From 3ecdc2af161297d69027363411a8dd355ed71cd7 Mon Sep 17 00:00:00 2001
From: Jason Rothstein <fdragon@fdragon.org>
Date: Mon, 10 Aug 2026 21:07:06 -0500
Subject: [PATCH] Dovecot to stop using PAM auth

---
 .../Fedora/42/etc/dovecot/conf.d/10-auth.conf          |  2 +-
 .../templates/Fedora/43/etc/dovecot/conf.d/local.conf  | 10 ++++++++++
 .../templates/Fedora/44/etc/dovecot/conf.d/local.conf  | 10 ++++++++++
 3 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/roles/ensure_dovecot/templates/Fedora/42/etc/dovecot/conf.d/10-auth.conf b/roles/ensure_dovecot/templates/Fedora/42/etc/dovecot/conf.d/10-auth.conf
index 3e9c4e4..fd9f601 100644
--- a/roles/ensure_dovecot/templates/Fedora/42/etc/dovecot/conf.d/10-auth.conf
+++ b/roles/ensure_dovecot/templates/Fedora/42/etc/dovecot/conf.d/10-auth.conf
@@ -119,7 +119,7 @@ auth_mechanisms = plain
 #!include auth-deny.conf.ext
 #!include auth-master.conf.ext
 
-!include auth-system.conf.ext
+#!include auth-system.conf.ext
 #!include auth-sql.conf.ext
 #!include auth-ldap.conf.ext
 #!include auth-passwdfile.conf.ext
diff --git a/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf b/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf
index 2b029cd..d05cf99 100644
--- a/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf
+++ b/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf
@@ -13,6 +13,16 @@ mail_uid = mail
 mail_gid = mail
 mail_home = /var/spool/mail/%{user | domain}/%{user | username}
 
+# Override system auth from dovecot.conf so it quietly fails without triggering PAM logs
+passdb pam {
+  driver = passwd-file
+  passwd_file_path = /dev/null
+}
+userdb passwd {
+  driver = passwd-file
+  passwd_file_path = /dev/null
+}
+
 passdb passwd-file {
   driver = passwd-file
   passwd_file_path = /etc/dovecot/accounts
diff --git a/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf b/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf
index 2b029cd..d05cf99 100644
--- a/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf
+++ b/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf
@@ -13,6 +13,16 @@ mail_uid = mail
 mail_gid = mail
 mail_home = /var/spool/mail/%{user | domain}/%{user | username}
 
+# Override system auth from dovecot.conf so it quietly fails without triggering PAM logs
+passdb pam {
+  driver = passwd-file
+  passwd_file_path = /dev/null
+}
+userdb passwd {
+  driver = passwd-file
+  passwd_file_path = /dev/null
+}
+
 passdb passwd-file {
   driver = passwd-file
   passwd_file_path = /etc/dovecot/accounts