Re: [Dovecot] Shared mailbox ACL

2014-01-28 Thread Alex Ferrara
On 28/01/2014, at 6:37 PM, Steffen Kaiser wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Fri, 24 Jan 2014, Alex Ferrara wrote: > >> I have been able to get the inbox of the shared mailbox to appear in >> Thunderbird, but I would like to allow all subfolders to have the same A

Re: [Dovecot] Shared mailbox ACL

2014-01-27 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 28 Jan 2014, Steffen Kaiser wrote: On Fri, 24 Jan 2014, Alex Ferrara wrote: I have been able to get the inbox of the shared mailbox to appear in Thunderbird, but I would like to allow all subfolders to have the same ACLs. Is there a way to

Re: [Dovecot] Shared mailbox ACL

2014-01-27 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 24 Jan 2014, Alex Ferrara wrote: I have been able to get the inbox of the shared mailbox to appear in Thunderbird, but I would like to allow all subfolders to have the same ACLs. Is there a way to do this without having an ACL entry for eac

Re: [Dovecot] Shared mailbox ACL

2014-01-27 Thread Alex Ferrara
On 24/01/2014, at 8:40 PM, Alex Ferrara wrote: > Hi everyone, > > I am having some trouble with shared folders in trying to replicate how we > use them with a Cyrus backend. > > The auth database is Samba4 active directory, so I am using an LDAP lookup to > authenticate and forcing the UID an

[Dovecot] Shared mailbox ACL

2014-01-24 Thread Alex Ferrara
Hi everyone, I am having some trouble with shared folders in trying to replicate how we use them with a Cyrus backend. The auth database is Samba4 active directory, so I am using an LDAP lookup to authenticate and forcing the UID and GID to be all the same. I have a post-login script that sets

[Dovecot] Shared mailbox help needed

2013-11-04 Thread Alex Ferrara
Hi everyone, I am in the middle of a migration from Cyrus 2.4 to Dovecot 2.1.7, and I have everything mostly working. I set up Dovecot to authenticate against Active Directory (Samba4) using PAM and SSSD, and have also used the fantastic cyrus2dovecot perl script to do a test migration of all o

Re: [Dovecot] Shared mailbox not showing in list

2011-07-08 Thread Tom Clark
vecot-boun...@dovecot.org [mailto:dovecot-boun...@dovecot.org] On Behalf Of Tom Clark Sent: 08 July 2011 9:33 AM To: dovecot@dovecot.org Subject: [Dovecot] Shared mailbox not showing in list I've setup a shared folder on my server which isn't showing in the list command for the user it's

[Dovecot] Shared mailbox not showing in list

2011-07-08 Thread Tom Clark
I've setup a shared folder on my server which isn't showing in the list command for the user it's shared with. Can someone help? I have done everything correctly I believe. The user sharing their mailbox is support@, while I'm the user being shared with, tom@ namespace { type = shared separa

Re: [Dovecot] Shared Mailbox Questions

2010-06-11 Thread Chris Hobbs
Thanks for the reply Timo... >>> Timo Sirainen 06/11/10 7:07 AM >>> >> Jun 9 22:10:23 imap2 dovecot: dict: dict sql iterate failed: file is >> encrypted or is not a database > I don't know about this.. Is there more info I can provide to help troubleshoot this? -- This message was scan

Re: [Dovecot] Shared Mailbox Questions

2010-06-11 Thread Timo Sirainen
On ke, 2010-06-09 at 22:19 -0700, Chris Hobbs wrote: > I started off using a flat file for acl_shared_dict and ran into the same > problem recently reported with the shared-database file getting chown'd to > the first user to touch it with 0600 permissions. Well, no one reported that they were

[Dovecot] Shared Mailbox Questions

2010-06-09 Thread Chris Hobbs
Hi All, I've pored over the wiki, read through the archive, and have what I believe should be a working set-up, but I can't seem to get my shared namespace to work correctly. Any guidance would be much appreciated. I started off using a flat file for acl_shared_dict and ran into the same pro

Re: [Dovecot] Shared mailbox documentation updated

2009-03-04 Thread Sascha Wilde
Timo Sirainen writes: > http://wiki.dovecot.org/SharedMailboxes Great! > Anything missing? Anything still need clarifying? On a first glance looks looks quite complete. :) Maybe the configuration example should include "mail_location" to show how it relates to the "location" in the shared na

