Bug#435598: apply autocreate patch

Jack Bates ms419 at freezone.co.uk
Wed Aug 1 21:13:56 UTC 2007


Package: cyrus-imapd-2.2
Version: 2.2.13-13
Severity: wishlist
Tags: patch

We find ourselves in the same situation as the University of Athens: A
small percentage of users ever use their Cyrus mailbox. So instead of
creating Cyrus mailboxes for all our users, we apply the University of
Athens' autocreate patch and rebuild the Debian Cyrus packages:
http://email.uoa.gr/projects/cyrus/autocreate/
http://email.uoa.gr/download/cyrus/cyrus-imapd-2.2.13/

This patch allows configuring Cyrus to create mailboxes when users login
for the first time, or mail arrives for a user without an existing
mailbox.

We heeded the warning accompanying this patch: Before configuring Cyrus
to create mailboxes on message delivery, we configured our MTA to check
mail is addressed to a valid user. This prevents potential attackers from
flooding Cyrus with invalid mailboxes.

We've been manually applying the autocreate patch and rebuilding the
Debian Cyrus packages since 2004; the patch has proven quite stable.  It
doesn't by default change any Cyrus behavior unless one of its
configuration options is set. However maintaining modified Debian
packages is a bit of overhead and we hope the Debian Cyrus maintainers
would consider applying the autocreate patch to the official Debian
packages?

Thanks for maintaining Cyrus in Debian, Jack

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.21-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages cyrus-imapd-2.2 depends on:
ii  cyrus-co 2.2.13-13                       Cyrus mail system (common files)
ii  libasn1- 0.7.2.dfsg.1-10                 Libraries for Heimdal Kerberos
ii  libc6    2.6-2                           GNU C Library: Shared libraries
ii  libcomer 1.39+1.40-WIP-2006.11.14+dfsg-2 common error description library
ii  libdb4.2 4.2.52+dfsg-2                   Berkeley v4.2 Database Libraries [
ii  libgssap 0.7.2.dfsg.1-10                 Libraries for Heimdal Kerberos
ii  libkrb5- 0.7.2.dfsg.1-10                 Libraries for Heimdal Kerberos
ii  libroken 0.7.2.dfsg.1-10                 Libraries for Heimdal Kerberos
ii  libsasl2 2.1.22.dfsg1-8                  Authentication abstraction library
ii  libssl0. 0.9.8e-5                        SSL shared libraries
ii  libwrap0 7.6.dbs-13                      Wietse Venema's TCP wrappers libra

cyrus-imapd-2.2 recommends no packages.

-- no debconf information




More information about the Pkg-Cyrus-imapd-Debian-devel mailing list