File permissions: system groups for do not work for group/shared mailboxes
Jens Kirchner
Jens.Kirchner at web.de
Tue Sep 8 09:06:39 UTC 2015
Hello!
I am struggling to set up a group mailbox for users of a certain system group. I want to grant access to the mailbox on a filesystem mode by using the system groups.
The problem, the set up works fine and when I use setfacl and grant permissions too each user manually, it works fine. However, I want to use a system user's group membership in order to grant access to these mailboxes insted of manually granting for each user.
dovecot version: 2.2.9
This is the config part:
namespace {
location = maildir:/data/mail/public:LAYOUT=fs
prefix = GROUP-MAILBOXES/
separator = /
subscriptions = no
type = public
}
...
passdb {
args = /etc/dovecot/dovecot-ldap.conf.ext
driver = ldap
}
...
userdb {
args = /etc/dovecot/dovecot-ldap.conf.ext
driver = ldap
}
filesystem permissions (getfacl):
# file: GroupboxA/
# owner: root
# group: root
user::rwx
user:user1:rwx
group::rwx
mask::rwx
other::---
default:user::rwx
default:user:user1:rwx
default:group::rwx
default:mask::rwx
default:other::---
# file: GroupboxB/
# owner: root
# group: root
user::rwx
group::rwx
group:group1:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:group1:rwx
default:mask::rwx
default:other::---
user1 is in roup1
When setting username-based permissions (GroupboxA), the mailbox is usable and subsribable; when setting groupname-based permissions (GroupboxB) it is not subscribable/usable.
Thanks for your help in advance and best regards,
Jens
More information about the dovecot
mailing list