Groups for shared folders

Tue Jan 20 18:49:37 CET 2009

Hi,

I was also looking for a solution for group access -but not to shared 
folders. Instead I would like to grant access to the calendar of 
ressource accounts. I'm still working on a Kolab 2.2.0 system (Debian 
Etch). When I try to enter the group or actually the distribution list 
on the fbview interface it is not added but it shows up in the cyradm 
interface with the "group:" prefix and seems to work right. Will this 
function be added to the fbview webinterface? Actually, there is an 
option to add groups but it is greyed out.

Best regards,
Saim

Alex Kent schrieb:
> <div class="moz-text-flowed" style="font-family: -moz-fixed">Hi Gunnar,
>
> Thanks for your advice on using cyradm for seeing what was going on. I 
> have found a work-around on 2.2.0 so that I'm able to use groups 
> (distribution lists) to set permissions on shared folders.
>
> As people have been stating, I didn't need to append 'group:' to the 
> front of the email address used. The system did that for me fine.
>
> With the web admin panel configured to give permission for 
> UID/email/GID="staff-group at starfields.net" and  permissions='all':
>
> localhost> lam shared.test at starfields.net
> group:staff-group at starfields.net p
> manager lrswipkxtecda
>
> So clearly, the 'all' permissions weren't getting through to the imap 
> server.
>
> So I played with adding permissions manually to the web admin folder:
>
> staff-group at starfields.net = "read/post"
> staff-group at starfields.net = "append"
> staff-group at starfields.net = "write"
>
> And this now results in:
>
> localhost> lam shared.test at starfields.net
> group:staff-group at starfields.net lrswipted
> manager lrswipkxtecda
>
> This allows me to subscribe to the shared mail folder using 
> thunderbird, and add mails to it. I'm guessing I should be able to 
> assign a public email address to it in the normal way.
>
> Thanks for everyones help in finding this work-around without me 
> having to compile/upgrade anything!
>
> Best wishes,
>
> Alex
>
>> ------------------------------------------------------------------------
>>
>> Subject:
>> Re: Groups for shared folders
>> From:
>> Gunnar Wrobel <wrobel at pardus.de>
>> Date:
>> Wed, 14 Jan 2009 16:56:50 +0100
>> To:
>> kolab-users at kolab.org
>>
>> To:
>> kolab-users at kolab.org
>>
>>
>> Quoting Alex <lbf at dragonrising.com>:
>>
>>> Hi Bernhard,
>>>
>>> Thanks so much for the assistance, though I'm still getting stuck.
>>>
>>> I've:
>>>
>>> 1) Gone to distribution lists and create new list:
>>>
>>> List name: staff-group at mydomain.com
>>> Members: alex.kent at mydomain.com
>>> Hidden: unchecked
>>>
>>> 2) Created a shared folder:
>>>
>>> Folder name: staff-shared at mydomain.com
>>> Folder type: mails
>>> Permission for UID/email/GID: "group:staff-group at mydomain.com"
>>> Permission='all'
>>>
>>> This generates the error:
>>>
>>> "No UID or GID group:staff-group at mydomain.com"
>>>
>>> It does accept the UID if I drop "group:" eg:
>>
>> Indeed, you don't need the "group:" prefix. The mail address is 
>> enough to identify that this is a group.
>>
>> I tested that the whole procedure works fine on the recent 
>> Kolab-Server-2.2.1-beta-1 release but I believe it should also work 
>> on 2.2.0 as I don't think we changed anything in that area.
>>
>> Can you check if you see the right permissions on the shared folder 
>> when using the cyradm tool (/kolab/bin/cyradm).
>>
>> This is the example session when I tested this:
>>
>> /kolab/bin/cyradm -u manager localhost
>> Password:
>> example.com> lm
>> shared.shared at example.com (HasNoChildren)
>> user/1 at example.com (HasNoChildren)
>> user/2 at example.com (HasNoChildren)
>> example.com> lam shared.shared at eample.com
>> group:group at example.com lrswipteda
>> anyone lrswipteda
>> manager lrswipkxtecda
>>
>> You see that here the permission is marked with 
>> "group:group at example.com lrswipteda". The "group:" prefix is cyrus 
>> specific. Both users (1 at example.com com and 2 at example.com" are 
>> members of "group at example.com". Both see the shared folder (tested 
>> via the Kolab web client).
>>
>> If it still does not work for you I could test the same procedure on 
>> 2.2.0.
>>
>> Cheers,
>>
>> Gunnar
>>
>>> Permission for UID/email/GID: "staff-group at mydomain.com" 
>>> Permission='all'
>>>
>>> But this doesn't seem to give me "alex.kent at mydomain.com" access to the
>>> folder.
>>>
>>> Am I getting closer?
>>>
>>> Best wishes,
>>>
>>> Alex Kent
>>>
>>>
>>>
>>>
>>>>
>>>> ------------------------------------------------------------------------ 
>>>>
>>>>
>>>> Subject:
>>>> Re: Groups for shared folders
>>>> From:
>>>> Bernhard Reiter <bernhard at intevation.de>
>>>> Date:
>>>> Mon, 12 Jan 2009 15:32:56 +0100
>>>> To:
>>>> kolab-users at kolab.org
>>>>
>>>> To:
>>>> kolab-users at kolab.org
>>>>
>>>>
>>>> On Sonntag, 11. Januar 2009, Alex wrote:
>>>>
>>>>> I'm loving kolab, but need a few pointers giving a group of users 
>>>>> access
>>>>> to a shared folder. I can at the moment give access to everyone, 
>>>>> nobody
>>>>> or a specific person.
>>>>>
>>>>
>>>> You can use server distribution lists.
>>>> (Use the Webadmin for your Kolab Server go to "distribution list",
>>>> add one with all your users and then use "group:YOURLISTNAME"
>>>> as UID to give rights to for the folder.
>>>>
>>>>
>>>>> Having searched kolab-users, I've seen a post which seemed to 
>>>>> indicate
>>>>> the following:
>>>>>
>>>>> 1) Create a new user of account type 'Group Account'
>>>>>
>>>>> 2) Add users to this group account by adding their UID to the
>>>>> 'Email-Delegates' field of the group account.
>>>>>
>>>>
>>>> Email-Delegates _only_ is about who can use the From: adress
>>>> for the Account in question. So this does not help.
>>>>
>>>>
>>>>> 3) Create a shared folder, giving the group accounts UID 'post'
>>>>> permissions.
>>>>>
>>>>
>>>> Post is about incoming emails, so wrong tree. :)
>>>>
>>>>
>>>>> My Mozilla Thunderbird client does not see the new shared folder.
>>>>> Am I on the right lines here?
>>>>>
>>>>
>>>> You were'nt. ;)
>>>>
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Kolab-users mailing list
>>> Kolab-users at kolab.org
>>> https://kolab.org/mailman/listinfo/kolab-users
>>>
>
>
> </div>
>

-- 
--------------------------------------------------------------------------
Dipl.-Ing. Saim Kim
Lehrstuhl fuer Medizinische Informationstechnik
Helmholtz-Institut fuer Biomedizinische Technik
RWTH Aachen
Pauwelsstr. 20, D-52074 Aachen
---
Web:   http://www.medit.hia.rwth-aachen.de/
Tel:   +49-(0)241-80 23218
Fax:   +49-(0)241-80 82442
email: s.kim at hia.rwth-aachen.de
-------------------------------------------------------------------------- 