similar to: acl_groups from LDAP issue

Well, you don't have postlogin scripts when running doveadm. Those are executed by *-login and usually execute the actual protocol handler. Try env ACL_GROUPS=whatever doveadm mailbox list -u test.user Aki > On 04 February 2019 at 14:39 Jakobus Sch?rz <wertstoffe at nurfuerspam.de> wrote: > > > Hi! > > I have some trouble with userdb, ldap an extrafields for

Hi there! I recognized that dovecot ignores users sieve-script. The global and the post-sieve-scripts are working, but users sievescript is ignored. You can see the sieve trace-files last lines ? 65:?? finishing match with result: not matched ? 65: jump if result is true ? 65:?? not jumping ? 65: jumping to line 67 ? 67: jumping to line 77 ????? ## Finished executing script 'global' ? ?

> Am 29.08.2019 um 11:30 schrieb R.N.S. via dovecot <dovecot at dovecot.org>: > > > >> Am 29.08.2019 um 11:23 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: >> >> >> On 29.8.2019 12.18, R.N.S. via dovecot wrote: >>> >>>> Am 28.08.2019 um 20:02 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>:

Hi, I found a 9 year old thread (https://www.dovecot.org/list/dovecot/2010-October/054407.html) concerning acl_groups in OpenLDAP. In this thread someone asked, if it is possible to provide ACLs as multi value in OpenLDAP. I know that Dovecot expects acl_groups as a comma separated list, so currently I do this with a single value. Did the code change a little bit and accepts multi values now?

On 29.8.2019 12.30, R.N.S. via dovecot wrote: > >> Am 29.08.2019 um 11:23 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: >> >> >> On 29.8.2019 12.18, R.N.S. via dovecot wrote: >>>> Am 28.08.2019 um 20:02 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: >>>> >>>> >>>>> On 28/08/2019 21:01

On 29.8.2019 12.18, R.N.S. via dovecot wrote: > >> Am 28.08.2019 um 20:02 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: >> >> >>> On 28/08/2019 21:01 R.N.S. via dovecot <dovecot at dovecot.org> wrote: >>> >>> >>>> Am 28.08.2019 um 19:46 schrieb Jakobus Sch?rz via dovecot <dovecot at dovecot.org>:

Hi, Is there some kind of way to get acl_groups out of LDAP without having to maintain an entry with a list of groups 'a,b,c' and so on? Our groups have a list of 'member' attributes with CNs pointing at users. Ideally there would be a way to look this up directly. Alternately I could perhaps use an OpenLDAP overlay to show 'group' attributes for each user's ldap

And can you provide dovecot --version too, please. Aki > On 25 July 2018 at 09:18 Aki Tuomi <aki.tuomi at dovecot.fi> wrote: > > > Hi! > > Which debian release is this? > > Aki > > > On 25 July 2018 at 05:18 Jakobus Sch?rz <jakobus.schuerz at ebcont.com> wrote: > > > > > > Hi There! > > > > I run into this problem

Hi, I use a post login script for imap, to fetch acl groups from LDAP. Because Dovecot can only deal with a single value, which must be a comma seperated list of groups, I decided to use a post login script do deal with multi values in LDAP: This looks like this in LDAP: rnsMSACLGroup: admin rnsMSACLGroup: automx rnsMSACLGroup: amavis rnsMSACLGroup: postfix rnsMSACLGroup: dovecot rnsMSACLGroup:

> Am 28.08.2019 um 20:02 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: > > >> On 28/08/2019 21:01 R.N.S. via dovecot <dovecot at dovecot.org> wrote: >> >> >>> Am 28.08.2019 um 19:46 schrieb Jakobus Sch?rz via dovecot <dovecot at dovecot.org>: >>> >>> I think, i had the same problem as you. >>>

> Am 29.08.2019 um 11:23 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: > > > On 29.8.2019 12.18, R.N.S. via dovecot wrote: >> >>> Am 28.08.2019 um 20:02 schrieb Aki Tuomi via dovecot <dovecot at dovecot.org>: >>> >>> >>>> On 28/08/2019 21:01 R.N.S. via dovecot <dovecot at dovecot.org> wrote: >>>>

Op 7-11-2019 om 13:30 schreef Jakobus Sch?rz via dovecot: > Hi there! > > I recognized that dovecot ignores users sieve-script. The global and the > post-sieve-scripts are working, but users sievescript is ignored. > > You can see the sieve trace-files last lines > > ? 65:?? finishing match with result: not matched > ? 65: jump if result is true > ? 65:?? not

So the core file is not very useful... can you, instead, attach your doveconf -n and your virtual folder configurations and also gdb /usr/lib/dovecot/imap /path/to/core bt full Aki > On 25 July 2018 at 09:55 Jakobus Sch?rz <jakobus.schuerz at ebcont.com> wrote: > > > Hi Aki! > > This is debian buster, but a self-compiled dovecot from git! > >

Hi list, I have a question on auth caching in 2.2.18. I am using acl_groups for a master user, appended in a static userdb file # snip ############################### master at uma:{SHA}XXXX=::::::userdb_acl_groups=umareadmaster allow_nets=127.0.0.1 # snap ############################### and use this group in a global ACL file. I discovered this only works on first NOT-cached login

> On 28/08/2019 21:01 R.N.S. via dovecot <dovecot at dovecot.org> wrote: > > > > Am 28.08.2019 um 19:46 schrieb Jakobus Sch?rz via dovecot <dovecot at dovecot.org>: > > > > I think, i had the same problem as you. > > > > When dovecot runs lmtp, no user is logged in, so there is no user from > > which you can get groups. So i think, my

Hi There! I run into this problem with virtual Mailboxes on release-2.3.2 (and also in master and in older versions of dovecot) I added the core-file. Jul 25 04:11:29 aldebaran dovecot[10573]: imap(jakob)<11292><rg2GZclxHaPAqADc>: Panic: Leaked view for index /var/lib/dovecot/db/indexes/Maildir/jakob/&ANY-BB/dovecot.index: Opened in index-storage.c:338 Jul 25 04:11:29

hi timo, I checked out the commit causing this. its this one: http://hg.dovecot.org/dovecot-2.2/diff/5e445c659f89/src/auth/auth-request.c#l1.32 if I move this block back as it was. everything is fine diff -r a46620d6e0ff -r 5e445c659f89 src/auth/auth-request.c --- a/src/auth/auth-request.c Tue May 05 13:35:52 2015 +0300 +++ b/src/auth/auth-request.c Tue May 05 14:16:31 2015 +0300 @@ -618,30

From the wiki: ACL groups support works by returning a comma-separated acl_groups extra field <http://wiki2.dovecot.org/UserDatabase/ExtraFields> from userdb, which contains all the groups the user belongs to. User's UNIX groups have no effect on ACLs (you can "enable" them by using a special post-login script <http://wiki2.dovecot.org/PostLoginScripting>).

Hi! Was looking at your config and I am puzzled why you are adding ? mailbox INBOX/Archives { ??? auto = no ??? special_use = \Archive ? } under namespace 'Synoptic'? Do you actually have a virtual folder config for all those folders? You can't just "move" folders into a namespace by declaring them there, those become Synoptic/INBOX/Archives, and require a dovecot-virtual

Hi, Simple Scenario: Shared namespace and a specific UNIX group should have access to it. System is Debian lenny (stable). # cat /etc/dovecot/dovecot.conf [...] namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared } mail_executable = /usr/local/sbin/dovecot-imap-fix.sh mail_drop_priv_before_exec = no #just to make sure [...] # dpkg -l | grep dovecot ii