up vote 0 down vote favorite
share [g+] share [fb]

I'm a *nix n00b that just installed dovecot (the selection with no ldap, mysql or pgsql) on OpenBSD 4.0 and I want to set it up for imap use, but I'm having a hard time finding documentation that I can understand. It currently running on port 143 (checked with telnet) but from there I need to do the following:

  1. I need some accounts, the once already on the system are fine if I can get those running (seemed to be some dovecot option somehow?), or just adding a few manually is ok too. Was there some setting for this in the default /etc/dovecot.conf? passdb bsdauth {} is uncommented by default...
  2. I need to create imap folders, or subfolders. How can I do that?
  3. Hopefully not, but anything else I need to do? I want to run without certification validation and no SSL/TLS, would this work by default (client-side settings)?
link|improve this question
50% accept rate
1  
What's wrong with the documentation on dovecot's home page? – ptman May 4 '10 at 8:53
3  
OpenBSD 4.0 is ancient, has known security defects and not supported for security fixes. 4.7 is due out on May 19th. Reinstall with at least 4.6 and keep up to date. – Alex Holst May 4 '10 at 9:26
@Alex: only have remote access, don't feel comfortable updating yet. – Jonas Byström May 4 '10 at 13:04
@ptman: had another go and it wasn't actually bad, just it took me a couple of hours to get everything right. Just impatient and scared I guess! ;) – Jonas Byström May 4 '10 at 13:08
There are serious bugs in the 4.0 kernel, sshd and openssl. I suggest you take a look at openbsd.dk/security.html#40 -- if you're running the dovecot package from OpenBSD 4.0, there are newer versions of that available, too. – Alex Holst May 4 '10 at 17:36
feedback

1 Answer

up vote 0 down vote

Please heed the warnings from Alex. Your ancient server is exploitable, and as such, is a threat to us all.

link|improve this answer
You make me laugh and sing and dance with joy! – Jonas Byström May 26 '10 at 13:41
I'm glad I could offer some entertainment value. :) – obfuscurity May 29 '10 at 14:32
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.