[...]
> I then planned that the users log in with their
> email address (or a slightly modified version of
> it to support older versions of Netscape and a
> couple other MUA's that didn't like email addresses
> as log in name) and rewrote the mailbox lookup
> routines to return the new mailbox instead of the
> original user.username mailbox.
I've previously worked as a support techie. In my experience, users find
it more logical to use their mail address when they log on to services.
If this brakes older clients, make the user/domain separator
configurable.
[...]
> The first is to use Kerberos and just snag the
> "domain" information from there. This of course
> forces anyone who wants to use virtual domains
> to also use Kerberos which is completely impractical
> at this time. My intent is that this would be a
> supported feature, but not a requirement.
What about SASL?
SASL has different 'Login realms' - use the domain as realm.
--
Ørnulf Nielsen