search for: setacl

Displaying 20 results from an estimated 90 matches for "setacl".

Did you mean: getacl
2009 Jun 15
2
Dovecot v1.2 assert() in ACL
...sers LIST mailboxes shared by other users, Dovecot needs a # shared mailbox dictionary. For example: acl_shared_dict = file:/var/cache/dovecot/shared-mailboxes telnet localhost imap 0 login .... 1 getacl Sent * ACL "Sent" "testuser" lrwstipekxacd 1 OK Getacl completed. 2 setacl Sent timo +lrwtsd 2 OK Setacl complete. 3 setacl Sent timo -lrwtsd Aborted (core dumped) cat /var/cache/dovecot/shared-mailboxes shared/shared-boxes/user/timo/testuser 1 === The assert happens when the last right is to remove: setacl I user +lwp setacl I user -l setacl I user -w setacl I user -...
2017 Jan 02
0
differential SETACL silently fails if no vfile exists
In version 2.2.13, with `acl = vfile`, setting a differential ACL permission doesn't work if there are no permissions set yet. Example IMAP log: b1 GETACL test * ACL test valodim lrwstipekxacd b1 OK Getacl completed. b2 SETACL test valodim -l b2 OK Setacl complete. b3 GETACL test * ACL test valodim lrwstipekxacd b3 OK Getacl completed. My expectation was that the file would be created with default permissions, and the requested change then applied. However, no acl permission is set and no vfile is created for this mail...
2011 Sep 11
1
setacl on complete mailbox
Hi List, how can I grant a user full control on another mailbox (the complete mailbox with all folder and subfolders). With the setacl command I could do this but first I have to list all folders and then I have to do one setacl command for each folder. Is there a command to this in one line? Also for new created folders? Greetz, Tobias
2014 Feb 21
1
Why SETACL accepts non-existant users (was Re: Why are ACLs for non-existent mailboxes accepted?)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 20 Feb 2014, Boris wrote: > On Thursday 20 February 2014 20:45:32 Boris wrote: >> Dovecot 2.2.9-1 accepts SETACL commands that share mailboxes to non-existent >> mailboxes. There is no error message. Is this intended behavior? There is a "false friend" here. A "mailbox" in the tongue of many English speakers is an IMAP folder, the mailbox file all mails had been appended together...
2009 Feb 18
1
v1.2 can't set ACL to empty string
Hi *, according to RfC4314 the rights argument to the setacl command might be an empty string ("zero right characters"): The third argument is a string containing an optional plus ("+") or minus ("-") prefix, followed by zero or more rights characters. existing clients (horde in particular) actually use this to remove...
2011 Oct 22
2
setacl fails - does not find dovecot-acl file
...file or directory dovecot: imap(michael): Error: file_dotlock_open(/home/dovecot/michael/.test/dovecot-acl) failed: No such file or directory The error occurs whether a (manually created) dovecot-acl file exists or not. The dovecot-acl.lock file is created by not removed afterwards. Subsequent setacl commands will timeout waiting for the lock to be released until I delete it manually. If I create the dovecot-acl file manually and provide access to another user, the getacl command will correctly show the permissions and the other user can access the folder. setacl will still fail to modify t...
2012 Aug 29
1
ACL MySQL dict: to_user==from_user entries
Hi! We run dovecot 2.1.6 with ACL support and MySQL dict for shared/shared-boxes/user/$to/$from. When a user does a SETACL (via IMAP) to himself he is added as $to and $from to the MySQL dict. Se for example this IMAP conversation: 5 GETACL INBOX * ACL "INBOX" "user at domain" lrwstipekxacd 5 OK Getacl completed. 6 SETACL INBOX user at domain lrwstipekxacd 6 OK Setacl complete. 7 GETACL INBOX * AC...
2011 Jun 27
1
ACLs: Group ACL adds empty ACL for user of same name, why?
I'm playing around with ACLs, Groups and SOGo on Debian Stable, Dovecot 1.2.15. If I set an ACL for a group 'developers': 6 setacl "INBOX.Trash" "$developers" "lrsw" 6 OK Setacl complete. The dovecot-acl file for INBOX.Trash then contains a group setting for the group, and a user setting for a user of the same name, giving it no permissions. group=developers lrws user=developers and a subsequ...
2013 Feb 26
1
2.2.rc2: problem with acl_shared_dict
Hello, 2.2.rc2, configuration as before: acl_shared_dict=file:... The contents of this file is used for e.g. LISTing shared mailboxes. But even with file and directory beeing world writable, it's not written into on SETACL commands. Instead, at least sometimes (it seems to make a difference if GETACL is used before in the session) the imap process crashes on SETACL or DELETEACL. Feb 26 00:31:52 host dovecot: imap(13373, user) K64y8ZTWOgB/AAAB: Fatal: master: service(imap): child 13373 killed with signal 11 (core dum...
