On 16/12/2020 09:02 Ionel Spanachi {HfG} <ionel.spanachi@hfg-karlsruhe.de> wrote:

On 16.12.20 00:05, Julian Kippels wrote:

...

I thought about that, but that would also kill their access to wifi and other services, because it all comes from the same LDAP.

Julian

Am Tue, 15 Dec 2020 23:37:58 +0100 schrieb Jos <jos@cloudzeeland.nl>:

...

You could change their password temporily and do the migration?

— Verstuurd via een mobiele telefoon

...

Op 15 dec. 2020 om 23:22 heeft Julian Kippels <kippels@hhu.de> het volgende geschreven:

Hi all,

what is the best way to temporarily disable access to a mailbox via imap, but keep it possible to deliver to the mailbox via lmtp? I want to migrate some mailboxes around and would like to ensure that the users cannot access their mail while doing so. I would like to keep the users from logging in entirely rather than setting ACLs.

Thanks in advance Julian

Temporarily modify ldap filters (presumably in /etc/dovecot/dovecot-ldap.conf.ext) in such a way, that it never matches?

That would break LMTP delivery...

You could just do

protocols = lmtp

in your config file to temporarily disable other protocols. make sure you don't have setting later on that will revert this, so verify with doveconf protocols after dovecot restart.

Aki