ACLs user ids

2019-12-17 Thread Côme Chilliet
Hello, I’m trying to fix ACL support for cyrus in our software written in PHP. It’s hard to understand which user id is expected when calling imap_setacl: https://www.php.net/manual/en/function.imap-setacl.php Does using the user email address works? Is using imap_setacl the same as using the

Cyrus 2.5: ACLs won't recognize some groups

2017-08-31 Thread Sven Schwedas
both have lowercase-only names without spaces or any other non-letter characters in them. If I use group:B in ACLs, A can access the mailbox. If I use group:C, A can't. It's a bit hard to pin down just what change could be responsible for this – the server was updated from wheezy to je

Re: [POLL] Cyrus ACLs and group names

2015-11-26 Thread Artyom Aleksandrov via Info-cyrus
Wed, Nov 18, 2015, 12:05 PM Giuseppe Ravasio (LU) via Info-cyrus < info-cyrus@lists.andrew.cmu.edu> wrote: Same here Giuseppe On 11/17/2015 12:23 PM, Adam Tauno Williams via Info-cyrus wrote: > On Tue, 2015-11-17 at 07:40 +1100, Bron Gondwana via Info-cyrus wrote: >> For those of

Re: [POLL] Cyrus ACLs and group names

2015-11-18 Thread Giuseppe Ravasio (LU) via Info-cyrus
Same here Giuseppe On 11/17/2015 12:23 PM, Adam Tauno Williams via Info-cyrus wrote: > On Tue, 2015-11-17 at 07:40 +1100, Bron Gondwana via Info-cyrus wrote: >> For those of you using Cyrus with group ACLs, how are your groups >> named? >> I know with the auth_unix backen

Re: [POLL] Cyrus ACLs and group names

2015-11-18 Thread Vladislav Kurz via Info-cyrus
On Tuesday 17 of November 2015 "Adam Tauno Williams via Info-cyrus" wrote: > On Tue, 2015-11-17 at 07:40 +1100, Bron Gondwana via Info-cyrus wrote: > > For those of you using Cyrus with group ACLs, how are your groups > > named? > > I know with the auth_unix backen

Re: [POLL] Cyrus ACLs and group names

2015-11-17 Thread Adam Tauno Williams via Info-cyrus
On Tue, 2015-11-17 at 07:40 +1100, Bron Gondwana via Info-cyrus wrote: > For those of you using Cyrus with group ACLs, how are your groups > named? > I know with the auth_unix backend, they are > 'group:'.  What I've seen from CMU's groups is that they > a

[POLL] Cyrus ACLs and group names

2015-11-16 Thread Bron Gondwana via Info-cyrus
For those of you using Cyrus with group ACLs, how are your groups named? I know with the auth_unix backend, they are 'group:'. What I've seen from CMU's groups is that they are of the form ':'. What I want to know is - do group names always contain a colon? If

Re: ACLs and cross-namespace move problem

2013-03-12 Thread Thomas Cataldo
On Mon, Mar 11, 2013 at 3:33 PM, Marc Patermann < hans.mo...@ofd-z.niedersachsen.de> wrote: > Thomas, > > Thomas Cataldo schrieb (11.03.2013 10:21 Uhr): > > >> "Note that some rights are available implicitly, for example 'anonymous' >> always has 'p' on user INBOXes, and users always have rights o

Re: ACLs and cross-namespace move problem

2013-03-11 Thread Marc Patermann
Thomas, Thomas Cataldo schrieb (11.03.2013 10:21 Uhr): > I have a problem with shared user mailboxes and permissions on cyrus 2.4.16. > > User A has read/write access on user B ("lrswipkxte") > > Folders looks like this for user A: > >INBOX >Archive > 2012 >Other Users/ <== t

ACLs and cross-namespace move problem

2013-03-11 Thread Thomas Cataldo
Hi, I have a problem with shared user mailboxes and permissions on cyrus 2.4.16. User A has read/write access on user B ("lrswipkxte") Folders looks like this for user A: INBOX Archive 2012 Other Users/ <== the user's namespace B (user B inbox) Sent

