For OPS we want to use only 1 place where we store authentication and authorization information, this will be LDAP. Our IMAP server, Courier-IMAP can be configured to use LDAP for authentication. Courier-IMAP uses e-mail addresses from LDAP to authenticate, but to make loging in easier it appends a default e-mail extension to the username used, like: login name: "bastiaan", Courier-IMAP appends "@linops01.func.nl", resulting in "bastiaan@linops01.func.nl". But Courier-IMAP checks if the login name already is an e-mail address, so loging in with "bastiaan@linops01.func.nl" would work too. This is a problem as the ACLs for the project mail folders are set for "bastiaan" and not "bastiaan@linops01.func.nl", so using the e-mail address as login won't show the shared project folders.
The settings for Courier-IMAP with LDAP authentication can be changed and we could set ACL for e-mail address instead of uid, for now we will just live with the problem.
--
BastiaanGrutters - 10 Nov 2005