SETACL and virtdomains
Ken Murchison
murch at andrew.cmu.edu
Wed Aug 7 20:10:58 EDT 2013
I'm on holiday at the moment. Give me another week to ponder this.
--
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University
On Aug 7, 2013, at 7:47 PM, Bron Gondwana <brong at fastmail.fm> wrote:
> On Wed, Aug 7, 2013, at 07:11 AM, Andrzej Kwiatkowski wrote:
>> I'm using medium scale installation, with a lot clients domains, and
>> mailboxex in mutliple domains.
>>
>> Now we want to add to clients functions of sharing mailboxes with some
>> apps from Kolab.
>>
>> In docs i have found:
>>
>> * Domains are mutually exclusive - Users only have access to
>> mailboxes within their own domain (intra-domain). The following
>> example will not work: setacl user.jill at herdomain.com
>> rick at hisdomain.com read.
>>
>> Is there any workaround ? Patch maybe ?
>>
>> TO share folder from user1 at domain.com to user2 at domain2.com in the same
>> server ?
>
> I'm afraid it's not possible in the general case without major name
> mangling on the shared mailboxes, which is why we just don't allow it.
>
> I have CC'd Ken, who might also have some ideas. Ken - do you see
> super-strong reasons to enforce the "no sharing over domains? The
> biggest issue I can see is unixhs being off by default - so you can't
> share it as:
>
> user.username at domain.com.subfolder
>
> because of the dots.
>
> user/username at domain.com/subfolder would work fine (you can already emulate
> this by turning OFF virtdomains... as I discovered when people reported bugs
> in it.
>
> But best of all would be unixhs on and altnamespace, so it's:
>
> INBOX
> Sent
> Other Users/username at domain.com/...
>
>
> ----
>
> The other alternative is to expose our internal structure even more, so people
> see:
>
> domain.com!user.username.subfolder
>
> But that will probably cause massive pain to clients.
>
> Bron.
>
> --
> Bron Gondwana
> brong at fastmail.fm
More information about the Info-cyrus
mailing list