Backlog split out of #246. The two no-external-dependency drivers (passwd-file, static) landed in #554; #246 is closed by that PR. The remaining drivers are deferred — no known blocking consumer today. Pull each when the corresponding need surfaces; each ships as its own PR.
Remaining drivers (by original operator-demand order)
ldap — enterprise directory integrationpam — UNIX shell userslua — scripting escape hatchimap — passdb that delegates to an upstream IMAP server (proxy fallback)
Reusable infrastructure already in place (from #554)
internal/auth/scheme — shared password-scheme verification (PLAIN, BCRYPT, SHA512-CRYPT, CRYPT autodetect, SCRAM-SHA-256/1).internal/auth/passdbs — driver-dispatching builder used by both the in-process backend and standalone yarilo-auth; new drivers add a case here.app/smoketest — checkIMAPLogin pattern for live end-to-end verification of a passdb driver.
Reference
docs/AUTH_REVIEW.md §Phase AUTH-7.
Backlog split out of #246. The two no-external-dependency drivers (
passwd-file,static) landed in #554; #246 is closed by that PR. The remaining drivers are deferred — no known blocking consumer today. Pull each when the corresponding need surfaces; each ships as its own PR.Remaining drivers (by original operator-demand order)
ldap— enterprise directory integrationpam— UNIX shell userslua— scripting escape hatchimap— passdb that delegates to an upstream IMAP server (proxy fallback)Reusable infrastructure already in place (from #554)
internal/auth/scheme— shared password-scheme verification (PLAIN, BCRYPT, SHA512-CRYPT, CRYPT autodetect, SCRAM-SHA-256/1).internal/auth/passdbs— driver-dispatching builder used by both the in-process backend and standaloneyarilo-auth; new drivers add acasehere.app/smoketest—checkIMAPLoginpattern for live end-to-end verification of a passdb driver.Reference
docs/AUTH_REVIEW.md§Phase AUTH-7.