[Dovecot] Shared mailbox documentation updated

2009-02-21 Thread Timo Sirainen
http://wiki.dovecot.org/SharedMailboxes Anything missing? Anything still need clarifying? signature.asc Description: This is a digitally signed message part

Re: [Dovecot] shared mailbox - namespace

2008-02-22 Thread Benjamin R. Haskell
On Fri, 22 Feb 2008, c-schettner wrote: Hi all, this is my last try to get help before giving up. I red the dovecot-wiki several times, but it doesn´t work. I don´t know what´s wrong. If I open thunderbird I see the folder "public" but I cannot subscribe it. I have dovecot 1.0.10. Yes it´s a

[Dovecot] shared mailbox - namespace

2008-02-22 Thread c-schettner
Hi all, this is my last try to get help before giving up. I red the dovecot-wiki several times, but it doesn´t work. I don´t know what´s wrong. If I open thunderbird I see the folder "public" but I cannot subscribe it. I have dovecot 1.0.10. Yes it´s a little bit old but it is the latest versio

[Dovecot] Shared Mailbox

2008-02-22 Thread c-schettner
Hi all, this is my last try to get help before giving up. I red the dovecot-wiki several times, but it doesn?t work. I don?t know what?s wrong. If I open thunderbird I see the folder "public" but I cannot subscribe it. I have dovecot 1.0.10. Yes it?s a little bit old but it is the latest versio

Re: [Dovecot] Shared Mailbox

2008-02-20 Thread Charles Marcus
On 2/20/2008, c-schettner ([EMAIL PROTECTED]) wrote: I use dovecot v1.0.rc.15 First thing you need to do is upgrade to a relase version... current is 1.0.10. rc15 is VERY old... -- Best regards, Charles

[Dovecot] Shared Mailbox

2008-02-20 Thread c-schettner
Hi all, I am a very new dovecot user and I do not have many experience in Linux configuration. I use dovecot v1.0.rc.15 (Debian package) IMAP service with virtual domains and users in /home/vmail and everything runs perfectly. Now I want to share the "testfolder" under the mailbox of "user1"

Re: [Dovecot] shared mailbox subfolder permissions

2007-09-08 Thread Timo Sirainen
On Sat, 2007-08-18 at 13:16 +0200, David Leuschner wrote: > when I create a subfolder in a public mailbox the dovecot-shared file is > copied for the newly created subfolder and all mails get the owner, group > and permissions from the file. Unfortunately the cur, new and tmp folders > only get the

[Dovecot] shared mailbox subfolder permissions

2007-08-19 Thread David Leuschner
Hi all, when I create a subfolder in a public mailbox the dovecot-shared file is copied for the newly created subfolder and all mails get the owner, group and permissions from the file. Unfortunately the cur, new and tmp folders only get the permissions from the file but owner and group are set ac

Re: [Dovecot] bug: no initgroup() after login (was Re: Dovecot shared mailbox folder problem)

2007-08-10 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 9 Aug 2007, Timo Sirainen wrote: It should be set if you use userdb passwd. For other userdbs you need to return it youself. For example with LDAP: user_attrs = uid=system_user,..etc.. Hmm, that's a bummer! It works with this setting. I

Re: [Dovecot] bug: no initgroup() after login (was Re: Dovecot shared mailbox folder problem)

2007-08-09 Thread Timo Sirainen
On Fri, 2007-07-06 at 11:29 +0200, Steffen Kaiser wrote: > /* setup environment - set the most important environment first > (paranoia about filling up environment without noticing) */ > restrict_access_set_env(system_user, uid, gid, chroot_dir, >

Re: [Dovecot] bug: no initgroup() after login (was Re: Dovecot shared mailbox folder problem)

2007-07-06 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 6 Jul 2007, Steffen Kaiser wrote: dvtest3. Maybe the problem is that in create_mail_process() when doing: /* setup environment - set the most important environment first (paranoia about filling up environment without noti

[Dovecot] bug: no initgroup() after login (was Re: Dovecot shared mailbox folder problem)

2007-07-06 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 4 Jul 2007, Steffen Kaiser wrote: Hello, after adding plenty of i_info()'s into: ./src/lib/restrict-access.c ./src/imap/main.c ./src/master/mail-process.c I found out what the basic problem is, although not why the access to Maildir was s

