<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Aki I see what you are saying, and no I don’t believe so. I’m using typical /etc/passwd for the user db. I reviewed <a href="https://wiki.dovecot.org/UserDatabase/ExtraFields" class="">https://wiki.dovecot.org/UserDatabase/ExtraFields</a> but I’m not clear on how to actually return system_user userdb attribute.<div class=""><br class=""></div><div class="">I also have set mail_user_groups = sharedusers in dovecot.conf and then in /etc/group put all the users with mailboxes into the sharedusers group. I can see why that wouldn’t work if the above is not set. Can you point me in the right direction on how to pass that information?</div><div class=""><br class=""></div><div class="">Thanks!<br class=""><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Aug 28, 2018, at 12:40 AM, Aki Tuomi <<a href="mailto:aki.tuomi@dovecot.fi" class="">aki.tuomi@dovecot.fi</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class=""><div class=""><div class="">Are you returning system_user userdb attribute? Extra groups from /etc/group are not applied without this.</div><div class=""><br class=""></div><div id="composer_signature" class=""><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">---<div class="">Aki Tuomi</div><div class="">Dovecot oy</div></div><div class=""><br class=""></div><div style="font-size: 100%;" class=""><!-- originalMessage --><div class="">-------- Original message --------</div><div class="">From: Jason Perry <<a href="mailto:jason.perry@dtainc.us" class="">jason.perry@dtainc.us</a>> </div><div class="">Date: 28/08/2018 04:27 (GMT+02:00) </div><div class="">To: Aki Tuomi <<a href="mailto:aki.tuomi@dovecot.fi" class="">aki.tuomi@dovecot.fi</a>> </div><div class="">Cc: <a href="mailto:dovecot@dovecot.org" class="">dovecot@dovecot.org</a> </div><div class="">Subject: Re: Issue sharing folders with Thunderbird </div><div class=""><br class=""></div></div>Hi Aki, they are.<div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div class=""><div class="" style="margin: 0in; font-family: Calibri; font-size: 11pt;">3. The permissions for the file are:</div><div class="" style="margin: 0in; font-family: Calibri; font-size: 11pt;">root@dal-notify-01 Maildir]# ls -la /var/lib/dovecot/db/shared-mailboxes.db</div><div class="" style="margin: 0in; font-family: Calibri; font-size: 11pt;">-rw-rw-r--. 1 operations sharedusers 197 Aug 26 20:33 /var/lib/dovecot/db/shared-mailboxes.db</div><div class="" style="margin: 0in; font-family: Calibri; font-size: 11pt;">4. Users I'm testing with are part of the sharedusers group in /etc/group</div></div></blockquote><div class=""><br class=""></div>The dir /var/lib/dovecot/db has this for permissions:</div><div class=""><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class="">drwsrwsrwx.</span><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class=""> </span><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class="">2 root</span><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class=""> </span><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class="">sharedusers </span><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class=""> </span><span style="color: rgb(251, 245, 0); font-family: Monaco; background-color: rgb(0, 0, 0);" class="">33 Aug 27 21:12 </span><span style="font-family: Monaco; color: rgb(4, 50, 255); background-color: rgb(95, 250, 104);" class="">db</span></div><div class=""><br class=""></div><div class="">the user operations is a member of “sharedusers” in /etc/group. I even chmod’ed the permissions after to rw for global and I get the same error/result.</div><div class=""><br class=""></div><div class="">The file does appear to get written to. For example, lets say user u2.name creates a folder called “starbucks” and uses the IMAP commands to share it out to user operations. It seems to write to the acl_shared_dict file in /var/lib/dovecot/db/shared-mailboxes.db with an entry like</div><div class=""><blockquote type="cite" class=""><div class=""><div class="" style="margin: 0in; font-family: Calibri; font-size: 11pt;">shared/shared-boxes/user/u2.name/operations</div><div class="" style="margin: 0in; font-family: Calibri; font-size: 11pt;">1</div></div></blockquote><div class=""><br class=""></div>And it writes to the ~/Maildir/.starbucks/dovecot-acl file for u2.user with an entry like:</div><div class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Monaco; color: rgb(251, 245, 0); background-color: rgb(0, 0, 0);" class="">user=operations lrw</div><div class=""><br class=""></div><div class="">So it appears to be working. However, if I log into Thunderbird with the user operations account and go to subscribe, I do not see “starbucks” in the list of available folders. And I still get the nfs_flush_chown error.</div><div class=""><br class=""></div><div class="">Is there anything else I can be doing with the file/dir permissions?</div><div class=""><br class=""></div><div class="">Thanks.</div><div class=""><br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On Aug 27, 2018, at 10:50 AM, Aki Tuomi <<a href="mailto:aki.tuomi@dovecot.fi" class="">aki.tuomi@dovecot.fi</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class=""><div class=""><div class="">acl_shared_dict file & folder must be readwritable by user performing the sharing as stated in wiki.</div><div class=""><br class=""></div><div class=""><a href="https://wiki.dovecot.org/SharedMailboxes/Shared" class="">https://wiki.dovecot.org/SharedMailboxes/Shared</a></div><div id="composer_signature" class=""><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">---<div class="">Aki Tuomi</div><div class="">Dovecot oy</div></div><div class=""><br class=""></div><div style="font-size: 100%;" class=""><!-- originalMessage --><div class="">-------- Original message --------</div><div class="">From: Jason Perry <<a href="mailto:jason.perry@dtainc.us" class="">jason.perry@dtainc.us</a>> </div><div class="">Date: 27/08/2018 17:01 (GMT+02:00) </div><div class="">To: <a href="mailto:dovecot@dovecot.org" class="">dovecot@dovecot.org</a> </div><div class="">Subject: Issue sharing folders with Thunderbird </div><div class=""><br class=""></div></div>
<!--StartFragment--><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">Trying to share
folder "JasonAlerts" within mailbox operations to user u1.name</div><p style="margin:0in;font-family:Calibri;font-size:11.0pt" class=""> </p><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">Issues:</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">1. Shared mailboxes
do not appear under subscriptions in Thunderbird for another user</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">2. When I try to set
permissions via IMAP commands I get in /var/log/dovecot.log</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">Aug 26 20:33:24
imap(operations): Error: nfs_flush_chown_uid: chown(/var/lib/dovecot/db)
failed: Permission denied</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">3. The permissions
for the file are:</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">root@dal-notify-01
Maildir]# ls -la /var/lib/dovecot/db/shared-mailboxes.db</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">-rw-rw-r--. 1
operations sharedusers 197 Aug 26 20:33 /var/lib/dovecot/db/shared-mailboxes.db</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">4. Users I'm testing
