Thanks for the links, Michael. Some feedback on the Secure IMAPd for OS X 10.3 page (which I hope is okay to post here):

* You can simply run "make oxp" with the current UW IMAP 2003 snapshot to build the PAM-enabled version on 10.3.

* /usr/local/libexec is a more preferrable directory for imapd than /usr/local/bin.

* Yes, /System/Library/OpenSSL/certs is most certainly write protected on a properly configured system. :-)

* The xinetd.conf man page claims the REUSE flag in xinetd config files is deprecated.

* I wouldn't recommend creating the imaps service unless you really need it.

* Why create the /usr/include/security symlink unless you're compiling other software that uses that location?

Not sure about the PAM entries since I've never configured it before but your example worked fine so I'm satisfied for now. :-)

I went in and made the changes you suggested. Yes, the libexec directory is a much better location. I hope I changed all the /usr/local/bin references. =-)

I didn't test the make oxp thing. I'm guessing someone at UW looked at my page and realized the mistakes. I had a bunch of hits from UW a while back so I think I can pinpoint to the second when they corrected it. *GRIN*

Either way, it won't hurt to specify the directories. They're probably the same anyway.

I thought I should keep the service in there. Through the process, it didn't work until I had all that stuff as set on that page. The page was initially written when the UW-IMAP was in an early stage and you had to search for the newest working version. It's much easier now. It might work with less. It does work as is so I left it that way not wanting to go through again and rewrite massive portions of the page.

I taught a class to some OS X Administrators at the NIH and used my article for a part of the class. It worked then (December 2003). If you want to test without the service, let me know how it goes and I can take it out. It'll take less time for instruction next time I teach that class.

-Michael

Thanks for the feedback and corrections, Michael.