Re: The problem of implement virtual domain

From: Michael Fair (no email)
Date: Fri Jun 28 2002 - 15:20:19 EDT

Here's the virtual domain supported IMAP
namespace as I see it.


The only changes I can see here is the addition
of a second class of "user" folders under
the domain.tld heirarchies and being able to
in effect, chroot the heirarchy to the /domain.tld
heirarchy when a virtual domain user logs in.

I don't see that anything special needs to be done
for ACLs, quotas, partitions,or anything else.
They will continue to function in exactly the same
way they always have. So unless there is some other
special processing for the /user heirarchy that
I am unaware of, to cyrus for all intents and
purposes that I can forsee, cyrus only needs to
see the /domain.tld folders as special shared folders
that can have a meaningful "user" subtree to them.

About the only two forseeable changes beyond
heirarchy reorganization that I would see as
useful would be to allow longer partition
names so that there could be an one to one
mapping between partitions and domain names
and some ability to say "all users in this
domain" when setting ACLs (this might be
accomplished with a "groups" semantic on ACLs,
or having the ACL commands take @domain.dom in
place of a normal userid to mean all users in
that domain).

I've been thinking about this for some time,
but I don't have the same understanding of
the code base that Ken does so I might be
oversimplifying the problem.

-- Michael --

----- Original Message -----
From: "Henrique de Moraes Holschuh" <>
To: <>
Cc: "Ken Murchison" <>; "Michael Fair"
Sent: Friday, June 28, 2002 9:36 AM
Subject: Re: The problem of implement virtual domain

> On Fri, 28 Jun 2002, Igor Brezac wrote:
> > On Fri, 28 Jun 2002, Ken Murchison wrote:
> > > the various issues. One thing that comes to mind is how are you
> > > separating the mailboxes of the various domains? Do all domains share
> > > the same public mailboxes?
> Aha! I knew there was at least one thing I was not doing in the @dom.ain
> patch. I will have to think about this one.
> It is simple to actually fold the @dom.ain in the public mailboxes as
> but it will look quite bad to the users :(
> OTOH, multiple domains with a single pool of public [bulletinboard]
> mailboxes are something that could be useful, too. I guess I will simply
> leave that as a limitation of the patch when used as a virtual-domain
> facility (people might want to use '@domain' in the usernames for other
> reasons than virtual domains), and wait for Ken's full virtual domain
> solution.
> --
> "One disk to rule them all, One disk to find them. One disk to bring
> them all and in the darkness grind them. In the Land of Redmond
> where the shadows lie." -- The Silicon Valley Tarot
> Henrique Holschuh

Hosted Email Solutions

Invaluement Anti-Spam DNSBLs

Powered By FreeBSD   Powered By FreeBSD