Lucio Crusca writes:

In data martedì 27 settembre 2011 23:49:25, Sam Varshavchik ha scritto:
> Passwords can be changed via webmail, with some additional setup. They can
> be stored encrypted, however you must realize that fundamental laws of this
> universe will not allow you to use hash-based authentication via IMAP when
> encrypted passwords are used. The server must have password in plain text,
> in order to be able to recalculate the hashes.

Ok, I assume however I can use plain text password over SSL/TLS, right?

Yes, but that's a separate configuration issue. Whether you're going to allow non-encrypted IMAP, POP3, or HTTP connections is separate from whether or not passwords are kept encrypted or in plain text.

> That's what you'll have with virtual shared folders.

Any pointer to something explaining what virtual shared folders are and how to
make them with courier?

There's a README in the source; you can also look at it here: http://www.courier-mta.org/imap/README.sharedfolders.html

Additionally, you need to understand IMAP access control lists. http://www.rfc-archive.org/getrfc.php?rfc=4314

Does that mean, assuming a sql backend, that, once a new account has been
added in the users table, someone has to manually issue the maildirmake
command in a shell?

Only if the process that adds a new user doesn't do that itself.

Since you already have a process that creates a new user entry, I would expect it to complete the job and set up the account as well. Why would it stop without the job being completely done, and force you to do it manually?

If so, are you aware of any third party web interface that
takes care of account provisioning for courier?

No. There isn't really any standard way of doing it. Each organization tends to maintain their mailboxes in their own particular way; I'm sure that there are various, generic, account management packages floating out there, only a Google search away.


Attachment: pgp5bfUTFVlUT.pgp
Description: PGP signature

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to