Hi Luis,

On Thu, 2013-01-31 at 12:47 +0100, Luis Angel Fernandez Fernandez wrote:

>   Now, when I try to add an account to Outlook, in the dialog I have
> to check the name (maybe it is "check username", I'm not sure because
> Outlook is in Spanish) a new dialog shows up saying there are more
> than one matches. It shows the AD/Openchange user and two more matches
> from the two   SOGo domains. I can't choose those latter because
> Outlook can't complete the task.

I think I may understand what is going wrong here.

With current implementation, when you create an Outlook account,
OpenChange services lookup for users and then try to fetch required
information from AD for Microsoft Outlook to build its profile properly.

My guess is that the LDAP attributes used to lookup users from AD
overlaps with the one used for the "SOGo accounts only". When you select
one of these non-AD user, OC NSPI server starts processing AD records to
fetch information and fail at some point because your SOGo accounts are
not AD user ones and miss information/attributes.

This behavior is in fact expected and normal. It is useless to let one
account getting created if you can't authenticate the user through
Samba/OpenChange. Are your us

>   I notice there are a few other fields that could have anything to do
> with Openchange: homeMDB, homeMTA and proxyAddresses
> 
Indeed, these are fields OpenChange server relies on to lookup users.
You may try some experiments with this. As long as your different
domains refers to the same organization, I don't think there may be much
issues.

If these domains are however 2 different companies, then I wouldn't
recommend this atm. This would allow you to lookup the GAL and find out
about users from the other company etc.

You shall want to sand box things here for the safety of your customers.

>   If I copy those values from AD/Openchange users to the SOGo domains
> users will I be able then to  choose between those different email
> addresses when I'll try to add a new account to Outlook? Will I need
> to do anything else or something different?

Presumably that could work as exposed earlier but there may be some
unexpected side effects. I think you need to consider the environment.
For a real multiple domains support, we would need to rethink some of
the NSPI internals. The change may not be invasive nor may it require
lot of resources but it however requires some time to get engineered
properly.

>   Almosto forget, I am using Openchange Quadrant

Thanks for reporting to the list.

Kind Regards,
Julien.



-- 
Julien Kerihuel
[email protected]
OpenChange Project Founder

Twitter: http://www.twitter.com/jkerihuel
GPG Fingerprint: 0B55 783D A781 6329 108A  B609 7EF6 FE11 A35F 1F79


_______________________________________________
devel mailing list
[email protected]
http://mailman.openchange.org/listinfo/devel

Reply via email to