Using the Sharing Domain Feature
Knowledge Base > Documentation > Using the Sharing Domain Feature
By Liutauras Adomaitis on September 20, 2017

Group Managers who have multiple domains registered with Kolab Now often ask if they can keep some of their users separate from other users, but not strictly divided by the email address domain name.

Let’s imagine a Group Manager account with kolab.org and kolab.io registered; Kolab Groupware community contributors are supposed to have @kolab.org email addresses, but we don’t give them out lightly (they’re a well-earned badge of honor). Demo accounts are supposed to be created as @kolab.io email addresses, but we would still like the entire group to be able to share content with one another (such as the shared folders with kolab.org mailing list archives, roadmap documents, marketing collateral, etc.).

An administrator would create a new account, journalist@kolab.io, but set the sharing domain to kolab.org.

In more detail, Group Managers will find their Cockpit’s “Hosting” -> “Add New User” dialogue to contain two options;

  1. The first is the desired primary email address local part (what comes before the @), and a drop-down menu for the email address domain (what comes after the @),
  2. The second is a drop-down menu for the “Sharing Domain”.

What is it?

Our IMAP implementation, Cyrus IMAP, uses the domain part of the user’s login as an “authorization realm”. Since crossing the boundaries between authorization realms is prohibited, a user john@kolab.org could not share content with a user jane@kolab.io. However, if the sharing domain for the user with email address jane@kolab.io were set to kolab.org, the authorization realm in which Jane would land would be @kolab.org, thus enabling sharing between two users in the @kolab.org authorization realm (sharing domain).

Tags: Tags: , , , ,