ISP use case - "private" accounts across different domains

[Erik M Jacobs]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/08/2013 10:16 AM, Christian Hügel wrote:
>> 
>> But I don't want to disable ldap address books for all domains.
>> The point is to be able to have some domains where there is no
>> possibility for shared anything, but other domains can share
>> everything.
>> 
>> Think about how GMail works.  I can't see anyone else's
>> addressbook in GMail, but if I was using the corporate GMail for
>> my company, I would be able to share addressbooks between users.
>> 
>> I can make a calendar public in GMail, but it's not a "shared"
>> calendar in the context of resources, free/busy, etc.  In the
>> corporate GMail case, it is truly "shared".
>> 
>> Does that make sense?
>> 
>> Cheers, Erik
>> 
> 
> Hi Erik,
> 
> take a look at this:
> 
> http://hosted.kolabsys.com/~vanmeeuwen/build/html/deployment-guide/hosted-kolab-groupware-deployment.html?highlight=domain#differentiating-access-levels
>
> 
Hi Christian,

I'm having trouble understanding the roles and how that is easier than
groups.

How would you assign the "cn=suspended-user,dc=mykolab,dc=com" role to
a user in ldap?  Since this is an actual object/entry and not a group,
I am not sure how it would be assigned to a user.

If the role is assigned to the user in the database somewhere, that
sounds like a strange combination of LDAP+SQL to get the complete
picture of a user.

What am I missing?  Sorry for being dense.

Cheers,
E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSfTL2AAoJEHFuw9ycpkFhstcH/iMaPfpfahOre/zmabUnzIaM
ZITGi0KnDPegSQ1uW8eZJveB9l3BSd1otXwA9/IW6/s5vhfp06pI3N2DFV0Vd1PI
2cnfZ41obZ9F6AyH5jhb8FFkF6a6XzeQrnf3KFozQeynMD3NHjnCKG7p/RMkkfuw
Xju6D2wxQOlg+nKXi8GfE8jwML0GUctoLHgkRLTZcI14IPNvgQYJfnC7BDrjs5eU
/sBatrw1w9dvkQAPihUGE1FGyCb6UShtUc6Wl8T0yKPhyTS1Otfhcz8Mj1eGG1fm
b5Uk3eEzzNcIrghjNpvbA0k4PFIUDlfBptLu+kUu0yxXqvlthUg/sdeJ2JpgT24=
=1a/t
-----END PGP SIGNATURE-----