Re: group acl with winbind

2015-04-08 Thread Sven Schwedas
On 2015-04-08 12:28, Luca Olivetti wrote: > El 08/04/15 a les 10:11, Sven Schwedas ha escrit: > >>> Winbind uses a socket in /tmp/.winbindd but in the systemd unit file >>> there's a >>> >>> PrivateTmp=true >>> >>> which effectively hides the socket from cyrus. >>> Changing it to false solves the

Re: group acl with winbind

2015-04-08 Thread Luca Olivetti
El 08/04/15 a les 10:11, Sven Schwedas ha escrit: >> Winbind uses a socket in /tmp/.winbindd but in the systemd unit file >> there's a >> >> PrivateTmp=true >> >> which effectively hides the socket from cyrus. >> Changing it to false solves the problem. > > I think it would be better to change th

Re: group acl with winbind

2015-04-08 Thread Sven Schwedas
On 2015-04-08 09:14, Luca Olivetti wrote: > El 07/04/15 a les 18:10, Dan White ha escrit: >> On 04/07/15 17:50 +0200, Luca Olivetti wrote: >>> El 07/04/15 a les 17:31, Dan White ha escrit: >>> > localhost> sam m_sist group:m_sist lrw > setaclmailbox: group:m_sist: lrw: Invalid identifier >>

Re: group acl with winbind

2015-04-08 Thread Luca Olivetti
El 07/04/15 a les 18:10, Dan White ha escrit: > On 04/07/15 17:50 +0200, Luca Olivetti wrote: >> El 07/04/15 a les 17:31, Dan White ha escrit: >> localhost> sam m_sist group:m_sist lrw setaclmailbox: group:m_sist: lrw: Invalid identifier localhost> >>> >>> Could this be a permissions

Re: group acl with winbind

2015-04-07 Thread Dan White
On 04/07/15 17:50 +0200, Luca Olivetti wrote: >El 07/04/15 a les 17:31, Dan White ha escrit: > >>> localhost> sam m_sist group:m_sist lrw >>> setaclmailbox: group:m_sist: lrw: Invalid identifier >>> localhost> >> >> Could this be a permissions problem? Can the cyrus user successfully >> execute the

Re: group acl with winbind

2015-04-07 Thread Luca Olivetti
El 07/04/15 a les 17:31, Dan White ha escrit: >> localhost> sam m_sist group:m_sist lrw >> setaclmailbox: group:m_sist: lrw: Invalid identifier >> localhost> > > Could this be a permissions problem? Can the cyrus user successfully > execute the getent command? Yes, it can $ sudo su -s /bin/bash

Re: group acl with winbind

2015-04-07 Thread Dan White
On 04/07/15 16:28 +0200, Luca Olivetti wrote: >I'm currently using cyrus-imapd 2.4.17 and sssd to obtain nss groups >from an openldap server. >I have some group acl which are currently working fine. >I'm testing the migration to samba4 as an active directory domain >controller and I'm trying to use

Re: group acl with winbind

2015-04-07 Thread Luca Olivetti
El 07/04/15 a les 16:58, Sven Schwedas ha escrit: > > 1. Are you running cyrus on a Domain Controller, or on a normal member > server? member server > > 2. Which winbind/samba version(s) do you use? 3.6.25 > > 3. smb.conf for the cyrus server? [global] security = ads realm = SAMBA.WETRON.E

Re: group acl with winbind

2015-04-07 Thread Sven Schwedas
On 2015-04-07 16:28, Luca Olivetti wrote: > I'm currently using cyrus-imapd 2.4.17 and sssd to obtain nss groups > from an openldap server. > I have some group acl which are currently working fine. > I'm testing the migration to samba4 as an active directory domain > controller and I'm trying to us

group acl with winbind

2015-04-07 Thread Luca Olivetti
I'm currently using cyrus-imapd 2.4.17 and sssd to obtain nss groups from an openldap server. I have some group acl which are currently working fine. I'm testing the migration to samba4 as an active directory domain controller and I'm trying to use winbind instead of sssd (which works perfectly btw