It seems that i can see all messages of members of the same ad-groups.
In my case, piler would not need to take care of groups…..

Von: Janos SUTO [mailto:[email protected]]
Gesendet: Donnerstag, 23. November 2017 09:45
An: Piler User
Betreff: Re: LDAP Users can see other's mails

Show me the sphinx query from the mail log related to the given user.
Janos
________________________________
From: Katterl Christian
Sent: Thu Nov 23 07:35:19 GMT+01:00 2017
To: "[email protected]<mailto:[email protected]>"
Subject: LDAP Users can see other's mails


Dear all,


i configured piler (1.3.1) on Debian (9) using LDAP authentication against 
Active Directory.
Basically, authentication works.


BUT:
Successfully logged in users cannot only see their own mails, but also mails of 
other users?


My ldap-config from config-site.php looks like this:


$config['ENABLE_LDAP_AUTH'] = 1;
$config['LDAP_HOST'] = 'mydomaincontroller.mydomain.myforest.tld';
$config['LDAP_HELPER_DN'] = 
'CN=pilerldap,OU=ServicesAccounts,DC=mydomain,DC=myforest,DC=tld';
$config['LDAP_HELPER_PASSWORD'] = 'highpressurecompressor';
$config['LDAP_MAIL_ATTR'] = 'mail';
$config['LDAP_ACCOUNT_OBJECTCLASS'] = 'user';
$config['LDAP_DISTRIBUTIONLIST_OBJECTCLASS'] = 'group';
$config['LDAP_DISTRIBUTIONLIST_ATTR'] = 'member';
$config['LDAP_BASE_DN'] = DC=mydomain,DC=myforest,DC=tld;
$config['LDAP_AUDITOR_MEMBER_DN'] = '';
$config['LDAP_ADMIN_MEMBER_DN'] = '';


Any ideas?


BR, Christian


Christian Katterl
Teamleader Technical IT

[cid:[email protected]]

Asamer Baustoffe AG
Unterthalham Straße 2
4694 Ohlsdorf
Austria
tel  +43 50 799 - 2511
mobile +43 664 811 54 99
email [email protected]<mailto:[email protected]>
www.abag.at<https://www.abag.at>


This message is confidential. It may not be disclosed to, or used by, anyone 
other than the addressee. If you receive this message by mistake, please advise 
the sender.
Firmenbuch: Landesgericht Wels, FN: 407726y, ATU 68646334

Reply via email to