My actual configuration file is rather complex at 132 lines because I’ve fixed Cyrus-SASL (Apple’s passwordserver_sasl-59.2) and the mysql plugin so I can manage users in mysql so I removed all my modifications from the file, tested it and it does work and meet the Apple requirements:

configdirectory: /var/imap
partition-default: /var/spool/imap
sievedir: /usr/sieve
sieve_maxscriptsize: 32
sieve_maxscripts: 5
servername: domain.tld
defaultdomain: domain.tld
loginrealms: domain.tld
admins: cyrusimap
unixhierarchysep: yes
altnamespace: yes
sendmail: /usr/sbin/sendmail
lmtp_downcase_rcpt: 0
tls_cert_file: /etc/certificates/Default.crt
tls_key_file: /etc/certificates/Default.key
log_rolling_days: 7
log_rolling_days_enabled: true
allowplaintext: yes
allowusermoves: yes
allowanonymouslogin: no
imap_auth_login: yes
imap_auth_plain: yes
imap_auth_cram_md5: yes
pop_auth_clear: yes
pop_auth_apop: yes
apple_auth: on
idlesocket: /var/imap/socket/idle
lmtpsocket: /var/imap/socket/lmtp
notifysocket: /var/imap/socket/notify
virtdomains: off
unix_group_enable: 0
umask: 077
imapidresponse: yes
logtimestamps: 1
lmtp_over_quota_perm_failure: 1
autocreatequota: -1
#reject8bit: 0
poptimeout: 10
timeout: 60
username_tolower: 1
annotation_db: skiplist
duplicate_db: berkeley-nosync
mboxlist_db: skiplist
ptscache_db: berkeley
seenstate_db: skiplist
subscription_db: flat

Don’t forget to change domain.tld to your domain name.

As soon as I can get a couple of other issues resolved like timsieved working and a configuration issue, I’ll be putting together an indepth ‘HowTo’ that will provide a virtual user/domain email solution that is managed out of mysql so you don’t have to add users to the system just so they can have an e-mail account.

All of this is achieved with Apple software so installing another mail package and a ton of other software just to aachive what should have been possible with the Apple supplied software is no longer an issue and I’ve been currently running this configuration for a couple of months now with great success and I don’t loose any Apple suplied features or functionality and can still use SA without worrying about breaking anything.

I’m managing it with a php package called ‘postfixadmin’.

This means that while hosting sites, I let the hostee manage his sites e-mail users and passwords which means I don’t have to and it has a decent but basic web interface for user, domain and admin configuration and management options that seems to be working out for me.

Anyway, when I’ve got these issues resolved I’ll get down to writing some instructions for those interested in this concept of providing e-mail without providing a local account.