How to hide PDLs from external users
This can be done as follows:
omaddaci -l "PDL Name" -g default -c "-read"
This will remove READ access from anybody other than named users,
administrators or local users. However, by default, SWA does not use
LDAP authentication when accessing the SYSTEM directory and so is
regarded as an external user by the LDAP server. To work around this,
you need to configure SWA to use an authenticated bind for SYSTEM. This
requires editing partner.xml in release 9 and swa.properties in release 10.
For the ldap source in partner.xml which is identified as:
<ldapSource>
<type>system</type>
replace:
<authtype>none</authtype>
with
<authtype>simple</authtype>
and add a line underneath that which reads:
<binddn>rfc822mailbox=%u</binddn>
For the ldap source in swa.properties which is identified as:
swa.ldap.1.type=system
look for:
swa.ldap.1.authType=none
change that to simple and just below add
swa.ldap.1.bindDN=rfc822mailbox=%u
You will need to restart tomcat for this change to be picked up.
You will then see that SWA users can access the PDL but external users
will not be able to mail to it. They should receive a message similar to:
Message could not be delivered to the following recipient:
All.Tardis@tardis.uk.scalix.com
because: Recipient name not found at destination
Regards,
Don