On Wed, 10 Aug 2005 22:04, Nick Rout wrote:
> You still haven't told us why you want smtp authentication.
>
> just turn it off unless you need it!

Well that is easier said than done (for me)

Below are the instructions I used. Would you like to suggest what to do do 
remove the requirement for authentication?

5. Providing IMAP Email Access:

We use Courier-IMAP as the server to provide access to our email from anywhere 
on the Internet or in our LAN. We chose this piece of software since it's 
designed to work with maildir's. We've already emerged the software, so let's 
configure it.

5.1 Setting up Authentication:

First thing to do is change to root and check that authdaemon is running with 
the appropriate method:
Code:

[EMAIL PROTECTED] $ su -
Password:
[EMAIL PROTECTED] # vi /etc/courier-imap/authdaemond.conf

AUTHDAEMOND="authdaemond.plain"

****Robert says: Should I simply comment out the line above?*****

We've told the authdaemond to use a plain method. It simply means we aren't 
going to use some of the more robust solutions such as mysql or ldap. After 
that variable has been set, we need to edit the conf file for authdaemond. 
Let's make sure that the authmodulelist is using pam. Again, as mentioned in 
the beginning of this guide, this setup is not for hundreds of users, so pam 
fits the bill nicely.
Code:

[EMAIL PROTECTED] # vi /etc/courier-imap/authdaemondrc

authmodulelist="authpam"

Since we're authing against pam, please make sure the imap pam file matches 
mine exactly. Now these values should be there by default, but just in case, 
they are provided here.
Code:

[EMAIL PROTECTED] # vi /etc/pam.d/imap

# PAM setup for
auth       required     pam_nologin.so
auth       required     pam_stack.so service=system-auth
account    required     pam_stack.so service=system-auth
session    required     pam_stack.so service=system-auth

5.2 Adding SSL Support:

As mentioned, we want to only use SSL to connect to our IMAP server. Since we 
have chosen a safer method of authentication, it requires a bit more work. 
Let's do it now while we're still as root:
Code:

[EMAIL PROTECTED] # vi /etc/courier-imap/imapd.cnf

[ req_dn ]
C=CA
ST=ON
L=Toronto
O=Mail Server
OU=Automatically-generated IMAP SSL Key
CN=localhost
[EMAIL PROTECTED]

As you can see, I've changed the variables to match my network and location. I 
recommend you do the same. It doesn't really matter, but you should do it 
anyways. You can find all the variables to change in the "[ req_dn ]" section 
of the file. After you've done that, we can make our certificate file:
Code:
[EMAIL PROTECTED] # cd /etc/courier-imap && mkimapdcert


-- 
Robert Fisher
(aka - Rob, Bob, Robbie, Robbo, Fish)
FishNet Computer & Electrical Services
www.fisher.net.nz
Phone:  03 383 5807
Mobile: 027 477 3356

Reply via email to