Thomas Bruederli thomas@roundcube.net wrote:
I can login to every domain.
That's correct. Please understand that Roundcube is just a client software to access IMAP mailboxes. If the IMAP server allows access, you get access. $rcmail_config['default_host'] is the configuration parameter that tells Roundcube which IMAP server to connect to, nothing more.
There's the $rcmail_config['username_domain'] = ''; config parameter where you can enter the domain named that is added to username, if somebody logs in with "anmeyer" instead of the full email address. This, however, doesn't restrict access if somebody enters the full email address. In our git repository we now have a new config option that will allow you to restrict access to the one domain that is configured in 'username_domain' even if the IMAP server allows more. See http://trac.roundcube.net/ticket/1489264 But it isn't yet released in Roundcube. Use the latest version from git at your own risk.
Applied the patch and it works like desired! Thank you!
Andreas