Re: [Dovecot] Dovecot shared mailbox folder problem

2007-07-05 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 5 Jul 2007, Timo Sirainen wrote: On Wed, 2007-07-04 at 16:50 +0200, Steffen Kaiser wrote: drwxrws--- 5 31045 30005 4096 2007-07-04 15:53 ./ drwxrwsr-x 2 31045 30005 4096 2007-06-21 12:19 cur/ The setuid-group bit hides group-x bit. The on

Re: [Dovecot] Dovecot shared mailbox folder problem

2007-07-05 Thread Richard Laager
On Thu, 2007-07-05 at 17:43 +0300, Timo Sirainen wrote: > On Wed, 2007-07-04 at 16:50 +0200, Steffen Kaiser wrote: > > drwxrws--- 5 31045 30005 4096 2007-07-04 15:53 ./ > > drwxrwsr-x 2 31045 30005 4096 2007-06-21 12:19 cur/ > > The setuid-group bit hides group-x bit. The only thing I can think of

Re: [Dovecot] Dovecot shared mailbox folder problem

2007-07-05 Thread Christian Skarby
Den 05-07-2007 16:43, Timo Sirainen skrev: On Wed, 2007-07-04 at 16:50 +0200, Steffen Kaiser wrote: drwxrws--- 5 31045 30005 4096 2007-07-04 15:53 ./ drwxrwsr-x 2 31045 30005 4096 2007-06-21 12:19 cur/ The setuid-group bit hides group-x bit. The only thing I can think of is cur/ isn't group-ex

Re: [Dovecot] Dovecot shared mailbox folder problem

2007-07-05 Thread Timo Sirainen
On Wed, 2007-07-04 at 16:50 +0200, Steffen Kaiser wrote: > drwxrws--- 5 31045 30005 4096 2007-07-04 15:53 ./ > drwxrwsr-x 2 31045 30005 4096 2007-06-21 12:19 cur/ The setuid-group bit hides group-x bit. The only thing I can think of is cur/ isn't group-executable. signature.asc Description: Th

Re: [Dovecot] Dovecot shared mailbox folder problem

2007-07-04 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 4 Jul 2007, Steffen Kaiser wrote: # l /mnt/mailcache/shared/.testAccess -n total 24 drwxrws--- 5 31045 30005 4096 2007-07-04 15:53 ./ drwxr-xr-x 6 0 0 4096 2007-07-04 16:08 ../ drwxrwsr-x 2 31045 30005 4096 2007-06-21 12:19 cur/ -rw-

[Dovecot] Dovecot shared mailbox folder problem

2007-07-04 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I've set up a namespace to share some mailboxes. When I try to select them, I get an internal error: Client-server chat: * OK Dovecot ready. 1 login dvtest2 x 1 OK Logged in. 2 list "" * * LIST (\HasNoChildren) "." "Trash" * LIST (\HasChild

Re: [Dovecot] Shared mailbox plans

2007-04-28 Thread Francisco Reyes
Steffen Kaiser writes: My statement is simply my point of view, that the API should be independed of the backend. LDAP, Postgresql, Mysql.. I think any of them is fine. I think anything BUT the initial setup that Timo mentioned. Files in the mailstore I think is the least scalable option.

Re: [Dovecot] Shared mailbox plans

2007-04-23 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 22 Apr 2007, Francisco Reyes wrote: Well, this statement is true for any backend, incl. LDAP. Correct. But many companies do not have a LDAP infrastructure. It is much easier to setup a Mysql DB and put a table for ACL than it is to setup

Re: [Dovecot] Shared mailbox plans

2007-04-22 Thread Joakim Ryden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 22 Apr 2007 17:49:52 -0400 [EMAIL PROTECTED] wrote: > Steffen Kaiser writes: > > >> Having ACLs in SQL allows companies to have a centralized place > >> for all ACLs. > > > > Well, this statement is true for any backend, incl. LDAP. > > C

Re: [Dovecot] Shared mailbox plans

2007-04-22 Thread Francisco Reyes
Steffen Kaiser writes: Having ACLs in SQL allows companies to have a centralized place for all ACLs. Well, this statement is true for any backend, incl. LDAP. Correct. But many companies do not have a LDAP infrastructure. It is much easier to setup a Mysql DB and put a table for ACL than it

