SETACL and virtdomains

[Ken Murchison]

Without actually trying to code this feature, I can't think of any 
issues beyond how to expose the shared mailboxes to clients as Bron 
mentions below.  That being said, I'm pretty sure there will be other 
stumbling blocks that we haven't thought of yet.


On 09/05/2013 04:08 AM, Andrzej Kwiatkowski wrote:
> Hi Ken,
>
> Have you got a minute to think about my problem/question ?
>
> Pozdrawiam
> AK
>
>
> W dniu 08.08.2013 02:10, Ken Murchison pisze:
>> I'm on holiday at the moment. Give me another week to ponder this.
>>
>> -- 
>> Kenneth Murchison
>> Principal Systems Software Engineer
>> Carnegie Mellon University
>>
>> On Aug 7, 2013, at 7:47 PM, Bron Gondwana <brong at fastmail.fm> wrote:
>>
>>> On Wed, Aug 7, 2013, at 07:11 AM, Andrzej Kwiatkowski wrote:
>>>> I'm using medium scale installation, with a lot clients domains, and
>>>> mailboxex in mutliple domains.
>>>>
>>>> Now we want to add to clients functions of sharing mailboxes with some
>>>> apps from Kolab.
>>>>
>>>> In docs i have found:
>>>>
>>>>       * Domains are mutually exclusive - Users only have access to
>>>>         mailboxes within their own domain (intra-domain). The 
>>>> following
>>>>         example will not work: setacl user.jill at herdomain.com
>>>>         rick at hisdomain.com read.
>>>>
>>>> Is there any workaround ? Patch maybe ?
>>>>
>>>> TO share folder from user1 at domain.com to user2 at domain2.com in the same
>>>> server ?
>>>
>>> I'm afraid it's not possible in the general case without major name
>>> mangling on the shared mailboxes, which is why we just don't allow it.
>>>
>>> I have CC'd Ken, who might also have some ideas.  Ken - do you see
>>> super-strong reasons to enforce the "no sharing over domains? The
>>> biggest issue I can see is unixhs being off by default - so you can't
>>> share it as:
>>>
>>> user.username at domain.com.subfolder
>>>
>>> because of the dots.
>>>
>>> user/username at domain.com/subfolder would work fine (you can already 
>>> emulate
>>> this by turning OFF virtdomains... as I discovered when people 
>>> reported bugs
>>> in it.
>>>
>>> But best of all would be unixhs on and altnamespace, so it's:
>>>
>>> INBOX
>>> Sent
>>> Other Users/username at domain.com/...
>>>
>>>
>>> ----
>>>
>>> The other alternative is to expose our internal structure even more, 
>>> so people
>>> see:
>>>
>>> domain.com!user.username.subfolder
>>>
>>> But that will probably cause massive pain to clients.
>>>
>>> Bron.
>>>
>>> -- 
>>>  Bron Gondwana
>>>  brong at fastmail.fm
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>>
>


-- 
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University