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-06 Thread Mark Cave-Ayland
all? Note that I was trying to remove ACLs for accounts which still existed but needed to be removed so they could be replaced with group permissions instead rather than removing "dead" ACLs entries. Many thanks, Mark. -- Mark Cave-Ayland - Senior Technical Architect PostgreSQL -

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-06 Thread Jeroen van Meeuwen (Kolab Systems)
Jeroen van Meeuwen (Kolab Systems) wrote: > Bron Gondwana wrote: > > The correct way[tm] is to iterate over all the mailboxes and do a > > "setacl" for each one you want to change, probably using an external > > script that talks IMAP. > > While obviously needing some work, I've attached a script

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-06 Thread Jeroen van Meeuwen (Kolab Systems)
l = 9 conf.read_config("../conf/kolab-shc.conf") imap = pykolab.imap imap.connect() # List the shared and user folders shared_folders = imap.lm("shared/*@mydomain.com") user_folders = imap.lm("user/*@mydomain.com") # Placeholder for valid ACL entries valid_acls =

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-04 Thread Mark Cave-Ayland
On 03/09/11 12:50, Mark Cave-Ayland wrote: > Thanks for the heads up. Does that mean I should invoke reconstruct on > all the mailboxes whose permissions I've changed in this way in order to > bring the backup ACLs back in line with the mailboxes.db changes? Sigh. So as soon as I r

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-03 Thread Mark Cave-Ayland
just the mailboxes I was interested in changing but with no ACLs. I >> then fed the resulting file into ctl_mboxlist -u and as if by magic the >> job was done :) > > FYI - while that kinda works, it is slightly skanky, and leaves the > mailboxes.db and the "backup copy of the AC

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-02 Thread Bron Gondwana
On Fri, Sep 02, 2011 at 05:57:38PM +0100, Mark Cave-Ayland wrote: > > I've also tried using the "anyone"/"all" aliases instead of "*" but that > > doesn't seem to work either - is anyone able to point me in the right > > direction as t

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-09-02 Thread Mark Cave-Ayland
On 31/08/11 16:20, Mark Cave-Ayland wrote: > Hi all, > > I'm currently trying to recursively remove all ACLs from part of a Cyrus > tree so I can replace them with newer ones based upon group membership > rather than individual users. However I can't seem to get this to w

Bulk deletion of mailbox ACLs under Cyrus 2.4.4

2011-08-31 Thread Mark Cave-Ayland
Hi all, I'm currently trying to recursively remove all ACLs from part of a Cyrus tree so I can replace them with newer ones based upon group membership rather than individual users. However I can't seem to get this to work at the moment using a wildcard under cyradm: loc

Re: Mailboxes with group: ACLs crashing imapd on delivery

2009-05-29 Thread Simon Matter
> Hi guys, > > I am upgrading our Cyrus installation from 2.2.12 to 2.3.14 and just > started looking at ACLs. > > When I attempt to deliver to a mailbox with "group:" ACLs, LMTP crashes > and will not deliver the message. > > Here's the ACLs for

Mailboxes with group: ACLs crashing imapd on delivery

2009-05-29 Thread David Mayo
Hi guys, I am upgrading our Cyrus installation from 2.2.12 to 2.3.14 and just started looking at ACLs. When I attempt to deliver to a mailbox with "group:" ACLs, LMTP crashes and will not deliver the message. Here's the ACLs for the mailbox: timaphost.bath.ac.uk>

Re: Problem migrating acls.

2009-05-15 Thread Eric Luyten
On Fri, May 15, 2009 1:15 pm, John McMonagle wrote: > Did a test and it appears that the acls are defined in the cyrus.header > files. > > For example: > Cyrus mailbox header > "The best thing about this system was that it had lots of goals." > --Jim Morris on

Problem migrating acls.

