Difference between revisions of "Ajcody-How-To-Setup-sendAsDistList-Right-And-Persona-For-A-Distribution-List"

m (Actual How To Setup A sendAsDistList Right and Persona For Internal Users Home Page)
m (Configuring The Primary User Account To Use The DL As A Persona)
Line 153: Line 153:
 
One can setup a Persona for the DL now also like you would for a user alias.  
 
One can setup a Persona for the DL now also like you would for a user alias.  
  
* See [[Ajcody-To-Setup-sendAs-Right-And-Persona-For-Internal-Users#Configuring_The_Primary_User_Account_To_Use_The_Alias_As_A_Persona|Configuring The Primary User Account To Use The Alias As A Persona]].  
+
* See [[Ajcody-How-To-Setup-sendAs-Right-And-Persona-For-Internal-Users#Configuring_The_Primary_User_Account_To_Use_The_Alias_As_A_Persona|Configuring The Primary User Account To Use The Alias As A Persona]].  
  
 
'''Possible Bug''' - Note, you might not have the option to adjust the Reply-To option to be the DL. This '''bug''' was true even after reloading the browser and also including the DL address in its zimbraPrefAllowAddressForDelegatedSender variable. The issue exposed here might just be that we don't populate the Reply-To drop down options with DL choices.
 
'''Possible Bug''' - Note, you might not have the option to adjust the Reply-To option to be the DL. This '''bug''' was true even after reloading the browser and also including the DL address in its zimbraPrefAllowAddressForDelegatedSender variable. The issue exposed here might just be that we don't populate the Reply-To drop down options with DL choices.

Revision as of 22:19, 23 November 2013

Admin Article

Article Information

This article applies to the following ZCS versions.

ZCS 8.0 Article ZCS 8.0


How To Setup A sendAsDistList Right and Persona For Internal Users


The following How-to only applies to ZCS 8 and greater

Actual How To Setup A sendAsDistList Right and Persona For Internal Users Home Page

Please see: Ajcody-How-To-Setup-sendAsDistList-Right-And-Persona-For-Internal-Users

Changes In ZCS8+ For zimbraAllowFromAddress and Persona's


Prior to ZCS 8, one would use the zimbraAllowFromAddress variable to allow one user the means to send as another user. This variable in ZCS 8+ only applies when setting the variable for external users now, it no longer allows internal users or distribution lists [DL's]. If you try to add an internal user or DL to zimbraAllowFromAddress, you'll see an error like:

 zmprov ma 11@test.com zimbraAllowFromAddress 12@test.com
ERROR: service.INVALID_REQUEST (invalid request: zimbraAllowFromAddress may not contain an internal account: 12@test.com)

With ZCS 8.0 and above, there is an upgrade script that will migrate internal users and DL's that are set in zimbraAllowFromAddress to become sendAs rights and also within the zimbraPrefAllowAddressForDelegatedSender variables. This is mentioned in the Release Notes and in the following bug:

  • "zimbraAllowFromAddress pref should exclude internal accounts"
    • http://bugzilla.zimbra.com/show_bug.cgi?id=66387
      • Please see Release Notes about doing this upgrade via the command : zmldapupgrade -b 66387
      • Any internal account or distribution list address listed in zimbraAllowFromAddress attribute is converted to a grant of sendAs (for account) or sendAsDistList (for DL) right from the named account or DL. The address is added to the zimbraPrefAllowAddressForDelegatedSender attribute of the granting account/DL.

Warning - Must Reload Browsers To See Changes When Changing Rights


When you make changes that effects the rights the account has, they will not automatically show up in the user's ZWC session. You must reload the browser session - either by doing a logout/login or by "refreshing" the browser. Refreshing the browser might require it's "Refresh" that it offers or by clicking in the URL field and hitting enter.

Left

Creating Initial Test Accounts


Login as the zimbra user:

su - zimbra

Create Three Test Accounts. Note, not all of these test account might be used for this particular wiki how-to :

[zimbra@]$ zmprov ca 1-sendas@test.com STRONG_PASSWORD
9c16e165-09f0-4155-92e6-59df3a9f4609

[zimbra@]$ zmprov ca 2-sendas@test.com STRONG_PASSWORD
8690ce69-d2e0-4ab0-83e8-040f88c290c3

[zimbra@]$ zmprov ca 3-sendOnBehalfOf@test.com STRONG_PASSWORD
deceeb15-ca0c-4868-9a6f-2f208ac36708

Create Initial Distribution List [DL]


Create A DL:

