How to force remove all delegates for user?

[kjakkanen]

Hi,

We have a problem with a few users who have enabled delegation using Scalix 10 for some persons having scandic chars in their display name. Now that we are running Scalix 11.0.4 it doesn't recognise the "old" delegate names and displays them with just "".

The problem is that I cannot delete these stale entries, it just tells me to go and cry to the server admin. I'd really need to get this fixed so any help appreciated!

KR;
Kimmo

[mikethebike]

Kimmo,

you could go to tyhe user's "g" directory (omshowu -n "user name" -f |grep "User Folder")
then
tfbrowse -i *3d

that should show the delegates.
If there are no other autoactions, you could remove the *3d file. If there are other actions, you may need to edit that file

tfbrowse -i *3d > /tmp/kimmo.file

vi /tmp/kimmo.file

each record starts with "AA_NO"

so you can remove any invalid records, up to the next "AA_NO".

save the file, then use

tfbrowse -g -i /tmp/kimmo.file -o <original file location>/000003d

Mick

[kjakkanen]

Hi Mick!

Thanks for your quick reply, but when I go to the user directory as instructed, there is no *3d file at all? Also the "tfbrowse -i *3d" just shows empty:
---
HEADER (DN) 1 0 2 1002 0x0 0x0 0 0x0 0x0 0x2
---

Still SWA reports some delegates defined, along with the empty"" lines???

Thanks,
Kimmo

[kjakkanen]

CORRECTION: There IS a file called 000003d but the tfbrowse listing still is empty!

I tried removing this file but SWA still shows the delegates just the same (is it caching somewhere or how)?

Thanks,
Kimmo

[mikethebike]

Has the user logged out and back in again since you delete dthe 3d file?
Has the user delegated just the calendar, or has he given those users access to other folders?
You can remove access to folders by removint the *.acl files.

If there are any acl files in the "g" directory, use "strings *acl" to see if the bad users are there.

Mick

[kjakkanen]

Yes - with both SWA and Outlook. Still the same delegates are listed, and the *3d file did not recreate on the server (can that make any trouble)?

Just the calendar is delegated.

Thanks,
Kimmo

[kjakkanen]

The strings cmd listed all four delegates that I'd like to get rid of, it looks OK to me (has a long line with 0000..... before each of them) - could I somehow just delete the ACLs?

-Kimmo

[mikethebike]

Kimmo,

yes, you could just delete the acl files.

Mick

[kjakkanen]

Tried that too - but no help. I'm thinking the only way left is to re-create the account on the Scalix server (dump data, delete, create new, import). If any other suggestions exist I will be grateful!

KR;
Kimmo

[Richard Hall]

Hi Kimmo,

The list of additional mailbox names that SWA uses is kept in the '000002l' (that's 2 el, not 2 one) in the user's g-dir.
It's a TF so you can see display its contents using tfbrowse.

If you delete this file then no additional maiboxes will be displayed (and they can be recreated if necessary by the user).

Cheers - Richard

[kjakkanen]

Hi Richard,

Thanks for your reply - unfortunately there is no such file present in the user folder, this is a list of all files there exists:
---
-rw-rw---- 1 scalix scalix 8.0M Oct 18 14:03 0000001
-rw-rw---- 1 scalix scalix 35K Oct 18 12:00 0000002
-rw-rw---- 1 scalix scalix 757K Oct 18 12:00 0000003
-rw-rw---- 1 scalix scalix 18K Oct 18 12:25 0000004
-rw-rw---- 1 scalix scalix 4.0K Oct 17 16:12 0000004.acl
-rw-rw---- 1 scalix scalix 3.0K Apr 22 01:29 0000005
-rw-rw---- 1 scalix scalix 198 Oct 18 12:25 000002g
-rw-rw---- 1 scalix scalix 0 Oct 13 2006 000002g.lck
-rw-rw---- 1 scalix scalix 353 Oct 17 16:12 000002k
-rw-rw---- 1 scalix scalix 0 Feb 5 2007 000002k.lck
-rw-rw---- 1 scalix scalix 704 Oct 17 15:45 000002m
-rw-rw---- 1 scalix scalix 246 Oct 17 13:25 000002n
-rw-rw---- 1 scalix scalix 0 Oct 13 2006 000002n.lck
-rw-rw---- 1 scalix scalix 1.3K Oct 18 08:06 000002o
-rw-rw---- 1 scalix scalix 142K Oct 18 14:03 000002q
-rw-rw---- 1 scalix scalix 1.6K Oct 16 08:00 000003g.501
-rw-rw---- 1 scalix scalix 53 Mar 23 2007 000003v.1
-rw-rw---- 1 scalix scalix 0 Oct 13 2006 000003v.1.lck
-rw-rw---- 1 scalix scalix 0 Nov 2 2006 00000fk
-rw-rw---- 1 scalix scalix 13K Oct 18 14:03 00000v8
drwxrwxr-x 2 scalix scalix 4.0K Oct 17 16:12 00000v8.ofs
drwxrwx--- 2 55019 scalix 4.0K Oct 17 10:01 imap-cache
---

Still the delegates are most likely coming from somewhere?

Thanks for the help,
Kimmo

[mikethebike]

Hi Kimmo,

you should remove that 000004.acl file, if that does not work, I think you are correct deleting the mailbox and recreating may be the quickest option (there is another area ~sys/acl, but don't mess with the files there unless you want to be busy for the next month.....from experience )

Mick

[Richard Hall]

Hi Kimmo,

I think I must have misunderstood what your problem was... I thought it was to do with the 'Add Additional Mailboxes' feature in SWA.

But is the 'Edit Delegates' feature in SWA, right?

In that case it is the '000002k' file that keeps a list of the user's delegates. Deleting this file will mean that these bad names will no longer be displayed as delegates of that user, however the Calendar permissions will still be present but that probably doesn't matter as the old name will not match anything (these folder perms are held in a file in ~/acl/folder directory).

Cheers - Richard

[kjakkanen]

Geniouses you two! It works now! Thanks a million!!!

-Kimmo