2009-05-15 Thread John McMonagle
vocap.orglrswipcda loaded with ctl_mboxlist -u on the new server Did cyrreconstruct and it finds all the new mail boxes. start cyrus in cyradm lm user/t...@advocap.org user/t...@advocap.org (\HasChildren) lam user/t...@advocap.org .....Nothing... If I add with sam it's ok. Did a tes

Re: Cyrus ACLs and groups from LDAP

2008-11-28 Thread Dmitriy Kirhlarov
Stefan Pampel wrote: > Dmitriy Kirhlarov <[EMAIL PROTECTED]> schrieb: >> Christopher DeMarco wrote: >>> I want to put a group: into an ACL, but I want to expand the group >>> using LDAP rather than /etc/groups. >>> >>> A thread from this list circa 2006 seems to indicate that if PAM uses >>> LDAP (

Re: Cyrus ACLs and groups from LDAP

2008-11-27 Thread Stefan Pampel
Dmitriy Kirhlarov <[EMAIL PROTECTED]> schrieb: > Christopher DeMarco wrote: >> I want to put a group: into an ACL, but I want to expand the group >> using LDAP rather than /etc/groups. >> >> A thread from this list circa 2006 seems to indicate that if PAM uses >> LDAP (or NIS for that matter), tha

Re: Cyrus ACLs and groups from LDAP

2008-11-27 Thread Dmitriy Kirhlarov
Christopher DeMarco wrote: > I want to put a group: into an ACL, but I want to expand the group > using LDAP rather than /etc/groups. > > A thread from this list circa 2006 seems to indicate that if PAM uses > LDAP (or NIS for that matter), that Cyrus will use LDAP without even > knowing it. > >

Re: Cyrus ACLs and groups from LDAP

2008-11-26 Thread Dan White
Christopher DeMarco wrote: > I want to put a group: into an ACL, but I want to expand the group > using LDAP rather than /etc/groups. > > A thread from this list circa 2006 seems to indicate that if PAM uses > LDAP (or NIS for that matter), that Cyrus will use LDAP without even > knowing it. > > I

Cyrus ACLs and groups from LDAP

2008-11-26 Thread Christopher DeMarco
I want to put a group: into an ACL, but I want to expand the group using LDAP rather than /etc/groups. A thread from this list circa 2006 seems to indicate that if PAM uses LDAP (or NIS for that matter), that Cyrus will use LDAP without even knowing it. I'd actually prefer that Cyrus do this exp

Problem with mupdate/sasl and random entropy [Re: Setting multiples acls in cyrus/murder slows down to a crawl]

2006-10-16 Thread Farzad FARID
, imap must reauthenticate 400 times in a row. Regards Farzad FARID wrote: Hi, I write a script for cyradm to set the ACLs for all the users, like this: setaclmailbox user.perez cyrus kxa setaclmailbox user.pirat cyrus kxa setaclmailbox user.plouvier cyrus kxa setaclmailbox user.pruche c

Setting multiples acls in cyrus/murder slows down to a crawl

2006-10-13 Thread Farzad FARID
Hi, I write a script for cyradm to set the ACLs for all the users, like this: setaclmailbox user.perez cyrus kxa setaclmailbox user.pirat cyrus kxa setaclmailbox user.plouvier cyrus kxa setaclmailbox user.pruche cyrus kxa setaclmailbox user.seltani cyrus kxa setaclmailbox user.serre cyrus kxa

Re: "negative rights" ACLs - working in cyrus-imapd 2.2.12 (FC4)?

2006-06-30 Thread Phil Pennock
urst, or did I do something wrong? Thanks, You want: sam list.foo -charlie rwsip -rwsip removes those permissions from the stored list, so that nothing is said about them, neither good "grant rights" nor bad "remove rights". -identifier creates an entry for removing the rig

"negative rights" ACLs - working in cyrus-imapd 2.2.12 (FC4)?