2013 Nov 28
2
shared folder - ACL
...rs in dovecot 2.1.6 without success. My configuration is: mail_plugins = quota autocreate mail_log notify acl ... plugin { ... acl_shared_dict = file:/etc/dovecot/shared-mailboxes.db ... } Protocol imap { ... mail_plugins = imap_quota imap_acl ... } When I try to set acl to a folder: a02 setacl inbox.test1 user1 lr a02 BAD Error in IMAP command SETACL: ACLs disabled. In the logs, I can see: dovecot: imap(testing_ddfr): Debug: acl: No acl setting - ACLs are disabled What am I missing? Thank you very much in advanced. Kind regards. H?ctor Moreno Blanco. P Please consider the enviro...
2014 Feb 20
2
Why are ACLs for non-existent mailboxes accepted?
Dovecot 2.2.9-1 accepts SETACL commands that share mailboxes to non-existent mailboxes. There is no error message. Is this intended behavior? I think it's bad because clients present a success message when indeed the intent of the user failed. Typos are hard to catch.
2018 Aug 07
2
limit sharing ability to certain users
...SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in . SETACL Inbox test2 at onnet.ch lrwstipekxa . OK Setacl complete. . GETACL Inbox * ACL Inbox test2 at onnet.ch akxeilprwtscd test at onnet.ch lrwstipekxacd . OK Getacl completed. Cheers > On 7 Aug 2018, at 12:05, Aki Tuomi <aki.tuomi at dovecot.fi> wrote: > > Hmm. if you put it *after* th...
2009 Jun 25
3
Dovecot v1.2 ACL shared-boxes users in SQL, how to remove entries?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I noticed that entries added to the ACL dict are not removed, when an user no longer has explicit ACLs to another user, e.g.: [at the beginning no ACLs for "user"] 1 login testuser pwd 2 setacl INBOX user lp 3 deleteacl INBOX user Although "user" has no ACLs of mailfolders of "testuser", the user-testuser relation is still in the DB and upon login of user the ACLs in user's Maildir is consulted. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version:...
2012 Oct 30
0
Dovecot does not update acl_shared_dict file
...ad] access on a mailbox folder to a particular user 2. Enable the acl_shared_dict to allow dovecot to track (and display to IMAP clients) the folders to which they have access. This will take the form of a BDB file: /var/lib/dovecot/shared-mailboxes.db This file can only be updated by using the SETACL command. *This is where I have the problem*. The SETACL command does nothing. No matter how hard I try, I cannot get dovecot to update this file. The only indication I have that the file exists and is readable by dovecot is the disappearance from the logs of the line: No acl_shared_dict sett...
2009 Feb 06
2
[patch] 'c' and 'd' in setacl
Hi Timo, Hi *, I just recognized that the new imap-acl plugin in dovecot 1.2 does not know the obsolete rights 'd' and 'c' when setting. According to RFC 4314 section 2.1.1.: If a client includes the "d" right in a rights list, then it MUST be treated as if the client had included every member of the "delete" right. and If a client includes
2010 Mar 18
1
Shared mailboxes basics
...OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in 1 setacl INBOX dovepop rl 1 OK Setacl complete. But isn't a client like Thunderbird (3.0.3) supposed to . show me the #shared (even if no one shares mailboxes to me) "folder" (because of list = yes )? . let me share, let's say the .sous.arbo mailbox ? If yes, how ? Or should I firs...
2008 Dec 10
2
dovecot 1.2 Alpha4 shared folders
Hi, I'm trying to setup shared folders with alpha4 but didn't succeed until now. Here is my dovecot -n : # 1.2.alpha4: /etc/dovecot.conf # OS: Linux 2.6.26.5 i686 Mandriva Linux 2009.0 base_dir: /var/run/dovecot/
2009 Mar 05
3
ACL changes not respected by already loged in clients
...ogin userA secret l OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH ACL RIGHTS=texk ANNOTATEMORE] Logged in s setacl "INBOX/foobar" "B at example.com" eilprwtsd s OK Setacl complete. g getacl INBOX/foobar * ACL "INBOX/foobar" "B at example.com" eilprwtsd "A at example.com" lrwstipekxacd User B logs in to dovecot and sees the newly accessible mailbox: * O...
2011 Sep 23
1
Strange behavior from shared namespaces and INBOX, probably a bug
Hi, we have experienced some erratic behavior from Dovecot 2.0.15 if a user's INBOX is shared. Some folders of user1, including the INBOX, have been shared using these IMAP commands: . login user1 XXXXXX . setacl INBOX user2 lrwstiekx . setacl box-a user2 lrwstiekx Now if we use telnet to log in as user2 and select "shared/user1", it will contain the same mails as "shared/user1/INBOX". The really strange thing is that "SELECT"-ing "shared/user1" succeeds only if it...
2009 Jan 15
2
get username of logged in user
Hello, can I anywhere get the name of the currently logged in user? I'm still implementing a custom ACL plugin (IMAP commands MYRIGHTS, GETACL, SETACL, DELETEACL), and for some functions (for example storing the current folder's ACL in combination with this username) I need to obtain the currently logged in IMAP user. Is this possible? If yes - how? Thanks in advance. Best regards Stefan -- SIEGNETZ.IT GmbH { w3o-services } Schneppenk...