shared folder or user account

[Michael Fischer]

Hi!

I have a question regarding shared folders:

I created a shared folder named "office", with the email adress "office
at webfischer dot at".

The shared folder has "lrs" rights set to anyone by default. If I revoke
those rights receiving emails to the folders email address is not
possible. Does that mean rights on a shared folder have to be set in a
manner that every user on my domain is able to see the contents of the
shared folder for receiving emails to the shared folders email adress to
be possible?

I set two users as delegates for the shared folder. Is it possible for
those to to send emails with the office adress as sender in
roundcubemail?

Or is the creation of a user "office" with access rights for other users
the path of choice?

Thanks for your help,
Mike

[Jonas Meier]

Hi Mike,

I am struggling with the same problem and got it partially fixed.
I don't know about the receiving mails part, but for the delegation in
roundcube to work you have to adjust the roundcube settings a bit.

The relevant configs are in /etc/roundcubemail/kolab_delegation.inc.php
and /etc/roundcubemail/kolab_auth.inc.php

In kolab_delegation the LDAP filter for retrieving allowed sender
addresses is set, the other LDAP bind parameters are taken from
kolab_auth settings.
For me, I had to adjust the baseDN from 'ou=People,dc=domain,dc=org' to
just 'dc=domain,dc=org'.
Now the delegations for shared folders, which lie in
'ou=SharedFolders,dc=domain,dc=org', were found as well.
I than extended the kolab_auth_filter to
'(&(objectclass=inetorgperson)(|(uid=%u)(mail=%fu)(alias=%fu))
(ou:dn:=People))'.
So it only accepts entries which's dn have an ou=People in it.

The problem with creating a user and giving rights to other users is,
that I haven't found a way to set acls at creation time

Best regards,
Jonas

Post by Michael Fischer
Hi!
I created a shared folder named "office", with the email adress "office
at webfischer dot at".
The shared folder has "lrs" rights set to anyone by default. If I revoke
those rights receiving emails to the folders email address is not
possible. Does that mean rights on a shared folder have to be set in a
manner that every user on my domain is able to see the contents of the
shared folder for receiving emails to the shared folders email adress to
be possible?
I set two users as delegates for the shared folder. Is it possible for
those to to send emails with the office adress as sender in roundcubemail?
Or is the creation of a user "office" with access rights for other users
the path of choice?
Thanks for your help,
Mike
_______________________________________________
users mailing list
https://lists.kolab.org/mailman/listinfo/users

[Jan Kowalsky]

Hi Mike,

Post by Michael Fischer
I created a shared folder named "office", with the email adress "office
at webfischer dot at".
The shared folder has "lrs" rights set to anyone by default. If I revoke
those rights receiving emails to the folders email address is not
possible. Does that mean rights on a shared folder have to be set in a
manner that every user on my domain is able to see the contents of the
shared folder for receiving emails to the shared folders email adress to
be possible?

actually any folder where you want to receive emails has to have the p
flag. For example:

kolab lam shared/***@datenkollektiv.net
Folder shared/***@datenkollektiv.net
p anyone
lrswipkxtecd group:kollektiv

so the p for anyone ist important. The others you can set like acls for
your needs.

This should be mentioned in the kolab docs. But if you add a new shared
folder for mail this should be the default.

Post by Michael Fischer
I set two users as delegates for the shared folder. Is it possible for
those to to send emails with the office adress as sender in roundcubemail?

yes it is. but maybe you have to change the kolab addressbook settings
in a manner that it searches not only ou=people but the whole base dn.
I'm not shure if this is meanwhile the default setting.

Post by Michael Fischer
Or is the creation of a user "office" with access rights for other users
the path of choice?

This depends more or less on taste. Some things are possible with
accounts but not with shared folders. E.g.: sieve scripts on incoming mails.

But to have only shared folder for really shared stuff make things maybe
more clearly.

Best regards
Jan