Can't share a mailbox

[Maxime DERCHE]

Hello,

I have a "notifs@" generic mail account, intended to receive technical
monitoring messages. I need to share it with the people of the analyst team.

I created a shared namespace, and enabled the modules. doveadm acl creates the
dovecot-acl file but not the acl_shared_dict file. I guess something prevents it from
doing it, but I fail to see what.

It is a LDAP setup, and there is only one vmail (uid/gid 500) UNIX account to read
and write the files on the file system.


$ > doveadm acl add -u notifs at test.example.tld
"shared/notifs at test.example.tld/INBOX" user=maxime.derche at test.example.tld :lrw

$ > doveadm acl debug -u maxime.derche at test.example.tld
"shared/notifs at test.example.tld/INBOX"
doveadm(maxime.derche at test.example.tld): Info: Mailbox 'INBOX' is in namespace
'shared/notifs at test.example.tld/'
doveadm(maxime.derche at test.example.tld): Info: Mailbox path:
/var/vmail/test.example.tld/notifs/mail
doveadm(maxime.derche at test.example.tld): Info: Per-user private flags in mailbox: \Seen
doveadm(maxime.derche at test.example.tld): Info: User maxime.derche at test.example.tld
has rights: lrw
doveadm(maxime.derche at test.example.tld): Error: User maxime.derche at test.example.tld
is missing 'lookup' right
doveadm(maxime.derche at test.example.tld): Info: Mailbox
shared/notifs at test.example.tld/INBOX is NOT visible in LIST


/var/vmail/test.example.tld/notifs/mail/dovecot-acl:
----------------------------------------
user=maxime.derche at test.example.tld  :lrw
----------------------------------------


dovecot -n
----------------------------------------
# 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.4 ()
# OS: Linux 4.19.0-9-amd64 x86_64 Debian 10.4
# Hostname: server.example.tld
auth_debug = yes
auth_mechanisms = plain login
auth_verbose = yes
lda_mailbox_autocreate = yes
lda_mailbox_autosubscribe = yes
lmtp_save_to_detail_mailbox = yes
mail_access_groups = vmail
mail_debug = yes
mail_gid = 5000
mail_location = maildir:~/Maildir
mail_plugins = quota acl
mail_privileged_group = mail
mail_server_admin = mailto:postmaster at test.example.tld
mail_shared_explicit_inbox = yes
mail_uid = 5000
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation
subaddress comparator-i;ascii-numeric relational regex imap4flags copy include
variables body enotify environment mailbox date index ihave duplicate mime
foreverypart extracttext imapsieve vnd.dovecot.imapsieve
namespace {
  list = children
  location = maildir:%%h/mail:INDEXPVT=~/mail/shared/%%u
  prefix = shared/%%u/
  separator = /
  subscriptions = no
  type = shared
}
namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
    auto = subscribe
    special_use = \Drafts
  }
  mailbox Junk {
    auto = subscribe
    autoexpunge = 30 days
    special_use = \Junk
  }
  mailbox Sent {
    auto = subscribe
    special_use = \Sent
  }
  mailbox Trash {
    auto = subscribe
    autoexpunge = 30 days
    special_use = \Trash
  }
  prefix =
  separator = /
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
plugin {
  acl = vfile
  acl_shared_dict = file:/var/vmail/shared-mailboxes
  imapsieve_mailbox1_before = file:/etc/dovecot/sieve/learn-spam.sieve
  imapsieve_mailbox1_causes = COPY
  imapsieve_mailbox1_name = Junk
  imapsieve_mailbox2_before = file:/etc/dovecot/sieve/learn-ham.sieve
  imapsieve_mailbox2_causes = COPY
  imapsieve_mailbox2_from = Junk
  imapsieve_mailbox2_name = *
  recipient_delimiter = +
  sieve = file:~/sieve;active=~/.dovecot.sieve
  sieve_after = /etc/dovecot/sieve-after
  sieve_before = /etc/dovecot/sieve-before
  sieve_global_extensions = +vnd.dovecot.pipe
  sieve_pipe_bin_dir = /etc/dovecot/sieve
  sieve_plugins = sieve_imapsieve sieve_extprograms
}
protocols = " imap lmtp sieve"
service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    group = postfix
    mode = 0600
    user = postfix
  }
}
ssl = required
ssl_cert = </etc/ssl/certs/cert.pem
ssl_cipher_list = HIGH:!ADH:!AECDH:!PSK:!KRB5:!RC4:!DES:!3DES:!MD5
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
ssl_min_protocol = TLSv1.2
ssl_prefer_server_ciphers = yes
userdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
  override_fields = home=/var/vmail/%d/%n
}
protocol lmtp {
  mail_plugins = quota acl sieve
  userdb {
    args = allow_all_users=yes uid=vmail gid=vmail home=/var/vmail/%d/%n
mail=maildir:~/mail
    driver = static
    name =
  }
}
protocol imap {
  mail_plugins = quota acl imap_sieve imap_acl
}
----------------------------------------



Does anyone see what I'm doing wrong here?


Kind regards,
-- 
Maxime DERCHE Information System Consulting France | NVMQVAM SOLVS
https://www.mdisc.fr/
OpenPGP Key ID: 0x814E02A25697FD13
OpenPGP Key Fingerprint: 8B7B 60C9 1095 A198 C883 5205 814E 02A2 5697 FD13

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200608/d5d4a68a/attachment.sig>