Limiting accounts that can be created by domain admin

[felix]

Hi,

I'm currently investigating using zimbra for multiple domains, while each one will be managed by an individual domain admin. One thing I would like to be able to do however, is create a limit that can only be set by the Global Admin for the maximum number of accounts that can be created in a given domain by a domain admin.

Is this currently possible? I can't find anything in the LDAP schema suggesting a maximum number of accounts per domain...

Thanks!
-Felix

[kowell]

As far I know in OSS there is no way to this trough the admin UI to set this.
Maybe there is an atribute in LDAP that set this up
try searching about this command
zmprov mcf attr1 value 1, mcf modifies the LDAP config

[felix]

I can't find anything in the global configuration that would make this work - the closest thing to it is the ability to designate which attributes can be set by a domain admin (by setting it as a zimbraDomainAdminModifiableAttr).

However, nothing seems to exist to limit the number of accounts per domain. Ideally there would be a setting in the domain attributes where you could specify maximum accounts, aliases, resources, and distribution lists which would not be modifiable by domain admins. The reason I think this is such an important idea is that Zimbra licensing is based on the number of user accounts, and it would be great to be able to set up various domains with a cap on the number of these available.

[felix]

Still curious to hear if anyone else can comment on this, or whether this type of functionality is planned in any (near) future release...

[KevinH]

http://bugzilla.zimbra.com/show_bug.cgi?id=6121