limiting who can send to a group

[schmoe90]

Did you restart the Service Router and Local Delivery? omexeccda? What does the bounce message say?

[kabalah]

sorry, i'm headed out of town, but i did do an omexeccda. I'll pick this up again this friday the 2nd.....or maybe the following monday.
jim

[kabalah]

ok, i've setup a testpdl as follows:

scalix:~ # omshowpdl -l testpdl
Dist List Name : TestPdl/CN=TestPdl
MailNode : scalix
Internet Address : "TestPdl" <TestPdl@xxx.com>

scalix:~ # omshowpdln -l testpdl
Richard /scalix/CN=Richard
testuser /scalix/CN=testuser
James /scalix/CN=James
Michael /scalix/CN=Michael
George /scalix/CN=George

scalix:~ # omshowaci -l testpdl
George /scalix/CN=George read

Scalix Administrators config modify read remove
Local Users none
Default none

so in this config, richard, james and michael have no problem sending to the pdl as they are scalix admins. testuser has no permission so read, so they cannot send. but george does have permission to read, and he still cannot send. how do i find out why george is having this problem?

also, george has no problems using the pdl from webmail, it's only on outlook it seems to be the problem.

i have upgraded the testuser to full capabilities, and created an account on a pc using the outlook connector and outlook and without read caps they cannot send to the pdl, and with read caps they can.
so i'm thinking there is something peculiar about georges' account.
jim

[kabalah]

I don't suppose there has been anyone with similar problems out there.....I'm still having this problem with my everyone group.
jim

[kabalah]

i have discovered more info on this anomaly, it seems that my users can use webmail with no problem being able to send to the pdl, and if they use outlook and choose the TO: from the address book it also works. It does not work if they directly type in the testpdl@address.com into the TO: field in outlook. does this help in finding where the problem is?
it looks as though i'm getting the same result that started the thread, my mail is headed out the internet gateway instead of being delivered locally as it should be....is this a bug yet?
jim

[jangi]

Yes, there is a bug that may apply here. Bugzilla seems to be having issues again, or I'd post the url.

Basically, scalix routes the outgoing email of anyone using the outlook connector WITH smartcache through sendmail, whether it's local or not. Once you restrict a PDL using an ACI, ldapmapper can't see it either, which is what sendmail uses to verify local scalix addresses. See my other post here: http://www.scalix.com/forums/viewtopic.php?f=2&t=12730

[kabalah]

how can i test the ldapmapper.cfg file? is there a log file i can inspect for results of the change?
btw, thanks for replying, i was feeling lost with this problem.
jim

[jangi]

As in the other post, before making the change the command:
sendmail -bv pdladdress@domain.com
should fail. After the change, restart ldapmapper:
service ldapmapper restart
then test with the same command.