Installation
Download and unpack the authentication librarycd /usr/local/src
wget http://optusnet.dl.sourceforge.net/sourceforge/courier/courier-authlib-0.57.tar.bz2
bunzip2 courier-authlib-0.57.tar.bz2
tar xf courier-authlib-0.57.tar
chown -R root.root courier-authlib-0.57
cd courier-authlib-0.57
Build the authentication library
./configure \
--prefix=/usr/local/courier-authlib \
--without-authpam \
--without-authldap \
--without-authpwd \
--without-authmysql \
--without-authpgsql \
--without-authshadow \
--without-authuserdb \
--without-authcustom \
--without-authcram \
--without-authpipe \
--with-authvchkpw
# note, if you are running redhat/fedora, you may have to add a
# --with-redhat
# to the list of configuration settings above
make
make install
make install-configure
#copy the start script at correct location
cp courier-authlib.sysvinit /etc/init.d/courier-authlib
chmod 700 /etc/init.d/courier-authlib
chkconfig --add courier-authlib (On Centos and fedora)
#Review the settings for the authentication library
vi /usr/local/courier-authlib/etc/authlib/authdaemonrc
authmodulelist="authvchkpw" <-- Authenticate via vpopmail
Download and unpack the courier-IMAP source
cd /usr/local/src
wget http://optusnet.dl.sourceforge.net/sourceforge/courier/courier-imap-4.0.6.tar.bz2
bunzip2 courier-imap-4.0.6.tar.bz2
tar xf courier-imap-4.0.6.tar
chown -R root.root courier-imap-4.0.6
cd courier-imap-4.0.6
Build the program
COURIERAUTHCONFIG=/usr/local/courier-authlib/bin/courierauthconfig \
CPPFLAGS=-I/usr/local/courier-authlib/include \
./configure \
--prefix=/usr/local/courier-imap \
--disable-root-check \
--with-ssl
# note, if you are running redhat/fedora, you may have to add a
# --with-redhat
# to the list of configuration settings above
make
make install
make install-configure
cp courier-imap.sysvinit /etc/init.d/courier-imap
chmod 744 /etc/rc.d/init.d/courier-imap
chkconfig --add courier-imap (On fedora or centos)
#The Courier-IMAP package includes 4 servers that can be individually enabled/disabled : IMAP, IMAP-SSL, POP3, POP3SSL. In this example, we are using the IMAP IMAP-SSL and POP3-SSL server.
vi /usr/local/courier-imap/etc/imapd
MAXDAEMONS=40 <-- Max number of IMAP daemons
MAXPERIP=40 <-- MAx connections per ip
IMAP_EMPTYTRASH=Trash:7,Sent:30 <-- Enable automatic purging of mail from these folders
IMAPDSTART=YES <-- allow our init.d script to boot up the imapd
#Lets start secure imap
vi /usr/local/courier-imap/etc/imapd-ssl
IMAPDSSLSTART=YES <-- Enable secure IMAP
After enabling secure imap, PCI Approved Scanners will fail your server if you dont set below line in /usr/local/courier-imap/etc/courier-imap/imapd-ssl
IMAP_TLS_REQUIRED=1
TLS_PROTOCOL=SSL3 #(If server still fail the pci scan then change it to TLS1)
TLS_CERTFILE= <-- Specify the SSL Certificate to use for secure imap
#Lets start secure pop
vi /usr/local/courier-imap/etc/pop3d-ssl
POP3DSSLSTART=YES
TLS_CERTFILE= <-- specify ssl certificate to use for secure pop
Important: If you are using default courier-imap package which is distributed with your OS distro then the path to courier-imap files might be /etc/courier-imap/