[Users] zimbraAllowFromAddress and SMTP enforce

[Aaron Cayard-Roberts]

Hey Guy,

I don't have an 8.0 or 8.6 install to test but I've been using zmprov to update the zimbraAllowFromAddres for users without any issues on our production 8.7 servers:

zmprov ma user at domain.com zimbraAllowFromAddress user2 at domain2.com


-Aaron

----- On Jan 30, 2018, at 2:47 PM, Guy CARRÉ guycarre at free.fr wrote:

> Hello the list,
> 
> when using SMTP enforcing :
> https://wiki.zimbra.com/wiki/Enforcing_a_match_between_FROM_address_and_sasl_username_8.5
> you are not allow to send from another address with a MUA unless you have the
> zimbraAllowFromAddress set.
> 
> For exemple my account is john at domain_A.tld
> If I want to send from another internal address for example bob at domain_A.tld
> wich is not use I can put it
> as zimbraAllowFromAddress. But if the address is already in used we get an error
> message indicated that
> you can use an internal address.
> With the webmail this is not a problem because you can use delegation or ACL/ACE
> but with a MUA this is not possible
> because SMTP request for a ldap attribute like zimbraAllowFromAddress is used to
> match sender with the From address.
> 
> It was possible until 8.0.X to add an internal address in the
> zimbraAllowFromAddres but since 8.6 it is impossible
> (with 7071 or zmprov ).
> 
> So my question is simple how to you handle this ? On my side I use ldapmodify to
> add internal address in the zimbraAllowFromAddress
> 
>  Regards,
> 
> --
>  ___________________________________
> /                                   \
> /-------------------------------------\
>|  Guy CARRÉ                          |
>|  *************                      |
>|  PostMaster - WikiMaster - SysAdmin |
>|                                     |
>| "Free Your Mind. Think Open Source" |
>|  april.org                          |
>|                                     |
> |_____________________________________|

-- 
Aaron Cayard-Roberts
System and Security Administrator
Information Technology Services
Earlham College
801 National Road West
Richmond, IN 47374
Phone: 765-983-1851