SETACL and virtdomains

Ken Murchison murch at andrew.cmu.edu
Wed Aug 7 20:10:58 EDT 2013


I'm on holiday at the moment. Give me another week to ponder this. 

--
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University

On Aug 7, 2013, at 7:47 PM, Bron Gondwana <brong at fastmail.fm> wrote:

> On Wed, Aug 7, 2013, at 07:11 AM, Andrzej Kwiatkowski wrote:
>> I'm using medium scale installation, with a lot clients domains, and 
>> mailboxex in mutliple domains.
>> 
>> Now we want to add to clients functions of sharing mailboxes with some 
>> apps from Kolab.
>> 
>> In docs i have found:
>> 
>>       * Domains are mutually exclusive - Users only have access to
>>         mailboxes within their own domain (intra-domain). The following
>>         example will not work: setacl user.jill at herdomain.com
>>         rick at hisdomain.com read.
>> 
>> Is there any workaround ? Patch maybe ?
>> 
>> TO share folder from user1 at domain.com to user2 at domain2.com in the same 
>> server ?
> 
> I'm afraid it's not possible in the general case without major name
> mangling on the shared mailboxes, which is why we just don't allow it.
> 
> I have CC'd Ken, who might also have some ideas.  Ken - do you see
> super-strong reasons to enforce the "no sharing over domains?  The
> biggest issue I can see is unixhs being off by default - so you can't
> share it as:
> 
> user.username at domain.com.subfolder
> 
> because of the dots.
> 
> user/username at domain.com/subfolder would work fine (you can already emulate
> this by turning OFF virtdomains... as I discovered when people reported bugs
> in it.
> 
> But best of all would be unixhs on and altnamespace, so it's:
> 
> INBOX
> Sent
> Other Users/username at domain.com/...
> 
> 
> ----
> 
> The other alternative is to expose our internal structure even more, so people
> see:
> 
> domain.com!user.username.subfolder
> 
> But that will probably cause massive pain to clients.
> 
> Bron.
> 
> -- 
>  Bron Gondwana
>  brong at fastmail.fm


More information about the Info-cyrus mailing list