Specifications

Chapter 12 Managing Mail Service 207
To create a password file:
1 Log in to the server as root.
2 In TextEdit, create a file and enter the password as you entered it when you created the
keychain.
Don’t press Return after entering the password.
3 Make the file plain text by choosing Make Plain Text from the Format menu.
4 Save the file, naming it cerkc.pass.
5 Move the file to the root keychain folder.
The path is /private/var/root/Library/Keychains/.
To see the root keychain folder in the Finder, choose Go to Folder from the Go menu,
enter /private/var/root/Library/Keychains/, and then click Go.
6 In the Terminal application, change the access privileges to the password file so only
root can read and write to this file.
Do this by entering the following commands, pressing Return after each one:
cd /private/var/root/Library/Keychains/
chmod 600 certkc.pass
Mail service can now use SSL for secure IMAP connections.
7 Log out from the server.
Note: If Mail service is running, stop it and start it again to make it recognize the new
certificate keychain.
Configuring Mailboxes
Mail service keeps track of incoming mail messages with a small database (BerkeleyDB
4.2.52), but the database doesn’t contain the messages. Mail service stores each
message as a separate file in a mail folder for each user. This is the user’s mailbox.
Incoming mail is stored on the startup disk in the /var/spool/imap/user/username
folder. Cyrus puts a database index file in the folder of user messages. You can change
the location of mail folders and database indexes to another folder, disk, or disk
partition. Cyrus mail storage can also be split across multiple partitions. This can be
done to scale Mail service, or to facilitate data backup.
The cyradm tool is included with Mac OS X Server. It is an administration shell for Cyrus,
the IMAP Mail service package, and communicates with the Cyrus::IMAP::Admin Perl
module. You can use
cyradm to create, delete, or rename mailboxes, as well as set ACLs
for mailboxes (for mail clients that support them).