Re: O365 - ADSync and groups

[sj]

On 2021-04-17 00:36, Alexander Noack wrote:

I created a group in Piler by the name of a Public Folder and assigned
the email addresses from the rcpt table for that Public Folder.

Now I am trying to add the Group to the user session via
CUSTOM_EMAIL_QUERY_FUNCTION but apparently the auth_data doesn't have
a group field... :(

I would like to avoid having to add all email addresses of the Public
Folders, is there any way to add a group to the session data?


What's the ultimate goal? Merely adding another group to the user or to
add the group address to the user? Assuming it's the latter, then you
may skip adding the group, simply just add the Public Folder email 
addresses

to the selected users.

Anyway, I may extend the auth_data array with the groups, if it's the
more elegant and effective solution to your problem.

Janos



Piler is setup to do Authentication against MS-ActiveDirectory. All
Mailboxes are hosted on O365, sent to Piler via a Journaling rule.
AD-Sync is setup to sync with Azure-Ad (O365).

Now when I login to Piler (Auto-Login via SSO) I don't see any
additional groups for my user. It looks like for Exchange
On-Premises this attribute would get populated by my
distribution-groups membership. Since Groups created in O365 are not
synced back, they don't exist in my AD.

I know, I can use
https://www.mailpiler.org/wiki/current:custom-authentication to
create group attributes based on arbitrary AD groups. I just would
like to know how other people are tackling that issue.

For Public-Folder email addresses I created Groups within Piler and
assigned users there.

Alex

Re: O365 - ADSync and groups

[Alexander Noack]

I created a group in Piler by the name of a Public Folder and assigned 
the email addresses from the rcpt table for that Public Folder.


Now I am trying to add the Group to the user session via 
CUSTOM_EMAIL_QUERY_FUNCTION but apparently the auth_data doesn't have a 
group field... :(


I would like to avoid having to add all email addresses of the Public 
Folders, is there any way to add a group to the session data?


Piler is setup to do Authentication against MS-ActiveDirectory. All 
Mailboxes are hosted on O365, sent to Piler via a Journaling rule. 
AD-Sync is setup to sync with Azure-Ad (O365).


Now when I login to Piler (Auto-Login via SSO) I don't see any 
additional groups for my user. It looks like for Exchange On-Premises 
this attribute would get populated by my distribution-groups 
membership. Since Groups created in O365 are not synced back, they 
don't exist in my AD.


I know, I can use 
https://www.mailpiler.org/wiki/current:custom-authentication to create 
group attributes based on arbitrary AD groups. I just would like to 
know how other people are tackling that issue.


For Public-Folder email addresses I created Groups within Piler and 
assigned users there.


Alex

Re: Restore to O365 fails

[Karl Rossing]

We have had the same problem. I meant to open a ticket with Microsoft but
so far have not.

On Fri, Apr 16, 2021 at 8:53 AM Alexander Noack  wrote:

> I do realize that this is very likely not a Piler issue but rather O365
> related… but maybe somebody already came across this issue and knows how to
> remediate it.
>
> When I restore a deleted email in my O365 account, the message transfer
> always fails:
>
> *550 4.3.2 QUEUE.TransportAgent; message deleted by transport agent*
>
>
> The Piler server is setup as a connector in Exchange Online. The Smarthost
> is .mail.protection.outlook.com.
>
> Mails seem to be originating from 
> *MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@.onmicrosoft.com
> *
>
> The error states that there is an NDR sent to that address, but even after
> assigning that address to myself, no NDR is ever received.
>
> I have set $config['REWRITE_MESSAGE_ID'] = 1;
>
> Any help is greatly appreciated!
>
>
> Alex
>

O365 - ADSync and groups

[Alexander Noack]

Piler is setup to do Authentication against MS-ActiveDirectory. All 
Mailboxes are hosted on O365, sent to Piler via a Journaling rule. 
AD-Sync is setup to sync with Azure-Ad (O365).


Now when I login to Piler (Auto-Login via SSO) I don't see any 
additional groups for my user. It looks like for Exchange On-Premises 
this attribute would get populated by my distribution-groups membership. 
Since Groups created in O365 are not synced back, they don't exist in my 
AD.


I know, I can use 
https://www.mailpiler.org/wiki/current:custom-authentication to create 
group attributes based on arbitrary AD groups. I just would like to know 
how other people are tackling that issue.


For Public-Folder email addresses I created Groups within Piler and 
assigned users there.


Alex

Restore to O365 fails

[Alexander Noack]

I do realize that this is very likely not a Piler issue but rather O365 
related… but maybe somebody already came across this issue and knows how 
to remediate it.


When I restore a deleted email in my O365 account, the message transfer 
always fails:


550 4.3.2 QUEUE.TransportAgent; message deleted by transport agent

The Piler server is setup as a connector in Exchange Online. The 
Smarthost is .mail.protection.outlook.com.


Mails seem to be originating from 
MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@.onmicrosoft.com


The error states that there is an NDR sent to that address, but even 
after assigning that address to myself, no NDR is ever received.


I have set $config['REWRITE_MESSAGE_ID'] = 1;

Any help is greatly appreciated!

Alex