I discovered dovecot, and it appears to be a simple and powerful answer to a simple problem.
My only hesitation with it is reading "engineered with from the ground up with security as the main focus", and then seeing 2 bulletins on major security holes.
Knowing people have had the chance to login w/o using passwords doesn't give me comfort when it's company information at stake, not just simple myspace mail.
Do you fully recommend it for a company system? Any gotchas or other problems?
At a previous job we used Cyrus, we had to use the cm command for each mailbox - I couldn't find a way to 'auto-create' upon successful authentication. Sorry. Could probably do a `passwd | cut` type dump, put the cm in front of each line, then cut-paste into a terminal window/etc. Is probably what I would do, or write a ruby/bash/whatever script to detect user accounts that don't exist in the cyrus mailbox folders (ok, so that's technically cheating) and auto-create them say nightly. In fact, I would be a *little* surprised if someone hasn't done so already and put it in their blog/some public code repository. Could try googling it.
Comments 2
(The comment has been removed)
My only hesitation with it is reading "engineered with from the ground up with security as the main focus", and then seeing 2 bulletins on major security holes.
Knowing people have had the chance to login w/o using passwords doesn't give me comfort when it's company information at stake, not just simple myspace mail.
Do you fully recommend it for a company system? Any gotchas or other problems?
Reply
Reply
Leave a comment