Suspend users

[Jan Kowalsky]

Hi Friedemann,

Am 19.07.2015 um 22:04 schrieb Friedemann Schorer:
> Hi!
> Is there a way to temporarily suspend a user account? Using Kolab 3.4 on
> Ubuntu server 14.04

All of this you can achieve e.g. via roles. Add a new role like e.g.
"suspended" to your ldap and add it to the users you wan't to suspend.

Then you have to configure the ldap-queries of the several services like
roundcube, cyrus or postfix or kolab.conf

Yes, there is a way. Depends on what exactly you want:

  * User isn't able to login in roundcube anymore? -> roundcube
  * User can't send emails? -> kolab-saslauthd (/etc/kolab/kolab.conf)
  * User can't recieve emails? -> Postfix (/etc/postfix/ldap/...)
  * User can't open their imap mailfolders -> Cyrus (/etc/impad.conf)

For postfix: you have the postfix/ldap/virtual_alias_maps:

just edit the query_filter line and add an role definition like:

query_filter =
(&(|(mail=%s)(alias=%s))(objectclass=kolabinetorgperson)(!(nsrole=cn=suspended,dc=*)))

analogue for local_recipient_maps.

But be aware: The user not only is unknown to the system with an user
unknown 550 error. Maybe better to set quotas to 0 - then other senders
get an message that user is over quota.

Similar you can do for roundcube in
/etc/roundcube/ldap_authentication.inc.php

$rcmail_config['ldap_authentication_filter'] =

or ldap_filter in /etc/imapd.conf.

The kolab-saslauthd is configured in kolab.conf via the user_filter
attribute.

For just limit the possibility sending emails (sendig quotas) we use the
policyd cluebringer - but this has nothing to do with kolab.

Search the mailinglist for additional info. There was a similar thread
in june on the german list.

Best Regards
Jan