How can I get calendar ACL working well with samba group?
Here is part of my sogo configuration:
{
id = directory;
displayName = "myDomain";
canAuthenticate = YES;
type = ldap;
CNFieldName = cn;
IDFieldName = sAMAccountName;
UIDFieldName = sAMAccountName;
MailFieldNames = (mail, otherMailbox);
baseDN = "dc=myDomain,dc=fr";
bindDN = "cn=ldap,cn=Users,dc=myDomain,dc=fr";
bindFields = (sAMAccountName, userPrincipalName);
bindPassword = "myLdapPassword";
hostname = ldap://127.0.0.1:389;
filter = "((mail=\'*\') AND (objectClass=person))";
},
{
id = myDomain_groups;
displayName = "Groupes d'utilisateurs";
canAuthenticate = YES;
type = ldap;
CNFieldName = cn;
IDFieldName = sAMAccountName;
UIDFieldName = sAMAccountName;
baseDN = "dc=myDomain,dc=fr";
bindDN = "cn=ldap,cn=Users,dc=myDomain,dc=fr";
bindPassword = "myLdapPassword";
hostname = ldap://127.0.0.1:389;
filter = "((mail=\'*\') AND (objectClass=group))";
}
My groups defined in samba look like:
dn: CN=Group1,CN=Users,DC=myDomain,DC=fr
objectClass: group
objectClass: securityPrincipal
objectClass: mailRecipient
objectClass: top
cn: Group1
groupType: -2147483646
instanceType: 4
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=myDomain,DC=fr
objectSid:: AQUAAAUVIraSP7NOvHzVEyPvXQQAAA==
sAMAccountName: Group1
distinguishedName: CN=Group1,CN=Users,DC=myDomain,DC=fr
mail: gro...@mydomain.fr
member: CN=User1,CN=Users,DC=myDomain,DC=fr
member: CN=User2,CN=Users,DC=myDomain,DC=fr
member: CN=User3,CN=Users,DC=myDomain,DC=fr
name: Group1
objectGUID:: ATTfk6r5qUS4xT/ZNEodBg==
sAMAccountType: 268435456
uSNChanged: 5251
uSNCreated: 5251
whenChanged: 20160915124953.0Z
whenCreated: 20160915124953.0Z
I can share calendar to a group without problem but cannot subscribe to
the shared calendar with an user in this group from the GUI.
If I add manually the calendar in the user profile in the data base I
can see the shared calendar but if I modify something from the GUI like
ACL for all authenticated users the calendar is not subscribed anymore.
Someone could help me with this issue?
Thanks.
Le 15/09/2016 à 18:02, Martin LEUSCH (sce.t...@imereos.fr) a écrit :
Hi,
I have an installation of SOGo V3 working with a Samba directory as
users source.
I set few group in Samba using the object class "group" and add a new
users source for groups in SOGo. Then I can configure shared calendar
to groups from a super user account but I cannot to calendar shared to
a group, they are not listed in subscribe dialog. However if I set
minimal right by default to see all calendar, I can subscribe to it
and I get the right defined for the group previously and still access
to it when I disable the default conf. I can also add manually the
calendar in the user profile in MySQL.
Is it a bug or I missed something in my configuration?
--
users@sogo.nu
https://inverse.ca/sogo/lists