Re: [Dovecot] Shared mailbox plans

2007-04-20 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 11 Apr 2007, Francisco Reyes wrote: Having ACLs in SQL allows companies to have a centralized place for all ACLs. Well, this statement is true for any backend, incl. LDAP. Bye, - -- Steffen Kaiser -BEGIN PGP SIGNATURE- Version:

Re: [Dovecot] Shared mailbox plans

2007-04-11 Thread Francisco Reyes
Timo Sirainen writes: Keeping ACLs in SQL is different from keeping the whole mailbox data in SQL. Currently the ACL plugin supports only vfile backend, but it wouldn't be too difficult to add support for SQL backend. Having ACLs in SQL allows companies to have a centralized place for all

Re: [Dovecot] Shared mailbox plans

2007-04-11 Thread Troy Engel
Timo Sirainen wrote: I think I'll also add a check to compare Maildir, new, cur and tmp directories' permissions and log a warning if they're not the same. Just as a sanity check, mine differ (for whatever reason - I probably used 'maildirmake' from Courier) like so: $ ls -gGld SpamTraining

Re: [Dovecot] Shared mailbox plans

2007-04-11 Thread Timo Sirainen
One more thing: I think dovecot-shared file is pointless. It can be implemented by taking the rw-permissions from the Maildir directory (or mbox file). Only problem that I see is if Maildir unintentionally has too wide permissions, this change would make the created mails have too wide permission

Re: [Dovecot] Shared mailbox plans

2007-04-08 Thread Robert Schetterer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Timo Sirainen schrieb: > On 8.4.2007, at 1.04, Robert Schetterer wrote: > >> Timo Sirainen schrieb: >>> On 7.4.2007, at 14.31, Robert Schetterer wrote: for acl public folders with virtual domains, wouldnt it be a good idea to have them in sq

Re: [Dovecot] Shared mailbox plans

2007-04-07 Thread Timo Sirainen
On 8.4.2007, at 1.04, Robert Schetterer wrote: Timo Sirainen schrieb: On 7.4.2007, at 14.31, Robert Schetterer wrote: for acl public folders with virtual domains, wouldnt it be a good idea to have them in sql as backend? Why? Hi Timo, as imap clients that are able to edit imap acls are rar

Re: [Dovecot] Shared mailbox plans

2007-04-07 Thread Robert Schetterer
Timo Sirainen schrieb: On 7.4.2007, at 14.31, Robert Schetterer wrote: for acl public folders with virtual domains, wouldnt it be a good idea to have them in sql as backend? Why? Hi Timo, as imap clients that are able to edit imap acls are rare ( thunderbird, Outlook cant do it yet i think )

Re: [Dovecot] Shared mailbox plans

2007-04-07 Thread Timo Sirainen
On 7.4.2007, at 19.02, Troy Engel wrote: What I was finding with testers is that each person's login process was rewriting permissions on the subscriptions file and the index files didn't work out for the same reason; 1 person would drop an email into a subfolder ("MissedSpam" e.g.), Doveco

Re: [Dovecot] Shared mailbox plans

2007-04-07 Thread Troy Engel
Timo Sirainen wrote: If ACL plugin isn't loaded, I suppose the mailboxes can be accessed if the process has filesystem permissions to access them. Kind of, but it doesn't really work in real life. I tried setting it up initially around... say 1.0rc23 and it runs into permissions problems wr

Re: [Dovecot] Shared mailbox plans

2007-04-07 Thread Timo Sirainen
On 7.4.2007, at 14.31, Robert Schetterer wrote: for acl public folders with virtual domains, wouldnt it be a good idea to have them in sql as backend? Why? PGP.sig Description: This is a digitally signed message part

Re: [Dovecot] Shared mailbox plans

2007-04-07 Thread Robert Schetterer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Timo Sirainen schrieb: > ** Configuration ** > > namespace shared { > prefix = user/%u/ > location = maildir:/home/%u/Maildir:INDEX=~/Maildir/shared-indexes > } > > So the only difference to how it's configured now is that %u is expanded > to wha

[Dovecot] Shared mailbox plans

2007-04-07 Thread Timo Sirainen
** Configuration ** namespace shared { prefix = user/%u/ location = maildir:/home/%u/Maildir:INDEX=~/Maildir/shared-indexes } So the only difference to how it's configured now is that %u is expanded to whatever user whose mailboxes we're accessing. ACL plugin then uses that user as the o