with are part of the sharedusers group in /etc/group</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">5. IMAP commands DO
write to the file:</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">[root@dal-notify-01
Maildir]# cat /var/lib/dovecot/db/shared-mailboxes.db</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">shared/shared-boxes/user/u1.name/u2.name</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">1</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">shared/shared-boxes/user/operations/u2.name</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">1</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">shared/shared-boxes/user/u1.name/operations</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">1</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">shared/shared-boxes/user/u1.name/operations</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">1</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">6. It will also
write to the user's /home/operations/Maildir/.JasonAlert/dovecot-acl file</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">user=u1.name ilrw</div><p style="margin:0in;font-family:Calibri;font-size:11.0pt" class=""> </p><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">However if I got
into Thunderbird and try to subscribe, none of the shared folders are
listed. Can anyone help?? Thanks!!</div><p style="margin:0in;font-family:Calibri;font-size:11.0pt" class=""> </p><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">Dovecot version =
2.2.10</div><p style="margin:0in;font-family:Calibri;font-size:11.0pt" class=""> </p><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">dovecot -n</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">[root@server]#
dovecot -n</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""># 2.2.10:
/etc/dovecot/dovecot.conf</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""># OS: Linux
3.10.0-693.17.1.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core)</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">first_valid_uid =
100</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">listen = *</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">log_path =
/var/log/dovecot.log</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">mail_debug = yes</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">mail_location =
maildir:~/Maildir</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">mail_plugins = acl</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">mail_privileged_group
= mail</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">mbox_write_locks =
fcntl</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">namespace Private {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> hidden = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> inbox = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> list = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> location =</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> prefix = Private/</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> separator = /</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> type = private</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">namespace Public {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> hidden = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> inbox = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> list = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> location = maildir:/var/mail/public</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> prefix = Public/</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> separator = /</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> subscriptions = yes</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> type = public</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">namespace Shared {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> hidden = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> inbox = no</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> list = yes</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> location =
maildir:/var/mail/%u:INDEXPVT=~/Maildir/%u</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> prefix = shared/%u/</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> separator = /</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> subscriptions = yes</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> type = shared</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">namespace inbox {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> inbox = yes</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> location =</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> mailbox Drafts {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> special_use = \Drafts</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> }</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> mailbox Junk {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> special_use = \Junk</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> }</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> mailbox Sent {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> special_use = \Sent</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> }</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> mailbox "Sent Messages" {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> special_use = \Sent</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> }</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> mailbox Trash {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> special_use = \Trash</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> }</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> prefix =</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> separator = /</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">passdb {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> driver = pam</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">passdb {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> driver = pam</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">plugin {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> acl = vfile</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> acl_shared_dict = <a href="file:///var/lib/dovecot/db/shared-mailboxes.db" class="">file:/var/lib/dovecot/db/shared-mailboxes.db</a></div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">protocols = imap</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">ssl_cert =
</etc/pki/dovecot/certs/dovecot.pem</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">ssl_key =
</etc/pki/dovecot/private/dovecot.pem</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">syslog_facility =
local2</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">userdb {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> driver = passwd</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">userdb {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> driver = passwd</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">protocol imap {</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class=""> mail_plugins = acl imap_acl</div><div style="margin: 0in; font-family: Calibri; font-size: 11pt;" class="">}</div>
<!--EndFragment--></div></div></blockquote></div><br class=""></div></div></div></div></blockquote></div><br class=""></div></div></body></html>