Re: Shared folder acl

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

Quoting Albert Shih <Albert.Shih@xxxxxxxx>:

Le 12/11/2024 à 15:57:19+0100, Jean Charles Delépine via Info a écrit
Albert Shih <Albert.Shih@xxxxxxxx> écrivait (wrote) :

Hi,

> Is it correct the shared (in server side) mailbox need a
>   anyone p
> acl to be able to receive incoming mail ? I find that a little strange
> knowing the configuration contain the user
>
> postuser: sharembxaccount
>
> why do we need allow «anyone» to post a email ? Why not just
> sharembxaccount ?

  postuser: <empty string>
       Userid  used  to  deliver messages to shared folders.  For
       example, if set to "bb", email sent to "bb+shared.blah" would be
       delivered to the "shared.blah" folder.  By default, an email
       address of "+shared.blah" would be used.

postuser is just a cosmetic facility. If it's empty mail to
"+shared.blah" are going to the shared box.

The anyone p right is to give cyrus's postuser the right to post in
folders addressed with plus-address, like this "+shared.blah" :

Faq of cyrus 2.2 (I can't find the same info in modern doc) :
https://web.mit.edu/ghudson/dev/nokrb/third/cyrus-imapd/doc/faq.html

 plus addressing - Plus addressing allows direct delivery to a
 particular mailbox (other than an INBOX). This is done in two ways.

 The first way allows delviery to a subfolder of a specific user's
 INBOX. This is done via an address of the form:
 username+mailfolder@domain, which will deliver to the user's
 INBOX.mailfolder folder (or altnamespace equivalent). This submailbox
 must allow the posting user the 'p' right (generally, this means
 'anyone' must have the 'p' right), otherwise the message will just be
 filed into the user's INBOX.

 The second way is to form an address like [postuser]+mailfolder@domain.
 This will deliver into the mailbox 'mailfolder'. [postuser] is the
 string specified in the imapd.conf option of the same name, and may be
 the empty string. As before, the posting user will need to have the 'p'
 right on the mailbox.


Yes...this is the way I find more satisfying (intellectually), I have

  root@imap:/etc# grep postuser imapd.conf
  postuser: cyrus_shared_account

and

  grep root@mx:~# grep test.share /etc/mail/aliases.all
test.share: cyrus_shared_account+shared.test_share@xxxxxxxxxxxxx

and on the server

  127.0.0.1> lam shared.test_share
  cyrus_shared_account p

I've even try all right

  127.0.0.1> lam shared.test_share
  cyrus_shared_account lrswipkxtecdan
  127.0.0.1>

but not success either

the mail is not posted by cyrus_shared_account but by the unauthenticated lmtp or delivery process. also the "p" acl for anyone is not as problematic, as it is only used for mails delivered by lmtp or the delivery binary. For Mails inserted by the APPEND or the COPY imap commands the "w" or "i" ALCs are
checked


So as I understanding the text that should work. But It's not, when I send a
email I got

  <cyrus_shared_account+shared.test_share@xxxxxxxxxxxxx>: host
      imap.obspm.fr[/run/cyrus/socket/lmtp] said: 550-Mailbox unknown.
Either there is no mailbox associated with this 550-name or you do not have
      authorization to see it. 550 5.1.1 User unknown (in reply to RCPT TO
      command)

  [-- Attachment #2: Delivery report --]
  [-- Type: message/delivery-status, Encoding: 7bit, Size: 0.6K --]

  Reporting-MTA: dns; imap.obspm.fr
  X-Postfix-Queue-ID: 5701C181CC
  X-Postfix-Sender: rfc822; Albert.Shih@xxxxxxxx
  Arrival-Date: Wed, 13 Nov 2024 11:33:07 +0100 (CET)

Final-Recipient: rfc822; cyrus_shared_account+shared.test_share@xxxxxxxxxxxxx Original-Recipient: rfc822;cyrus_shared_account+shared.test_share@xxxxxxxxxxxxx
  Action: failed
  Status: 5.1.1
  Remote-MTA: dns; imap.obspm.fr
  Diagnostic-Code: smtp; 550-Mailbox unknown.  Either there is no mailbox
associated with this 550-name or you do not have authorization to see it.
      550 5.1.1 User unknown

I've check the postfix are correctly configure to use “+”.

And if I add

  127.0.0.1> sam shared.test_share anyone p
  127.0.0.1>

it's working


Big thanks for your help

Regards.

JAS
--
Albert SHIH 🦫 🐸
Observatoire de Paris
France
Heure locale/Local time:
mer. 13 nov. 2024 11:22:41 CET

------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T22db9b7c090b8bf6-Mbdc5b8cc83e40b6606d9d852
Delivery options: https://cyrus.topicbox.com/groups/info/subscription



--
--------------------------------------------------------------------------------
Michael Menge                          Tel.: (49) 7071 / 29-70316
Universität Tübingen                   Fax.: (49) 7071 / 29-5912
Zentrum für Datenverarbeitung mail: michael.menge@xxxxxxxxxxxxxxxxxxxx
Wächterstraße 76
72074 Tübingen

Attachment: smime.p7s
Description: S/MIME-Signatur


------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T22db9b7c090b8bf6-Mb9990092cd47ca926633764f
Delivery options: https://cyrus.topicbox.com/groups/info/subscription

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]
  Powered by Linux