2006-06-30 Thread Will Partain
Folks, I tried to use "negative rights" to do "everybody-but-X" permissions on a mailbox. It _looks like_ my "sam" didn't do anything: > lam list.foo alice lrswipcda bob lrswipcda anyone lrswip > sam list.foo charlie -rwsip > lam list.foo alice lrswipcda bob lrswipcda a

Delete a user from all ACLs [auf Viren überprü ft]

2006-04-21 Thread Hans Moser
Hi! Is there a simple way to figure out all the mailboxes a user is in the ACLs and delete him? Normaly one user has one own mailbox, it is easy to delete this (including the ACL). But when I delete the user from my ldap, he has to disappear from all the mailboxes' ACLs, where someone

IMAP user folder ACLs

2006-01-20 Thread Tom Lynch
older called "other users". (we use apple mail client on tiger). Not only could she see but she had full access rights to the other user's folders. Trying to remove the "other users" folder from her mail account, the folder was deleted along with all of doe's f

Re: Sieve ACLs

2005-12-18 Thread Ken Murchison
to set finer grained ACLs, i.e. to allow other users access to my sieve rules via IMAP ACLs or some such? I didn't find anything in the docs or the wiki. Not currently. You want to allow someone else (non-admin) to manage your sieve scripts? What exactly are you trying to accomplish.

Sieve ACLs

2005-12-18 Thread Jan Schneider
Sorry for the missing subject. Zitat von Jan Schneider <[EMAIL PROTECTED]>: Hi, timsieved allows to use different users for authentication and authorization, and this works fine e.g. when setting sieve rules with the cyrus administrator. But is there any way to set finer grained ACL

Re: ACLs

2005-10-24 Thread Ken Murchison
Joseph Brennan wrote: Ken Murchison <[EMAIL PROTECTED]> wrote: I know I had to give "anyone" "p" on shared folders. I tried giving "p" to user "cyrus", but it somehow did not work, not sure why. Delivery is done from Sendmail via LMTP and I did setup auth-info, so Sendmail should have authenti

Re: ACLs

2005-10-24 Thread Joseph Brennan
Ken Murchison <[EMAIL PROTECTED]> wrote: I know I had to give "anyone" "p" on shared folders. I tried giving "p" to user "cyrus", but it somehow did not work, not sure why. Delivery is done from Sendmail via LMTP and I did setup auth-info, so Sendmail should have authenticated itself as user "c

Re: ACLs

2005-10-24 Thread Ken Murchison
Nikola Milutinovic wrote: Ken Murchison wrote: Jt Chiodi wrote: I have noticed that a sub folder of a user's INBOX does not have anyone p set on it when it is created. I am not giving my users access to cyradm and do not want to change acls everytime a mailbox is created. I would li

Re: ACLs

2005-10-24 Thread Nikola Milutinovic
Ken Murchison wrote: Jt Chiodi wrote: I have noticed that a sub folder of a user's INBOX does not have anyone p set on it when it is created. I am not giving my users access to cyradm and do not want to change acls everytime a mailbox is created. I would like to set the default sub f

Re: ACLs

2005-10-24 Thread Ken Murchison
Jt Chiodi wrote: I have noticed that a sub folder of a user's INBOX does not have anyone p set on it when it is created. I am not giving my users access to cyradm and do not want to change acls everytime a mailbox is created. I would like to set the default sub folder behavior to anyone

ACLs

2005-10-21 Thread Jt Chiodi
I have noticed that a sub folder of a user's INBOX does not have anyone p set on it when it is created. I am not giving my users access to cyradm and do not want to change acls everytime a mailbox is created. I would like to set the default sub folder behavior to anyone p. I looked at th

ACLs

2005-10-20 Thread Jt Chiodi
I have noticed that a sub folder of a user's INBOX does not have anyone p set on it when it is created. I am not giving my users access to cyradm and do not want to change acls everytime a mailbox is created. I would like to set the default sub folder behavior to anyone p. I looked at th

Re: group ACLS problem

2005-09-12 Thread Patrick Radtke
mbia.edu> lam ldap group:www lrswipcda Is there an option to make the ACL checker case insensitive? On Sep 12, 2005, at 12:19 PM, [EMAIL PROTECTED] wrote: I'm having a problem with group ACLS. I have configure it to use the pts module and do ldap authentication. When logging i

group ACLS problem

2005-09-12 Thread phr2101
I'm having a problem with group ACLS. I have configure it to use the pts module and do ldap authentication. When logging in I see these queries performed against ldap conn=1 op=0 BIND dn="" method=128 conn=1 op=0 RESULT tag=97 err=0 text= conn=1 op=1 SRCH base="dc=cc,dc=co

Unable to delete ACLs with invalid identifiers - security issue

2005-07-18 Thread Simon Matter
Sometime ago there was a discussion about ACLs which can not be removed anymore because the identifier doesn't exist anymore. Some people suggested workarounds like editing mailboxes db by hand. From my point of view, it is clearly a bug. You can, as normal user, create an ACL referenci

ACLs for "black hole" folder?

