more virtual domain funnyness
ken at hudat.com
Sun Dec 28 23:20:22 EST 2003
Ok, Igor, Ken, you both must be growing to hate me, but I'm starting to
understand the present need for the defaultdomain paramater. I'm sorry :-)
I have a question. Lets say I have a realm "example.com" and I have the
defaultdomain paramater set to "example.com", and I also have "domain.com"
and "otherdomain.com" on the system. Now, lets say I have "cyrus" users in
each of those realms, and lets say I have the "admins" paramater set to
"cyrus". Will the "cyrus" user from any of those domains be able to
administrate the system, or will it just be the one from the default
Also, in porting some of my management scripts, I tried setting the "c"
rights on a user I wanted to remove to the user "cyrus at example.com", but I
couldn't remove the user. I had to set the rights to the user "cyrus".
That seems a bit odd to me. If example.com is set as the default domain,
and "cyrus" is an admin, shouldn't cyrus recognize that by specifieing
cyrus at example.com, I'm indeed talking about the global admin and thus
allow me to delete the mailbox?
I'm starting to think that maybe there should be two different paramaters,
"admins" (analogous to domain admins) and "globaladmins" (global admins)
to allow more explicit declaration of who has which rights. Besides, it is
administrative priviliges you're talking about after all :-) This would
take away the logical global admin need for the defaultdomain paramater,
and would make the configuration a little more understandable.
Hope I've made sense, and again, I do thank you all for this fine product
Let he who is without clue kiss my ass
More information about the Info-cyrus