[zimbra@]$ zmprov cdl dl-sendas@test.com
8f337d75-74d0-4491-bb53-8e4a2c220423

Add Our Two Test Users To the DL:

[zimbra@]$ zmprov adlm dl-sendas@test.com 1-sendas@test.com

[zimbra@]$ zmprov adlm dl-sendas@test.com 2-sendas@test.com

Review the current DL configuration:

[zimbra@zcs804 ~]$ zmprov gdl dl-sendas@test.com
# distributionList dl-sendas@test.com memberCount=2
mail: dl-sendas@test.com
objectClass: zimbraDistributionList
objectClass: zimbraMailRecipient
uid: dl-sendas
zimbraCreateTimestamp: 20131123155642Z
zimbraId: 52ff50a5-12f6-4093-93ce-88f6f9c20153
zimbraMailAlias: dl-sendas@test.com
zimbraMailForwardingAddress: 1-sendas@test.com
zimbraMailForwardingAddress: 2-sendas@test.com
zimbraMailHost: zcs804.DOMAIN.com
zimbraMailStatus: enabled

members
1-sendas@test.com
2-sendas@test.com


Granting The sendAsDistList Right For One User To SendAs The DL Account


To grant a user [1-sendas@test.com] to send an email where the To field will be the DL email address [dl-sendas@test.com]:

[zimbra@]$ zmprov grr dl dl-sendas@test.com usr 1-sendas@test.com sendAsDistList

Review the DL configuration to confirm:

[zimbra@]$ zmprov gdl dl-sendas@test.com
# distributionList dl-sendas@test.com memberCount=2
mail: dl-sendas@test.com
objectClass: zimbraDistributionList
objectClass: zimbraMailRecipient
uid: dl-sendas
zimbraACE: 55a3d686-bd61-4608-a4a3-0027f5aee6ff usr sendAsDistList
zimbraCreateTimestamp: 20131123155642Z
zimbraId: 52ff50a5-12f6-4093-93ce-88f6f9c20153
zimbraMailAlias: dl-sendas@test.com
zimbraMailForwardingAddress: 1-sendas@test.com
zimbraMailForwardingAddress: 2-sendas@test.com
zimbraMailHost: zcs804.DOMAIN.com
zimbraMailStatus: enabled

members
1-sendas@test.com
2-sendas@test.com

Notice that there is now a zibraACE line that wasn't there when you initially setup the DL. The zimbraACE uses the zimbraId of the user being granted the right - in this case, the sendAsDistList right. You can confirm the zimbraId matches the user email that we granted the right to by doing:

[zimbra@]$ zmprov ga 55a3d686-bd61-4608-a4a3-0027f5aee6ff mail
# name 1-sendas@test.com
mail: 1-sendas@test.com
mail: 1-sendas-alias@test.com

And after reloading the ZWC browser session of the user [1-sendas@test.com] you should see the option for the DL [dl-sendas@test.com] in the From drop down when you compose a new email.

Left

Configuring The Primary User Account To Use The DL As A Persona


One can setup a Persona for the DL now also like you would for a user alias.

Possible Bug - Note, you might not have the option to adjust the Reply-To option to be the DL. This bug was true even after reloading the browser and also including the DL address in its zimbraPrefAllowAddressForDelegatedSender variable. The issue exposed here might just be that we don't populate the Reply-To drop down options with DL choices.

Set zimbraPrefAllowAddressForDelegatedSender in the DL configuration to include the DL address explicitly:

[zimbra@]$ zmprov mdl dl-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender dl-sendas@test.com

Confirm the zimbraPrefAllowAddressForDelegatedSender was set:

[zimbra@]$ $ zmprov gdl dl-sendas@test.com zimbraPrefAllowAddressForDelegatedSender
# distributionList dl-sendas@test.com memberCount=2
zimbraPrefAllowAddressForDelegatedSender: dl-sendas@test.com

members
1-sendas@test.com
2-sendas@test.com


Left


Notice in the above screen shot I did not have the DL as an option from the drop down in the Reply-To section but I was able to manually type in the address there and it stayed when I saved the persona.


Left


I sent two messages to see the behavior of this Reply-To situation and the difference between using the DL persona and if we just sent a message with the non-persona DL from the drop down box of the From field.

Screenshot of the received message sending via the persona DL, the message I sent also has a screen shot of the compose window of the message.


Left


Screenshot of the received message sending via the non-persona DL via the From drop down box, the message I sent also has a screen shot of the compose window of the message.


Left


Even if this is a bug, it doesn't seem to effect the functionality though. For the non-persona DL message I sent, a reply to that message still goes back to the DL [dl-sendas@test.com].