2005-04-12 Thread Andreas Hasenack
to be a "black hole": users can put messages there but not read them back or list them, because these are potentially private messages and are not spam. For now I used these ACLs: lip. Seems to work: users can post and insert new messages there, but not see them. The problem is that some mail

Re: acls on shared folders

2005-03-26 Thread Derrick J Brashear
On Sat, 26 Mar 2005, seph wrote: wouldn't it let cyrus deliver to shared boxes without having to give anyone p? Am I missing something obvious? Yes, but what is that saving you from? users shooting themselves in the foot. In my experience, users viewing shared folders through an MTA quite often do

Re: acls on shared folders

2005-03-26 Thread seph
>> wouldn't it let cyrus deliver to shared boxes without having to give >> anyone p? Am I missing something obvious? > > Yes, but what is that saving you from? users shooting themselves in the foot. In my experience, users viewing shared folders through an MTA quite often do things they oughtn't:

Re: acls on shared folders

2005-03-25 Thread Derrick J Brashear
On Fri, 25 Mar 2005, seph wrote: Well, it hardcodes "postman" in yet another place but that's about the only complaint. But what does doing this buy you? wouldn't it let cyrus deliver to shared boxes without having to give anyone p? Am I missing something obvious? Yes, but what is that saving you f

Re: acls on shared folders

2005-03-25 Thread seph
>> This seems to have come up countless times before, and I haven't ever >> seen a conclusive answer. My lmtpd logs that it's pre-auth'ed, but I >> can't figure out how to grant it rights. I found this patch >> http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-devel&msg=745 > > Well,

Re: acls on shared folders

2005-03-25 Thread Derrick J Brashear
On Fri, 25 Mar 2005, seph wrote: I'd like to use a couple shared imap folders to archive some of our internal lists. I can't figure out how to make the acl do what I want. Is there any way to avoid giving anyone the post right? This seems to have come up countless times before, and I haven't ever s

acls on shared folders

2005-03-25 Thread seph
I'd like to use a couple shared imap folders to archive some of our internal lists. I can't figure out how to make the acl do what I want. Is there any way to avoid giving anyone the post right? This seems to have come up countless times before, and I haven't ever seen a conclusive answer. My lmtp

Re: [Cyrus-IMAP] Need advice in ACLs

2005-03-21 Thread Ken Murchison
Igor Belikov wrote: Hello info-cyrus, I need some help or advice in ACLs using. Is it possible to block IMAP access to mailboxes and allow only POP3 access using ACLs? No. You could do this via PAM if you are on a platform that supports it (and you're using plaintext pas

[Cyrus-IMAP] Need advice in ACLs

2005-03-21 Thread Igor Belikov
Hello info-cyrus, I need some help or advice in ACLs using. Is it possible to block IMAP access to mailboxes and allow only POP3 access using ACLs? (I need that only few users may have acces to mailboxes via IMAP) I try set only ACL "s" on mailbox, and I can't get mail

Re: Listing common user's ACLs from the admin's point of view (perl or PHP)

2005-03-07 Thread Paolo Negri
l the granted ACLs my common user owns. As an admin, I don't have his password, so can't connect as his identity but need to list all ACLs he owns (except his own mailbox ones). One solution, not the best (I'd rather), is to parse the entire spool with a 'listaclmailbox

Re: Listing common user's ACLs from the admin's point of view (perl or PHP)

2005-03-07 Thread LaurentG
Paul Dekkers a écrit : Hello Laurent, LaurentG wrote: In order to manage common users status changes (indicated by the update of the LDAP directory) I'd need to enumerate all the granted ACLs my common user owns. As an admin, I don't have his password, so can't connect as hi

Listing common user's ACLs from the admin's point of view (perl or PHP)

