Jeff Cann wrote:

I'm attempting to understand the courier-imap implementation of shared folders. I have played around with this feature and have read the docs (and the postfix book) on this topic (I'm using postfix and courier-imap). As I understand it:
...
2) The README.sharedfolders indicates that mail should not be delivered to directly to shared folders. The permissions are generally not correct and IMAP is expected to manage them correctly, not the maildrop program.

Regardless of what the documentation says about what you should and should not do, you can deliver mail directly to a shared folder, and Courier IMAP will allow users to read/manage the messages normally. The only contraint is that you must make sure that the files in the shared folder are readable by the users who have access to the shared folder (same as any other use of shared folders).


I don't know what umask Postfix uses when delivering messages, but I had to modify Courier to get it to deliver messages with user and group read permissions:
http://phantom.dragonsdawn.net/~gordon/courier-patches/courier-umask.patch


Sam's position is, IIRC, that mail delivered should only be readable by the user. My position is that the Maildir itself is already created with 0700 permissions, so the permissions of the individual files don't need to restrict group privileges. Delivery with group permissions makes Courier no less secure, but adds the flexibility of "ownerless" shared folders. I don't know if you need something similar for Postfix, but if you do, you should be able to figure that out without too much difficulty.

I believe that to set this up under Courier (it's been a while since I was using this), I created a Unix group called "sharedmail". Then I created the directory for the mail folders, "/export/home/sharedmail". Set the group ownership of that folder to "sharedmail" and set the SGID bit so that all subfolders/files are owned by that group:
# chgrp /export/home/sharedmail
# chmod 2770 /export/home/sharedmail
Everything else should follow the documentation for shared folders. Once you create shared folders under /export/home/sharedmail, you should be able to set up your users' mail folders to access them.





------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to