General discussion on installation and configuration of SOGo

Text archives Help

[SOGo] Groups not decomposed

Chronological Thread 
  • From: "Ueli Leutwyler" ( ) < >
  • To:
  • Subject: [SOGo] Groups not decomposed
  • Date: Sat, 4 Aug 2018 17:56:27 +0200
  • Dmarc-filter: OpenDMARC Filter v1.2.0 5BBA01DE4FB7

Dear sogo community
I'm having a hard time with sogo groups and acl.
My environement is as follows:
sogo v 4.0.1
on debian 9

so far everything works great except groups. I need to be able to define groups I can then use for acl.

I can define acl for a single user. Works great.
I have a groups section in my config file as follows:

            // groups for acl
            type = ldap;
            id = staff_groups;
            canAuthenticate = YES;
            isAddressBook = YES;
            displayName = "Staff Groups";
            bindAsCurrentUser = NO;

            listRequiresDot = NO;

            hostname = "ldap://";;
            baseDN = "OU=Groups,,o=domains,dc=mail2,dc=bws-uster,dc=ch";
            bindDN = "cn=vmail,dc=mail2,dc=bws-uster,dc=ch";
            bindPassword = "*****";
            filter = "(enabledService=aclgroup)";
            scope = SUB;

            IDFieldName = uid;
            // value of UID field must be unique on whole server.
            UIDFieldName = uid;
            IMAPLoginFieldName = mail;
            CNFieldName = cn;

The group has a ldap entry as follows:

dn: cn=testgroup,ou=Groups,,o=domains,dc=mail2,dc=bws
objectClass: extensibleObject
objectClass: top
objectClass: groupOfNames
cn: testgroup
mail= ,ou=Users,,o=domains,d
enabledService: aclgroup

my users rdn is mail. The login field is uid. A user lookl like that:

mail= ,ou=Users,,o=domains,dc=ma
objectClass: inetOrgPerson
objectClass: mailUser
objectClass: shadowAccount
objectClass: amavisAccount
cn: Test User 1

sn: User 1
uid: test1
accountStatus: active
amavisLocal: TRUE
enabledService: mail
enabledService: deliver
enabledService: lda
enabledService: lmtp
enabledService: smtp
enabledService: smtpsecured
enabledService: pop3
enabledService: pop3secured
enabledService: pop3tls
enabledService: imap
enabledService: imapsecured
enabledService: imaptls
enabledService: managesieve
enabledService: managesievesecured
enabledService: sogo
enabledService: sieve
enabledService: sievesecured
enabledService: forward
enabledService: senderbcc
enabledService: recipientbcc
enabledService: internal
enabledService: lib-storage
enabledService: indexer-worker
enabledService: doveadm
enabledService: dsync
enabledService: shadowaddress
enabledService: displayedInGlobalAddressBook
givenName: Test
homeDirectory: /var/vmail/vmail1/
mailMessageStore: vmail1/
mailQuota: 10485760000
shadowLastChange: 0
storageBaseDirectory: /var/vmail

I can see the group in the Adressbook and can also choose it to define acl. Everything looks ok.
But the users within the group cannot access shared ressources.

Thanks for your help.


  • [SOGo] Groups not decomposed, Ueli Leutwyler, 08/04/2018

Archive powered by MHonArc 2.6.18.

Top of page