[Dovecot] shared folder - ACL

[Héctor Moreno Blanco]

> On 2013-11-28 10:38 AM, Héctor Moreno Blanco <hmoreno at gmv.com> wrote:
>> When I try to set acl to a folder:
>>
>> a02 setacl inbox.test1 user1 lr
>> a02 BAD Error in IMAP command SETACL: ACLs disabled.
>>
>>
>> In the logs, I can see:
>>
>> dovecot: imap(testing_ddfr): Debug: acl: No acl setting - ACLs are
>> disabled
>>
>>
>> What am I missing?
>
> This says it is not activated, in spite of what you copy/pasted from some config file.
>
> Never rely on copy/paste from configs... *always* check doveconf -n output. This will *prove* what your active config is - and sometimes it isn't what you think it is (especially with some distros that put things in non-standard places...
>
> doveconf -n output is now necessary...
>
> --
>
> Best regards,
>
> */Charles
> /*

Hello Charles,

This is my doveconf -n output.

# 2.1.6: /usr/local/dovecot/etc/dovecot/dovecot.conf
auth_cache_size = 500 k
auth_cache_ttl = 1000 secs
disable_plaintext_auth = no
first_valid_uid = 501
lock_method = dotlock
mail_debug = yes
mail_fsync = always
mail_gid = vmail
mail_location = maildir:%h/Maildir
mail_nfs_index = yes
mail_nfs_storage = yes
mail_plugins = quota autocreate mail_log notify acl
mail_uid = vmail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify
mmap_disable = yes
namespace {
  inbox = yes
  location =
  prefix =
  separator = .
  type = private
}
namespace {
  hidden = yes
  inbox = no
  list = no
  location =
  prefix = INBOX.
  separator = .
  type = private
}
namespace {
  location = maildir:%h/Maildir/_backup
  prefix = _backup.
  separator = .
  type = private
}
namespace {
  list = children
  location = maildir:%%h/Maildir:INDEX=~/Maildir/shared.%%u
  prefix = shared.%%u.
  separator = .
  subscriptions = no
  type = shared
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf
  driver = ldap
}
plugin {
  acl_anyone = allow
  acl_shared_dict = file:/etc/dovecot/shared-mailboxes.db
  autocreate = Spam
  autosubscribe = Spam
  mail_log_events = delete expunge copy mailbox_delete mailbox_rename
  quota = maildir:_backup:ns=
  quota_warning = storage=75%% quota-warning 75 %u
  quota_warning2 = storage=90%% quota-warning 90 %u
  sieve = %h/.dovecot.sieve
  sieve_dir = %h/sieve
  sieve_extensions = +imapflags +notify
}
protocols = imap pop3 sieve
service anvil {
  client_limit = 5000
}
service auth {
  client_limit = 9000
  unix_listener auth-master {
    group = vmail
    mode = 0700
    user = vmail
  }
  user = root
  vsz_limit = 1 G
}
service imap-login {
  executable = /usr/local/dovecot/libexec/dovecot/imap-login
  inet_listener imap {
    address = *
    port = 143
  }
  inet_listener imaps {
    address = *
    port = 993
  }
  process_limit = 2048
  process_min_avail = 20
  service_count = 0
  user = vmail
}
service imap {
  executable = /usr/local/dovecot/libexec/dovecot/imap
  process_limit = 2048
}
service managesieve-login {
  executable = /usr/local/dovecot/libexec/dovecot/managesieve-login
  inet_listener sieve {
    address = *
    port = 4190
  }
  inet_listener sieve_deprecated {
    address = *
    port = 12000
  }
  user = vmail
}
service managesieve {
  executable = /usr/local/dovecot/libexec/dovecot/managesieve
}
service pop3-login {
  executable = /usr/local/dovecot/libexec/dovecot/pop3-login
  inet_listener pop3 {
    address = *
    port = 110
  }
  inet_listener pop3s {
    address = *
    port = 995
  }
  process_limit = 2048
  process_min_avail = 20
  service_count = 0
  user = vmail
}
service pop3 {
  executable = /usr/local/dovecot/libexec/dovecot/pop3
  process_limit = 2048
}
service quota-warning {
  executable = script /usr/local/dovecot/bin/quota-warning.sh
  unix_listener quota-warning {
    group = vmail
    mode = 0700
    user = vmail
  }
}
ssl_ca = </etc/ssl/correo.es.ca-bundle
ssl_cert = </etc/ssl/correo.crt
ssl_key = </etc/ssl/correo.pem
ssl_verify_client_cert = yes
syslog_facility = local3
userdb {
  args = /etc/dovecot/dovecot-ldap.conf
  driver = ldap
}
valid_chroot_dirs = /buzones/
protocol imap {
  imap_client_workarounds =
  mail_plugin_dir = /usr/local/dovecot/lib/dovecot
  mail_plugins = quota autocreate mail_log notify acl imap_quota imap_acl
}
protocol pop3 {
  mail_plugin_dir = /usr/local/dovecot/lib/dovecot
  mail_plugins = quota autocreate mail_log notify acl
  pop3_uidl_format = %08Xu%08Xv
}
protocol lda {
  auth_socket_path = /usr/local/dovecot/var/run/dovecot/auth-master
  hostname = buzon3.csic.es
  mail_plugin_dir = /usr/local/dovecot/lib/dovecot
  mail_plugins = quota autocreate mail_log notify acl sieve
  postmaster_address = postmaster@****.es
  quota_full_tempfail = no
  rejection_reason = Su mensaje para <%t> fue rechazado automaticamente por nuestro sistema :%n%r
  rejection_subject = Rechazado: %s
  sendmail_path = /usr/sbin/exim
}
protocol sieve {
  managesieve_implementation_string = dovecot Pigeonhole
  managesieve_logout_format = bytes ( in=%i : out=%o )
  managesieve_max_line_length = 65536
}


Maybe the shared namespace is badly configured?

Thank you very much in advanced.
Kind regards.

Héctor Moreno Blanco.


P Please consider the environment before printing this e-mail.

______________________
This message including any attachments may contain confidential 
information, according to our Information Security Management System,
 and intended solely for a specific individual to whom they are addressed.
 Any unauthorised copy, disclosure or distribution of this message
 is strictly forbidden. If you have received this transmission in error,
 please notify the sender immediately and delete it.

______________________
Este mensaje, y en su caso, cualquier fichero anexo al mismo,
 puede contener informacion clasificada por su emisor como confidencial
 en el marco de su Sistema de Gestion de Seguridad de la 
Informacion siendo para uso exclusivo del destinatario, quedando 
prohibida su divulgacion copia o distribucion a terceros sin la 
autorizacion expresa del remitente. Si Vd. ha recibido este mensaje 
 erroneamente, se ruega lo notifique al remitente y proceda a su borrado. 
Gracias por su colaboracion.

______________________