hi there,

just tried to use extended attributes to control the access to shared 
imap-folders (the variant based on filesystem permissions), but didn't 
have any luck so far ... is this approach possible / feasible at all?

i basically want to use access control lists based on extended 
attributes to implement a more sophisticated access control scheme to 
shared folders. more sophisticated means more sophisticated than the 
possibilities provided by the user/group/others-scheme.

to break it down a little more: i am setting up a mail server that runs 
courier-imap, user authentification is done by querying a ldap-server. 
there are some mail aliases - mails adressed to these end up in shared 
folders that should only be accessible by the right people. so a mail to 
- err - [EMAIL PROTECTED] will end up in the shared folder 
"partypeople" (that works), which should only be accessable by people 
that belong to the group "partypeople". that doesn't work atm - the 
catch seems to be that courier-imap only takes the users gid into 
consideration when granting or denying access to shared folders, but not 
other supplementary groups they belong to.


is there anything i can do about this, apart from resorting to couriers 
own acl-scheme?

thank you very much,
thoralf.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Courier-imap mailing list
Courier-imap@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to