2005-02-17 Thread LaurentG
Hello, In order to manage common users status changes (indicated by the update of the LDAP directory) I'd need to enumerate all the granted ACLs my common user owns. As an admin, I don't have his password, so can't connect as his identity but need to list all ACLs he owns

Re: Delivery According to ACLs' "post" Privilege

2004-04-29 Thread Mohamed Magdi Abbas
ot; Can someone explain why it is not possible for users, once authenticated, to deliver to only those mailboxes whose ACLs grant them "post" privileges? That can be done. If you are using sendmail then you need to compile it from scratch with the following: You have to add -D_F

Re: Delivery According to ACLs' "post" Privilege

2004-04-29 Thread Rob Siemborski
not possible for users, once authenticated, to deliver to only > those mailboxes whose ACLs grant them "post" privileges? No one ever wanted the feature? Offhand, I can't think of any reason it would either break or be hard to add. If someone had a patch, I'd certaily be will

Delivery According to ACLs' "post" Privilege

2004-04-28 Thread ms419
in why it is not possible for users, once authenticated, to deliver to only those mailboxes whose ACLs grant them "post" privileges? Thanks! Jack --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: ACLs, public folders, group:, saslauthd, LDAP, etc.

2004-02-20 Thread Simon Matter
> Quoting Simon Matter <[EMAIL PROTECTED]>: > >> > Anyways, I've got the group added to LDAP, and 'id user' is showing >> that >> > getgrent(3) sees the 'straycats' group. However, setting the >> > 'group:straycats' >> >> How is your saslauthd configured? > > I'm using Fedora Raw Hide, so in /etc/

Re: ACLs, public folders, group:, saslauthd, LDAP, etc.

2004-02-20 Thread Derek P. Moore
Quoting Simon Matter <[EMAIL PROTECTED]>: > > Anyways, I've got the group added to LDAP, and 'id user' is showing that > > getgrent(3) sees the 'straycats' group. However, setting the > > 'group:straycats' > > How is your saslauthd configured? I'm using Fedora Raw Hide, so in /etc/sysconfig/sas

Re: ACLs, public folders, group:, saslauthd, LDAP, etc.

2004-02-20 Thread Simon Matter
> Howdy, again, > > Another problem, another email. This problem I've yet to solve. > > I've got series of mailboxes (straycat.*) and I want to use the group: > mechanism > to set the ACLs for these mailboxes, as this seems the most elegant > solution. > I

ACLs, public folders, group:, saslauthd, LDAP, etc.

2004-02-20 Thread Derek P. Moore
Howdy, again, Another problem, another email. This problem I've yet to solve. I've got series of mailboxes (straycat.*) and I want to use the group: mechanism to set the ACLs for these mailboxes, as this seems the most elegant solution. I thought to myself, "I'll just ad

virtual domains and group acls

2003-08-25 Thread Yuri Pimenov
Hello. Id like to know if it is possible to use group acls with virtual domains? I was unable to figure out how to use them at the same time. Groups were exported by nss_ldap module and enabled in imapd.conf, but no 'group:sample_group' neither 'group:[EMAIL PROTECTED]' were w

Re: Setting ACLs to winbind groups

2003-07-13 Thread Rob Siemborski
On Sun, 13 Jul 2003, Marcelino Vallejo wrote: > I've found that installing libnss-mysql I could gave ACLs to non UNIX > groups. Those groups are declared in MySql tables. > One step forward. Doing this can be really expensive on your MySQL server, since every call to auth_newst

Re: Setting ACLs to winbind groups

2003-07-13 Thread Marcelino Vallejo
I've found that installing libnss-mysql I could gave ACLs to non UNIX groups. Those groups are declared in MySql tables. One step forward. Marcelino Vallejo wrote: Hi. We are trying to not to use UNIX users at all, authenticating through pam and taking all groups members from NT Domain th

Re: Setting ACLs to winbind groups

2003-07-11 Thread Marcelino Vallejo
tried just using pam_smb? Then saslauthd -a pam? James. On Friday 11 July 2003 12:48 pm, Marcelino Vallejo wrote: Hi. We are trying to not to use UNIX users at all, authenticating through pam and taking all groups members from NT Domain through winbind daemon, in order to set ACLs. Have

