I just created an issue regarding this.

https://issues.apache.org/jira/browse/JAMES-2963

Jerry, would you have time to contribute this missing documentation?

Regards,

Benoit

On 04/11/2019 16:27, Tellier Benoit wrote:
> Answers inlined,
> 
> Regards,
> 
> Benoit
> 
> On 30/10/2019 11:37, Jerry Malcolm wrote:
>> "enableVirtualHosting" is another config parameter that's set in this
>> same method.  So I decided to search around and see where that is set. 
>> I found it, and just taking a wild guess, is this correct?
> 
> Maybe we need to further explain this.
> 
> When virtual hosting is enabled, usernames are composed of a local part
> and a domain part. al...@domain.tld and al...@company.org are two
> distinct users, with different login and distinct mailboxes. Creating a
> user without domain part is forbidden.
> 
> 
> When virtual hosting is turned of, usernames are only composed of a
> local part. All domains handled by James (check domain list) can be used
> as domain part of their mail address. al...@domain.tld and
> al...@company.org are two mail address belonging to a same "alice" user,
> with same login and mailboxes. Creating users with domain parts is
> forbidden.
> 
> I will add the following indication within the documentation as it might
> get really useful to understand this. Thanks for highlighting this weak
> point!
> 
>>
>> <usersrepository name="LocalUsers"
>> class="org.apache.james.user.jpa.JPAUsersRepository">
>>     <algorithm>MD5</algorithm>
> 
> Try more secure algorithms, you should give a go to SHA-512.
> 
> We should update default configuration accordingly as MD5 hashing is not
> acceptable.
> 
>>     <enableVirtualHosting>true</enableVirtualHosting>
>> <administratorid>ad...@myhost.com</administratorid>
>> </usersrepository>
>>
>> This took a whole lot of digging to figure out.  I really think the
>> default usersrepository.xml should have at least commented-out lines
>> defining where/how to set the administrator id.
> 
> I would be glad to have you contribute this!
> 
>>
>> I'll add it to my list if this is indeed the correct implementation.
>>
>> Jerry
>>
>>
>> On 10/29/2019 11:27 PM, Jerry Malcolm wrote:
>>> I see in AbstractUsersRepository where "adminstratorid" is pulled from
>>> somewhere in the configuration:
>>>
>>>         administratorId =
>>> Optional.ofNullable(configuration.getString("administratorId"));
>>>
>>> But I can't find any place to set it in the shipped configuration
>>> files.  Where is the administrator id supposed to be defined, and what
>>> is the correct syntax to define it?
>>>
>>> Thx
>>>
>>> Jerry
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
>>> For additional commands, e-mail: server-user-h...@james.apache.org
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
>> For additional commands, e-mail: server-user-h...@james.apache.org
>>

---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
For additional commands, e-mail: server-user-h...@james.apache.org

Reply via email to