Account disable

[Daniel Hoffend]

I would go with a full ldap solution.

1) you can create an ou and deny access to non-admins/non-service
accounts so people are not able to auth them self (this will not stop
receiving emails). This requires exact knowledge about ldap aci/acl.

2) you can create a role "disabled" and apply this role to those people.
After that you've to adjust the filters in cyrus, postfix and roundcube
to something similar like (this is not an exact howto, but you should
get the idea).
(&(objectclass=inetorgperson)(!(nsRole=*disabled*)))

postfix: local_reciepient_maps.cf -> query_filter
roundcubemail: kolab_auth.inc.php -> kolab_auth_filter
cyrus: ldap_filter

--
Regards
Daniel






Am 18.04.2020 um 11:39 schrieb ladas at seznam.cz:
> Hi Thomas.
> 
> Is it the same system with shared folders? I renamed shared folder and now in roundcubemail can see both folders, old and new one. I can switch each one on and off and each one has different DAV URL. New folder is empty and old one has a data. But at Webadmin I can see only new name. Is it cached at some other place? CalDAV Syncronizer can see both folders too.
> Similar problem is when I delete shared folder. At Webadmin disappears, but at roundcubemail is seen and user has no permission to remove it. Even if the rights was rw for all.
> Can you give me some tip how to repare that, please? I do not want to lose data from the folders.
> 
> Thank you for your answer.
> Greetings, ladas
> 
> P.S. Try to remove cache, but it did not help :(
> 
> Dne čtvrtek 16. dubna 2020 22:00:24 CEST, ladas at seznam.cz napsal(a):
>> Hi Thomas,
>>
>> It is very usefull information. I make a test. Thank you very much for help.
>>
>> Greetings, ladas
>>
>> Dne čtvrtek 16. dubna 2020 16:27:42 CEST, Thomas napsal(a):
>>> Hi ladas,
>>>
>>> if you rename an account, be aware of auth cache.
>>>
>>> kolab-saslauthd caches all ldap queries in /var/lib/kolab/auth_cache.db
>>> To delete the cached ldap queries you can connect to the cache db using
>>> # sqlite3 /var/lib/kolab/auth_cache.db
>>>
>>> and delete all cached entries with
>>> # delete from entries;
>>>
>>> Thomas
>>>
>>> On 4/16/20 3:13 PM, ladas at seznam.cz wrote:
>>>> Hi Valentin.
>>>>
>>>> Thank you for answer. It is interesting idea. When I rename user name, it really change the name at all instances? So It is not necessary to delete one user account and transfer data to other one and it is possible just rename it? I wouldn't think of that.
>>>>
>>>> Greetings,
>>>> ladas
>>>>
>>>> Dne čtvrtek 16. dubna 2020 13:16:31 CEST, Valentin Laskov napsal(a):
>>>>> Hi,
>>>>>
>>>>> You can rename the user and the email address as well. Cyrus-imapd will
>>>>> rename folders accordingly.
>>>>>
>>>>> In my system (recipient policy is disabled) this works.
>>>>>
>>>>> Regards
>>>>> Valentin
>>>>>
>>>>> На 16.04.20 г. в 13:24 ч., ladas at seznam.cz написа:
>>>>>> Hi everybody.
>>>>>>
>>>>>> I would like to ask about user management at Kolab. Is it possible to disable account without delete it? User cannot log in and emails are not delivered?
>>>>>> And second question: OR is it possible remove user account without data remove, and later create new user account and map data into from removed account?
>>>>>> At web management I can only delete account and I think it remove data too.
>>>>>>
>>>>>> Thank you for any answer.
>>>>>>
>>>>>> --
>>>>>> Greetings, ladas
>>>>>>
>>>>>> _______________________________________________
>>>>>> users mailing list
>>>>>> users at lists.kolab.org
>>>>>> https://lists.kolab.org/mailman/listinfo/users
>>>>> _______________________________________________
>>>>> users mailing list
>>>>> users at lists.kolab.org
>>>>> https://lists.kolab.org/mailman/listinfo/users
>>>>
>>>>
>>>> _______________________________________________
>>>> users mailing list
>>>> users at lists.kolab.org
>>>> https://lists.kolab.org/mailman/listinfo/users
>>> _______________________________________________
>>> users mailing list
>>> users at lists.kolab.org
>>> https://lists.kolab.org/mailman/listinfo/users
>>
>>
>>
>> _______________________________________________
>> users mailing list
>> users at lists.kolab.org
>> https://lists.kolab.org/mailman/listinfo/users
> 
> 
> 
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users
>