Re: Setting ACLs to winbind groups

2003-07-11 Thread James Satterfield
order to set ACLs. Have anyone experimented with this? > We have gave ACL to an NT group in the form of: group: NTDOMAIN+ntuser. > Imapd has accepted it but never recognized after that, even if one try to > "dam" it. Any ideas? > > At least, is there any chance to take gro

Setting ACLs to winbind groups

2003-07-11 Thread Marcelino Vallejo
Hi. We are trying to not to use UNIX users at all, authenticating through pam and taking all groups members from NT Domain through winbind daemon, in order to set ACLs. Have anyone experimented with this? We have gave ACL to an NT group in the form of: group: NTDOMAIN+ntuser. Imapd has

Re: cyrus acls problem on inboxes

2003-03-24 Thread Rob Siemborski
On Sat, 22 Mar 2003, Scott McDaniel wrote: > I am trying to get cyrus-imapd-2.1.12 running on a new Solaris box and > havin some problems with acls. In short, I want to restrict end users > from adding additional folders under their "INBOX". Regardless of the > acls I se

cyrus acls problem on inboxes

2003-03-22 Thread Scott McDaniel
Dear Dir or Madam, I am trying to get cyrus-imapd-2.1.12 running on a new Solaris box and havin some problems with acls. In short, I want to restrict end users from adding additional folders under their "INBOX". Regardless of the acls I set, end users still can create the folders.

Re: ACLs and such

2003-02-07 Thread Luca Olivetti
Hans Wilmer escribió:: BTW, which IMAP clients or other programs are out there that allow users to easily edit their ACLs? A webclient to just set ACLs would also be ok. It would be *very* nice if I could tell our users to set the permissions they want on their mailfolders all on their own

Re: ACLs and such

2003-02-07 Thread Chris Hastie
On Thu, 6 Feb 2003, Hans Wilmer <[EMAIL PROTECTED]> wrote BTW, which IMAP clients or other programs are out there that allow users to easily edit their ACLs? A webclient to just set ACLs would also be ok. It would be *very* nice if I could tell our users to set the permissions they want on

Re: ACLs and such

2003-02-06 Thread Hans Wilmer
across several partitions depending on their names can contribute to performance. > Part of the design of cyrus includes the assumption that it's a bigger > helpdesk headache when users blow away their own acls (and lose access) > than it is if they are actually held bound to them. Therefor

Re: ACLs and such

2003-02-06 Thread Rob Siemborski
On Thu, 6 Feb 2003, Hans Wilmer wrote: > BTW, which IMAP clients or other programs are out there that allow > users to easily edit their ACLs? A webclient to just set ACLs would > also be ok. It would be *very* nice if I could tell our users to set > the permissions they want on their

Re: ACLs and such

2003-02-05 Thread Rob Siemborski
On Wed, 5 Feb 2003, Ken Murchison wrote: > > Its in the 2.2 branch. Its probably possible to backport it, but IIRC > we discussed this and decided that 2.1 was in feature freeze. > Yeah, that makes sense. Need to go get my memory checked ;) -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Re: ACLs and such

2003-02-05 Thread Ken Murchison
te on anything that resides > > within that folder. > > So, Offhand, I think the rest of your mail is to special purpose for > general use, but I'll address this part of it, since its been brought up > before. > > Part of the design of cyrus includes the assumption tha

Re: ACLs and such

2003-02-05 Thread Rob Siemborski
purpose for general use, but I'll address this part of it, since its been brought up before. Part of the design of cyrus includes the assumption that it's a bigger helpdesk headache when users blow away their own acls (and lose access) than it is if they are actually held bound to them.

