Hi,
I have a Zimbra 8.7.1 setup (upgraded from 8.0) with the following 5 servers:
- ldap
- mbox1
- mbox2
- mta
- proxy
zextras 2.4.2
I had problems with delegated admins - couldn't edit accounts.
Long story short:
- reset delegation settings
- add account test1 on mbox1
zxsuite admin getDelegationSettings is ok on mbox2, nothing displayed on mbox1
zmmailboxdctl restart on mbox1 -> zxsuite admin getDelegationSettings is ok on mbox1 and on mbox2
Edit account that is hosted on mbox1 - everything OK
Edit account that is hosted on mbox2 - permission denied (trying to change first name, for example)
- add account test on mbox2
zxsuite admin getDelegationSettings is ok on mbox2, nothing displayed on mbox1
zmmailboxdctl restart on mbox1 -> zxsuite admin getDelegationSettings is ok on mbox1 and on mbox2
Edit account that is hosted on mbox1 - permission denied (trying to change first name, for example)
Edit account that is hosted on mbox2 - everything OK
* my global admin account is hosted on mbox2.
So it seems that a delegated admin can only edit accounts that are hosted on the same mbox as the delegated admin.
Anyone has any ideea why this is happening? On Zimbra 8.0 with zextras 2.0.1 (i think, can't tell for sure that this was the version) everything was OK.
Thank you!