<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>DaemonAdmin/Courier</title><revhistory><revision><revnumber>5</revnumber><date>2018-12-02 20:51:26</date><authorinitials>ClintonEbadi</authorinitials><revremark>we ended up having to use nopag for courier after all</revremark></revision><revision><revnumber>4</revnumber><date>2018-09-20 02:26:43</date><authorinitials>ClintonEbadi</authorinitials><revremark>document that courier needed nopag for vmail users</revremark></revision><revision><revnumber>3</revnumber><date>2018-04-24 04:34:50</date><authorinitials>ClintonEbadi</authorinitials></revision><revision><revnumber>2</revnumber><date>2018-04-24 04:34:33</date><authorinitials>ClintonEbadi</authorinitials><revremark>dh parameters are ok now, mention puppet</revremark></revision><revision><revnumber>1</revnumber><date>2014-04-30 06:34:21</date><authorinitials>ClintonEbadi</authorinitials><revremark>document quirks</revremark></revision></revhistory></articleinfo><para>Courier is managed by Puppet class <code>hcoop::service::mail::courier</code> </para><section><title>Notes</title><itemizedlist><listitem><para>Members authenticate using PAM and therefore read mail as their normal user </para></listitem><listitem><para>VMail users gain tokens via <code>/etc/courier/get-token</code> and a local modification to the courier <code>authuserdb</code> method </para></listitem><listitem><para>Default generated Debian dh_parameters are OK as of Debian Stretch (3072 bits) </para></listitem></itemizedlist></section><section><title>nopag</title><para>At least through Debian Stretch, courier needs to run with nopag so that vmail users would have tokens, using the following pam config: </para><screen><![CDATA[# PAM configuration file for Courier IMAP daemon
]]><![CDATA[
#@include common-auth
#@include common-account
#@include common-password
#@include common-session
]]><![CDATA[
session         required       pam_afs_session.so debug nopag always_aklog
auth            required       pam_krb5.so debug
auth            required       pam_afs_session.so debug nopag always_aklog
account         required       pam_krb5.so]]></screen><para>Using standard PAM config seems to work in <emphasis>some</emphasis> cases, but fails most of the time.  </para><!--rule (<hr>) is not applicable to DocBook--><para> <ulink url="https://wiki.hcoop.net/DaemonAdmin/Courier/CategorySystemAdministration#">CategorySystemAdministration</ulink> </para></section></article>