give permissions to user for email account creation

[chandu]

Hi,

in zimbra, can we give provision to user to create email ids as per their requirement..for e.g in gmail, yahoo we can create our own email ID.

My requirement is as below :

Configure one more zimbra Admin web page for client to create email IDs with limited permission. The setup should be as below :

1. Whenever user want to create any email id, notification should go to mail admin for approval ...User can create only one email ID at a time.
2. User should get number of count of existing email IDs of their respective domain. ( We have to define maximum count of mailbox per domain so once they reach that threshold value they should not able to create IDs and notification should go to mail administartor )
2. User should get below options to create ID :
- Email ID
- First name and Last name
- Employee ID
3. By default mailbox size should be set 100 MB
4. Only specific person should have previlege to create ID.

So i just want to understand is it possible / recommended ? We have 2 domains right now..So how many email IDs we can create per domain...??
Is there any hard limit ?

Please suggest.

Thanks

[chandu]

Hi,

By mistake I have dropped this thread in installation section. Please move it to Administration section..I couldnt get the option to move it.

[brian]

In order to achieve all of your goals you would need to build a provisioning system outside of the ZCS system.

1. If you use an external system to provision accounts, we've added a new pending status for accounts that can be used to serve as a notification that a global admin would need to approve.

2. Assuming these are limited to domains you can set the ZCS attribute zimbraDomainMaxAccounts on the specified domain and the server will only allow that many accounts within the domain.

3. There is currently no ability within ZCS to force naming conventions for new accounts. You would need to accomplish this through an external provisioning system.

4. Account quotas can be limited by setting zimbraMailQuota on the account. Alternatively you can set this on a COS and set zimbraDomainDefaultCOSId on the specific domain. Any accounts created within that domain will inherit the COS.

5. In 5.0.x and earlier any domain admin or global admin will have permissions to issue a createAccount request. In 6.0.x you can assign fine grained access controls that dictate which admins can perform certain functions, including createAccount.

[chandu]

Hi Brian,

Thanks for your suggestions. specially for zimbraDomainMaxAccounts attribute..
In your post, for 1st four suggestions, i am thinking to configure secparte web page which will execute zimbra commands through script in backend....i dont want to change zimbra code...as in every upgrade i need to track of all changes ....
As you mentioned in 5th point..if we could get facility to give permissions for account creation in version 6 then it will be very benifical for us...

Thanks

[chandu]

Hi,

As mentioned above, i have setuip seperate web page for email id creation per domain which execute zimbra commans in backend when any request come. now i am facing probblem to display number of mailbox count on web page per domain....

I am trying to execute below mentioned command to get number of mailbox count per domain :


/opt/zimbra/bin/mysql zimbra -e "select CONCAT(count(*)) 'Total Account\=' from mailbox where comment like '%example.com%';"
and its displaying me the current mailbox count...but afte creating new accounts...its not getting update automatically....

when some one ACCESS that newly created account then only entry of the latest ID will get enter in mysql database..!!!

Is there any easy way to get this count / domain which wont incease load on server...???

As whenevr user will login into this webpage , they will see the count...so query should run within few sec without increasing server load...

Please suggesst...

Thanks

[brian]

You probably don't want to use mysql as the source of truth for number of accounts. When you create a new account the mailstore is not created until the first message arrives. Use the ldap directory as the source of truth for account numbers. You can use zmprov or and ldapsearch command.

zmprov -l gaa example.com | wc -l