ACLs and such

2003-02-05 Thread Hans Wilmer
Hi, can I set quotas and ACLs for a user named 'test' like the following ... cm user.test cm user.test.archives otherpartition sq user.test 100 sq user.test.archives 1000 sam user.test.archives test lrswipca ... and nevertheless allow user 'test' to delete mails and fo

Changing acls in multiple sub-folders

2002-11-28 Thread Alessandro Oliveira
I created a shared folder called "process" and granted the following rights: group:managers ipcd anyone lrs group:users ip group:it ipcd The managers created several sub-folders, now they realized that group:users should be able to create sub-folders as well, but they shouldn't be able to delet

Re: Using wildcards when setting ACLs

2002-02-27 Thread Lawrence Greenfield
ot use wildcards in mailbox names when setting ACLs? Nope, doesn't work. We've talked about implementing it but haven't gotten around to it. I've opened bug #1189 on this. Larry

Using wildcards when setting ACLs

2002-02-27 Thread Dan Young
What I'd like to do is allow a user named monitor to read anyone's mail by doing the following: sam user.* monitor lr but I get: command failed: Mailbox does not exist Can I not use wildcards in mailbox names when setting ACLs?

Websieve, ACLs, bulletin boards

2002-01-07 Thread Tuuli K Tuominen
Hello, I'm trying to use Websieve (version 0.61h) to set ACLs on certain bulletin boards. I have a test bulletin board for which I have all rights. When trying to give rights to user "foo" on bulletin board "bar", I get "Error modifying user.tztuomin.bar, Err:

Re: Group ACLs

2001-12-22 Thread Lawrence Greenfield
quot;it doesn't work". I don't really have time to setup a system using auth_unix and poke at it. Larry --On Thursday, December 13, 2001 3:27 PM +0300 Alexey Lobanov <[EMAIL PROTECTED]> wrote: > Hello. > > Does anybody obtain proper group ACLs in Cyrus IMAP? I ask

Group ACLs

2001-12-13 Thread Alexey Lobanov
Hello. Does anybody obtain proper group ACLs in Cyrus IMAP? I ask succeeders to contact me, if possible. Now I see absolutely no difference between "name acl" and "group:name acl" contexts. Means, if I am a member of group "name" in either /etc/group and|or PAM p

Group ACLs

2001-06-15 Thread Todd Nemanich
Hey everyone, I'm trying to setup some group ACLs in Cyrus where the group membership is defined by an LDAP server. Does anyone already have a patch that does this for 1.6.x? THX. -- Todd Nemanich [EMAIL PROTECTED] "Protecting the opulent and staging moral standard, T

Re: Websieve and ACLs

2001-05-29 Thread Alain Turbide
OTECTED]> Sent: Tuesday, May 29, 2001 8:15 AM Subject: Websieve and ACLs > Hello, > > I´ve installed websieve 0.53 and enjoy > it much. No problem so long with adding > rules and vacation. > > One problem though: > > I wanted to give root on lrp.rz.fh-ulm.de lrs

Websieve and ACLs

2001-05-29 Thread Dietmar Rahlfs
Hello, I´ve installed websieve 0.53 and enjoy it much. No problem so long with adding rules and vacation. One problem though: I wanted to give root on lrp.rz.fh-ulm.de lrs access to the mailbox user.rahlfs.ASK.Newsletter . I chose this folder as "Existing Folder" and "root" (and also another,

Re: Cyrus getquota and ACLs

2001-02-26 Thread Lawrence Greenfield
From: Bruce Bauman <[EMAIL PROTECTED]> Cc: Bruce Bauman <[EMAIL PROTECTED]> Date: Mon, 26 Feb 2001 16:04:28 -0500 We have written our own e-mail client, and would like to obtain a user's quota from the server. Unfortunately, the Cyrus IMAP server only allows a GETQUOTA if the us

Re: Cyrus getquota and ACLs

2001-02-26 Thread Simon Loader
> Bruce Bauman wrote: > > We have written our own e-mail client, and would like to obtain a > user's quota from the server. Unfortunately, > the Cyrus IMAP server only allows a GETQUOTA if the user is an admin > user. I read the Quota Extension RFC > and this seems overly restrictive. > > Or am

Cyrus getquota and ACLs

2001-02-26 Thread Bruce Bauman
Title: Cyrus getquota and ACLs We have written our own e-mail client, and would like to obtain a user's quota from the server. Unfortunately, the Cyrus IMAP server only allows a GETQUOTA if the user is an admin user. I read the Quota Extension RFC and this seems overly restrictive. Or