Groups for shared folders

Thu Jan 22 06:32:48 CET 2009

Quoting Alex Kent <alex at DragonRising.com>:

> Hi Gunnar,
>
> Thanks for your advice on using cyradm for seeing what was going on. I
> have found a work-around on 2.2.0 so that I'm able to use groups
> (distribution lists) to set permissions on shared folders.
>
> As people have been stating, I didn't need to append 'group:' to the
> front of the email address used. The system did that for me fine.
>
> With the web admin panel configured to give permission for
> UID/email/GID="staff-group at starfields.net" and  permissions='all':
>
> localhost> lam shared.test at starfields.net
> group:staff-group at starfields.net p
> manager lrswipkxtecda

The 'p' looks like only 'post' has been selected rather than 'all'. I  
fired up a 2.2.0 server now, checking the procedure again: Looks all  
fine.

Cheers,

Gunnar

>
> So clearly, the 'all' permissions weren't getting through to the imap
> server.
>
> So I played with adding permissions manually to the web admin folder:
>
> staff-group at starfields.net = "read/post"
> staff-group at starfields.net = "append"
> staff-group at starfields.net = "write"
>
> And this now results in:
>
> localhost> lam shared.test at starfields.net
> group:staff-group at starfields.net lrswipted
> manager lrswipkxtecda
>
> This allows me to subscribe to the shared mail folder using thunderbird,
> and add mails to it. I'm guessing I should be able to assign a public
> email address to it in the normal way.
>
> Thanks for everyones help in finding this work-around without me having
> to compile/upgrade anything!
>
> Best wishes,
>
> Alex
>
>> ------------------------------------------------------------------------
>>
>> Subject:
>> Re: Groups for shared folders
>> From:
>> Gunnar Wrobel <wrobel at pardus.de>
>> Date:
>> Wed, 14 Jan 2009 16:56:50 +0100
>> To:
>> kolab-users at kolab.org
>>
>> To:
>> kolab-users at kolab.org
>>
>>
>> Quoting Alex <lbf at dragonrising.com>:
>>
>>> Hi Bernhard,
>>>
>>> Thanks so much for the assistance, though I'm still getting stuck.
>>>
>>> I've:
>>>
>>> 1) Gone to distribution lists and create new list:
>>>
>>> List name: staff-group at mydomain.com
>>> Members: alex.kent at mydomain.com
>>> Hidden: unchecked
>>>
>>> 2) Created a shared folder:
>>>
>>> Folder name: staff-shared at mydomain.com
>>> Folder type: mails
>>> Permission for UID/email/GID: "group:staff-group at mydomain.com"
>>> Permission='all'
>>>
>>> This generates the error:
>>>
>>> "No UID or GID group:staff-group at mydomain.com"
>>>
>>> It does accept the UID if I drop "group:" eg:
>>
>> Indeed, you don't need the "group:" prefix. The mail address is enough
>> to identify that this is a group.
>>
>> I tested that the whole procedure works fine on the recent
>> Kolab-Server-2.2.1-beta-1 release but I believe it should also work on
>> 2.2.0 as I don't think we changed anything in that area.
>>
>> Can you check if you see the right permissions on the shared folder
>> when using the cyradm tool (/kolab/bin/cyradm).
>>
>> This is the example session when I tested this:
>>
>> /kolab/bin/cyradm -u manager localhost
>> Password:
>> example.com> lm
>> shared.shared at example.com (HasNoChildren)
>> user/1 at example.com (HasNoChildren)
>> user/2 at example.com (HasNoChildren)
>> example.com> lam shared.shared at eample.com
>> group:group at example.com lrswipteda
>> anyone lrswipteda
>> manager lrswipkxtecda
>>
>> You see that here the permission is marked with
>> "group:group at example.com lrswipteda". The "group:" prefix is cyrus
>> specific. Both users (1 at example.com com and 2 at example.com" are members
>> of "group at example.com". Both see the shared folder (tested via the
>> Kolab web client).
>>
>> If it still does not work for you I could test the same procedure on
>> 2.2.0.
>>
>> Cheers,
>>
>> Gunnar
>>
>>> Permission for UID/email/GID: "staff-group at mydomain.com"
>>> Permission='all'
>>>
>>> But this doesn't seem to give me "alex.kent at mydomain.com" access to the
>>> folder.
>>>
>>> Am I getting closer?
>>>
>>> Best wishes,
>>>
>>> Alex Kent
>>>
>>>
>>>
>>>
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>>
>>>> Subject:
>>>> Re: Groups for shared folders
>>>> From:
>>>> Bernhard Reiter <bernhard at intevation.de>
>>>> Date:
>>>> Mon, 12 Jan 2009 15:32:56 +0100
>>>> To:
>>>> kolab-users at kolab.org
>>>>
>>>> To:
>>>> kolab-users at kolab.org
>>>>
>>>>
>>>> On Sonntag, 11. Januar 2009, Alex wrote:
>>>>
>>>>> I'm loving kolab, but need a few pointers giving a group of users
>>>>> access
>>>>> to a shared folder. I can at the moment give access to everyone,
>>>>> nobody
>>>>> or a specific person.
>>>>>
>>>>
>>>> You can use server distribution lists.
>>>> (Use the Webadmin for your Kolab Server go to "distribution list",
>>>> add one with all your users and then use "group:YOURLISTNAME"
>>>> as UID to give rights to for the folder.
>>>>
>>>>
>>>>> Having searched kolab-users, I've seen a post which seemed to indicate
>>>>> the following:
>>>>>
>>>>> 1) Create a new user of account type 'Group Account'
>>>>>
>>>>> 2) Add users to this group account by adding their UID to the
>>>>> 'Email-Delegates' field of the group account.
>>>>>
>>>>
>>>> Email-Delegates _only_ is about who can use the From: adress
>>>> for the Account in question. So this does not help.
>>>>
>>>>
>>>>> 3) Create a shared folder, giving the group accounts UID 'post'
>>>>> permissions.
>>>>>
>>>>
>>>> Post is about incoming emails, so wrong tree. :)
>>>>
>>>>
>>>>> My Mozilla Thunderbird client does not see the new shared folder.
>>>>> Am I on the right lines here?
>>>>>
>>>>
>>>> You were'nt. ;)
>>>>
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Kolab-users mailing list
>>> Kolab-users at kolab.org
>>> https://kolab.org/mailman/listinfo/kolab-users
>>>
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users
>

-- 
______ http://kdab.com _______________ http://kolab-konsortium.com _

p at rdus Kolab work is funded in part by KDAB and the Kolab Konsortium

____ http://www.pardus.de _________________ http://gunnarwrobel.de _
E-mail : p at rdus.de                                 Dr. Gunnar Wrobel
Tel.   : +49 700 6245 0000                          Bundesstrasse 29
Fax    : +49 721 1513 52322                          D-20146 Hamburg
--------------------------------------------------------------------
    >> Mail at ease - Rent a kolab groupware server at p at rdus <<
--------------------------------------------------------------------

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.kolab.org/pipermail/users/attachments/20090122/b9a7150b/attachment.sig>