related actions. @INCLUDE:global-options-formatter@

Command specific options:

-x auth_info
    auth_info specifies additional conditions for the auth lookup and auth test commands. The auth_info option string has to be given as name=value pair. For multiple conditions the -x option could be supplied multiple times.
    Possible names for the auth_info are:

    service
        The service for which the authentication lookup should be tested. The value may be the name of a service, commonly used with Dovecot. For example: imap, pop3 or smtp.

    lip The local IP address (server) for the test.

    rip The remote IP address (client) for the test.

    lport
        The local port, e.g. 143

    rport
        The remote port, e.g. 24567

ARGUMENTS

user
    The user's login name. Depending on the configuration, the login name may be for example jane or john@example.com.

password
    Optionally the user's password. doveadm(1) will prompt for the password, if none was given.

COMMANDS

  auth cache flush
doveadm auth cache flush [-a master_socket_path] [user ...]

Flush the authentication cache. By default the cache is flushed for all the users (which can also be done by sending SIGHUP to the auth process). You can also flush the cache for one or more users by providing their usernames.

-a master_socket_path
    This option is used to specify an absolute path to an alternative UNIX domain socket.

    By default doveadm(1) will use the socket @rundir@/auth-master. The socket may be located in another directory, when the default base_dir setting was overridden in @pkgsysconfdir@/dovecot.conf.

  auth lookup
doveadm auth lookup [-a userdb_socket_path] [-x auth_info] [-f field] user [...]

Similar to doveadm-user(1) command, except it performs a passdb lookup (without authentication) instead of a userdb lookup.

-a userdb_socket_path
    This option is used to specify an absolute path to an alternative UNIX domain socket.

    By default doveadm(1) will use the socket @rundir@/auth-userdb. The socket may be located in another directory, when the default base_dir setting was overridden in @pkgsysconfdir@/dovecot.conf.

-f field
    When this option and the name of a userdb field is given, doveadm(1) will show only the value of the specified field.

  auth test
doveadm auth test [-a auth_socket_path] [-x auth_info] user [password]

Test authentication for the given user.

-a auth_socket_path
    This option is used to specify an absolute path to an alternative UNIX domain socket.

    By default doveadm(1) will use the socket @rundir@/auth-client. The socket may be located in another directory, when the default base_dir setting was overridden in @pkgsysconfdir@/dovecot.conf.

EXAMPLE
This example demonstrates an imap authentication test for user john, assuming the user is connected from the host with the IP address 192.0.2.143.

doveadm auth test -x service=imap -x rip=192.0.2.143 john
Password:
passdb: john auth succeeded
extra fields:
  user=john
@INCLUDE:reporting-bugs@

SEE ALSO
doveadm(1), doveadm-user(1), doveconf(1)