Granting The sendAsDistList Right To 1-sendas@ For An Alias Of A Distribution List - dl-sendas-alias@test.com


Create a DL alias:

[zimbra@]$ zmprov adla dl-sendas@test.com dl-sendas-alias@test.com

Our current DL's properties so far in our how-to here will show:

[zimbra@zcs804 ~]$ zmprov gdl dl-sendas@test.com
# distributionList dl-sendas@test.com memberCount=2
mail: dl-sendas@test.com
mail: dl-sendas-alias@test.com
objectClass: zimbraDistributionList
objectClass: zimbraMailRecipient
uid: dl-sendas
zimbraACE: 55a3d686-bd61-4608-a4a3-0027f5aee6ff usr sendAsDistList
zimbraCreateTimestamp: 20131123155642Z
zimbraId: 52ff50a5-12f6-4093-93ce-88f6f9c20153
zimbraMailAlias: dl-sendas@test.com
zimbraMailAlias: dl-sendas-alias@test.com
zimbraMailForwardingAddress: 1-sendas@test.com
zimbraMailForwardingAddress: 2-sendas@test.com
zimbraMailHost: zcs804.DOMAIN.com
zimbraMailStatus: enabled
zimbraPrefAllowAddressForDelegatedSender: dl-sendas@test.com

members
1-sendas@test.com
2-sendas@test.com

You'll notice the alias added in the line: mail: dl-sendas-alias@test.com .

Note also, that our prior steps in this how-to already :

  • Added 1-sendas@ to have sendAsDistList right for the DL.
    • zmprov grr dl dl-sendas@test.com usr 1-sendas@test.com sendAsDistList
    • This shows the zimbraId of the 1-sendas@ user:
      • zimbraACE: 55a3d686-bd61-4608-a4a3-0027f5aee6ff usr sendAsDistList
  • Added the zimbraPrefAllowAddressForDelegatedSender: dl-sendas@test.com value
  • zmprov mdl dl-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender dl-sendas@test.com

Let's add the DL alias to the zimbraPrefAllowAddressForDelegatedSender variable:

[zimbra@]$ zmprov mdl dl-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender dl-sendas-alias@test.com

Let's confirm both dl-sendas@test.com and dl-sendas-alias@test.com are true for zimbraPrefAllowAddressForDelegatedSender :

[zimbra@]$ zmprov gdl dl-sendas@test.com zimbraPrefAllowAddressForDelegatedSender
# distributionList dl-sendas@test.com memberCount=2
zimbraPrefAllowAddressForDelegatedSender: dl-sendas@test.com
zimbraPrefAllowAddressForDelegatedSender: dl-sendas-alias@test.com

members
1-sendas@test.com
2-sendas@test.com

Login to ZWC with the 1-sendas@test.com account or reload its current browser session and confirm you can use both dl-sendas@test.com and dl-sendas-alias@test.com.

Left

Note - in the screenshot above we had already setup a persona also for the DL use, it's the extra line there in the screen shot.

Only Seeing The Alias dl-sendas-alias@ For dl-sendas@ As An Option For 1-sendas@

Then you didn't not include all the addresses needed for the zimbraPrefAllowAddressForDelegatedSender value in the DL properties. You probably see something like:

[zimbra@]$ zmprov gdl dl-sendas@test.com zimbraPrefAllowAddressForDelegatedSender
# distributionList dl-sendas@test.com memberCount=2
zimbraPrefAllowAddressForDelegatedSender: dl-sendas-alias@test.com

members
1-sendas@test.com
2-sendas@test.com

And in the primary address for the DL to the zimbraPrefAllowAddressForDelegatedSender value. Remember to use the + sign.

[zimbra@]$ zmprov mdl dl-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender dl-sendas@test.com

Let's confirm both dl-sendas@test.com and dl-sendas-alias@test.com are true for zimbraPrefAllowAddressForDelegatedSender :

[zimbra@]$ zmprov gdl dl-sendas@test.com zimbraPrefAllowAddressForDelegatedSender
# distributionList dl-sendas@test.com memberCount=2
zimbraPrefAllowAddressForDelegatedSender: dl-sendas@test.com
zimbraPrefAllowAddressForDelegatedSender: dl-sendas-alias@test.com

members
1-sendas@test.com
2-sendas@test.com

Login to ZWC with the 1-sendas@test.com account or reload its current browser session and confirm you can use both dl-sendas@test.com and dl-sendas-alias@test.com.

Jump to: navigation, search