[aklug] Re: courer-imap-ssl (with Postfix)

On Mon, Nov 22, 2010 at 02:38:17PM -0900, adam bultman wrote:
>
>
> On 11/22/2010 01:29 PM, Christopher Howard wrote:
> > I'm trying to set up my first e-mail server (for personal use) with postfix for receiving and sending the mail, and courier-imap-ssl for remote IMAP access. Setting up an e-mail server is proving a lot harding then setting up web servers, ftp servers, etc. However, I did manage to get postfix running, and I can receive e-mail at the new account, and the e-mail is dropped off into a .maildir in my HOME directory. If I log into the e-mail server (over SSH) and run mutt, I can view all the e-mail received and also send e-mail.
> >
> > Now I am hoping to get courier-imap (with ssl) running so I can do this from Thunderbird instead of having to log in. However, I not quite clear on this: can courier-imapd-ssl provide access to a .maildir if it is in the HOMEDIR of a regular Linux account?
> Yes. I'm doing this with my local workstation.
>
>
> > If so, would the IMAP authentication password be the same password as the Linux account owning the .maildir?
> >
> >
> Not necessarily; I think you can use authdaemon, or LDAP, or any other
> kind of authentication scheme you feel like configuring, that courier
> supports.
>
> In my authdaemonrc file, I have 'authmodulelist="authpam"' ; in my imapd
> file I have 'MAILDIRPATH=Maildir', and I'm able to look at my local mail
> just fine using my local workstation account's password (note: I
> wouldn't do this with connections over the Internet. I know you'd have
> TLS if you get it set up, but it seems like a bad idea, don't you?
> Especially if your mail client saves that password. )
>
> I *did* have to set 'IMAP_MAILBOX_SANITY_CHECK=0' in my imapd file,
> because my Maildir is actually a symlink to somewhere else, and I think
> the group perms on my mailbox aren't set properly.
>
> But mine works just fine. I even have SSL working, and I don't believe
> it was all that difficult to set up.
>
>

For progeny: If found the problem: it was the in the /etc/courier/authlib/authdaemonrc file. The "authmodulelist" variable was set the "authmysql" instead of "authpam". I forgot that I had put it that way several weeks ago when I was trying to follow a tutorial on setting up virtual mailhost systems (which was more complicated than what I actually wanted).

Can someone explain the difference between SSL security and STARTTLS?

-- 
Christopher Howard
frigidcode.com
theologia.indicium.us
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.