Searchfilter um Aliasadresse als Absender zu wählen

tobelger

Hi,
wir sind ein kleiner Unternehmensverbund und setzen bei uns Kopano Version 10 erfolgreich ein. Bisher funktioniert alles reibungslos. Wir haben Kopano an unser ActiveDirectory angebunden und uns dafür entschieden die WebApp bzw DeskApp als Mailclient einzusetzen.
Allerdings habe ich ein Problem in der ldap.cfg den Searchfilter so zu definieren, dass unsere Geschäftsführung auch die Aliasadressen als Absenderadresse nehmen kann. Derzeit wird die Mail im Spooler als nicht berechtigt zurück gewiesen. Die Zustellung an die Aliasmail klappt hingegen erfolgreich.
In anderen Beiträgen habe ich gelesen, dass man dies wohl über die Konfiguration des Searchfilters hinbekommen könnte. Den Hinweis die Prüfung im Spooler abzustellen finde ich derzeit nicht so überzeugend, wenn es eine Möglichkeit über die Searchfilter gäbe.
Kann mir einer von euch sagen wie der Searchfilter zu definieren ist, damit auch die Mailaliases akzeptiert werden?
Meine ldap.cfg sieht derzeit wie folgt aus:

# Use custom defined LDAP property mappings
# This is not a requirement for most environments but allows custom mappings of
# special LDAP properties to custom MAPI attributes
#!propmap /etc/kopano/ldap.propmap.cfg
ldap_user_search_filter = (kopanoAccount=1)
ldap_emailaddress_attribute = mail
ldap_emailaliases_attribute = kopanoAliases
#ldap_fullname_attribute = cn
ldap_isadmin_attribute = kopanoAdmin
#ldap_loginname_attribute = sAMAccountName
#ldap_nonactive_attribute = kopanoSharedStoreOnly
#ldap_password_attribute = userPassword
#ldap_user_unique_attribute = sAMAccountName

fbartels

Hi @tobelger,

this is an English speaking forum. Please translate your question into english for the benefit of other users of this forum.

Ps: “Kopano version 10” is the current development nightly (actually that has already moved on to version 11). This version is not really recommend for production grade installations. Instead you should use the official releases like for example Kopano One, which would also give you access to the official support channels.

tobelger

Hi @fbartels,
sorry yes of course, here in english.

we are a small Company and are using Kopano in Version 10 without issues. Our Kopano is connected to the Active Directory and we decided to use the WebApp and DeskApp as Client. Our problem is to define a Searchfilter so that our Management can send Mails with their Emailaliases.
If we try to send the mail as Aliasaddress the Spooler rejects the E-Mail. The error message says that isn’t allowed to send as this User or Group.
If you get an E-Mail addressed to Alias the Mail will be delivered successfully.
In other threads I read that I could disable the addressverificaton in the spooler.cfg. This is not a method prefered by us. One other Solution should be to define a Searchfilter to accept the Alias as valid sender.
So I am looking for the right Searchfiltersettings to send as alias with the alias addresses from Active Directory. Can someone help here, please?

Our ldap.cfg:

# Use custom defined LDAP property mappings
# This is not a requirement for most environments but allows custom mappings of
# special LDAP properties to custom MAPI attributes
#!propmap /etc/kopano/ldap.propmap.cfg
ldap_user_search_filter = (kopanoAccount=1)
ldap_emailaddress_attribute = mail
ldap_emailaliases_attribute = kopanoAliases
#ldap_fullname_attribute = cn
ldap_isadmin_attribute = kopanoAdmin
#ldap_loginname_attribute = sAMAccountName
#ldap_nonactive_attribute = kopanoSharedStoreOnly
#ldap_password_attribute = userPassword
#ldap_user_unique_attribute = sAMAccountName

tobelger

@fbartels yes of course, we want to buy a subscription if we decide to use Kopano as Groupware. But we are now still at pre-production-tests.
We’ve tested so far Scalix, Kolab and Kopano and decided to test Kopano in a productional enviroment with only two of our Users (Testuser). So we need a full functional System to prove that our recquirements are met.

tobelger

This post is deleted!

fbartels

@tobelger said in Searchfilter um Aliasadresse als Absender zu wählen:

So we need a full functional System to prove that our recquirements are met.

For evaluation purposes you can get a 30 day trial key from https://kopano.com/downloads-demo/. This would also make going into production easier since to go from nightly to release you would need to perform a downgrade otherwise.

The setting you are looking for is the ldap_object_search_filter (see https://stash.kopano.io/projects/KC/repos/kopanocore/browse/installer/linux/ldap.m4#422 for its default value and a bit of explanation). On ADS this defaults to anr which does not include any aliases, if you extend the filter with the alias attribute you will be able to send mails to aliases (after adding them to the “from” dropdown in WebApp).

tobelger

@fbartels
THX!!!
with your Links I was able to understand the Searchfilter.
The Solution was to change my ldap.cfg at line ldap_emailaliases_attribute = kopanoAliases toldap_emailaliases_attribute = otherMailbox like described in the postfix configuartion for ADS. The tag “kopanoAliases” only works with LDAP not with ADS.

P.S. i would say it can be marked as solved