Hello,
I have a "notifs@" generic mail account, intended to receive technical
monitoring messages. I need to share it with the people of the analyst team.
I created a shared namespace, and enabled the modules. doveadm acl creates the
dovecot-acl file but not the acl_shared_dict file. I guess something prevents it
from
doing it, but I fail to see what.
It is a LDAP setup, and there is only one vmail (uid/gid 500) UNIX account to
read
and write the files on the file system.
$ > doveadm acl add -u notifs at test.example.tld
"shared/notifs at test.example.tld/INBOX" user=maxime.derche at
test.example.tld :lrw
$ > doveadm acl debug -u maxime.derche at test.example.tld
"shared/notifs at test.example.tld/INBOX"
doveadm(maxime.derche at test.example.tld): Info: Mailbox 'INBOX' is in
namespace
'shared/notifs at test.example.tld/'
doveadm(maxime.derche at test.example.tld): Info: Mailbox path:
/var/vmail/test.example.tld/notifs/mail
doveadm(maxime.derche at test.example.tld): Info: Per-user private flags in
mailbox: \Seen
doveadm(maxime.derche at test.example.tld): Info: User maxime.derche at
test.example.tld
has rights: lrw
doveadm(maxime.derche at test.example.tld): Error: User maxime.derche at
test.example.tld
is missing 'lookup' right
doveadm(maxime.derche at test.example.tld): Info: Mailbox
shared/notifs at test.example.tld/INBOX is NOT visible in LIST
/var/vmail/test.example.tld/notifs/mail/dovecot-acl:
----------------------------------------
user=maxime.derche at test.example.tld :lrw
----------------------------------------
dovecot -n
----------------------------------------
# 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.4 ()
# OS: Linux 4.19.0-9-amd64 x86_64 Debian 10.4
# Hostname: server.example.tld
auth_debug = yes
auth_mechanisms = plain login
auth_verbose = yes
lda_mailbox_autocreate = yes
lda_mailbox_autosubscribe = yes
lmtp_save_to_detail_mailbox = yes
mail_access_groups = vmail
mail_debug = yes
mail_gid = 5000
mail_location = maildir:~/Maildir
mail_plugins = quota acl
mail_privileged_group = mail
mail_server_admin = mailto:postmaster at test.example.tld
mail_shared_explicit_inbox = yes
mail_uid = 5000
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character
vacation
subaddress comparator-i;ascii-numeric relational regex imap4flags copy include
variables body enotify environment mailbox date index ihave duplicate mime
foreverypart extracttext imapsieve vnd.dovecot.imapsieve
namespace {
list = children
location = maildir:%%h/mail:INDEXPVT=~/mail/shared/%%u
prefix = shared/%%u/
separator = /
subscriptions = no
type = shared
}
namespace inbox {
inbox = yes
location mailbox Drafts {
auto = subscribe
special_use = \Drafts
}
mailbox Junk {
auto = subscribe
autoexpunge = 30 days
special_use = \Junk
}
mailbox Sent {
auto = subscribe
special_use = \Sent
}
mailbox Trash {
auto = subscribe
autoexpunge = 30 days
special_use = \Trash
}
prefix separator = /
}
passdb {
args = /etc/dovecot/dovecot-ldap.conf.ext
driver = ldap
}
plugin {
acl = vfile
acl_shared_dict = file:/var/vmail/shared-mailboxes
imapsieve_mailbox1_before = file:/etc/dovecot/sieve/learn-spam.sieve
imapsieve_mailbox1_causes = COPY
imapsieve_mailbox1_name = Junk
imapsieve_mailbox2_before = file:/etc/dovecot/sieve/learn-ham.sieve
imapsieve_mailbox2_causes = COPY
imapsieve_mailbox2_from = Junk
imapsieve_mailbox2_name = *
recipient_delimiter = +
sieve = file:~/sieve;active=~/.dovecot.sieve
sieve_after = /etc/dovecot/sieve-after
sieve_before = /etc/dovecot/sieve-before
sieve_global_extensions = +vnd.dovecot.pipe
sieve_pipe_bin_dir = /etc/dovecot/sieve
sieve_plugins = sieve_imapsieve sieve_extprograms
}
protocols = " imap lmtp sieve"
service lmtp {
unix_listener /var/spool/postfix/private/dovecot-lmtp {
group = postfix
mode = 0600
user = postfix
}
}
ssl = required
ssl_cert = </etc/ssl/certs/cert.pem
ssl_cipher_list = HIGH:!ADH:!AECDH:!PSK:!KRB5:!RC4:!DES:!3DES:!MD5
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
ssl_min_protocol = TLSv1.2
ssl_prefer_server_ciphers = yes
userdb {
args = /etc/dovecot/dovecot-ldap.conf.ext
driver = ldap
override_fields = home=/var/vmail/%d/%n
}
protocol lmtp {
mail_plugins = quota acl sieve
userdb {
args = allow_all_users=yes uid=vmail gid=vmail home=/var/vmail/%d/%n
mail=maildir:~/mail
driver = static
name }
}
protocol imap {
mail_plugins = quota acl imap_sieve imap_acl
}
----------------------------------------
Does anyone see what I'm doing wrong here?
Kind regards,
--
Maxime DERCHE Information System Consulting France | NVMQVAM SOLVS
https://www.mdisc.fr/
OpenPGP Key ID: 0x814E02A25697FD13
OpenPGP Key Fingerprint: 8B7B 60C9 1095 A198 C883 5205 814E 02A2 5697 FD13
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200608/d5d4a68a/attachment.sig>
