Hide mail of different domains from each other

[Jarod]

Currently, SOGo displays every mail, which is hosted on server to everyone. I would like to hide email from different domains for each other, so that a member of domain1.de doesn't know, that domain2.de and domain3.de even exists. How can I do that?

[Jarod]

To clarify, only in the calendar sharing window, where you can add a new user.

[nebulon]

I believe that would be a SOGo app specific question. Authtication in the Cloudron package for SOGo is done via LDAP, so maybe double check the access controls for the app to ensure only user of those domains can login? We at Cloudron are not experts on app internals though, so maybe others who know SOGo better have more insights.

[jdaviescoates]

@nebulon said in Hide mail of different domains from each other:

Authtication in the Cloudron package for SOGo is done via LDAP, so maybe double check the access controls for the app to ensure only user of those domains can login?

@Jarod you may want to create some domain based groups and then limit the access to the relevant Sogo app to just the domain group you want

[Jarod]

@nebulon @jdaviescoates SOGo has no access control in Cloudron. It is configured to be used with all users, which owns a mailbox. I can only change dashboard visibility.

[jdaviescoates]

@Jarod ah, of course, and I guess just changing that probably wouldn't do it. Sorry I don't use Sogo so not sure. Sounds like possibly not possible

[Jarod]

@nebulon

I looked a bit into it and found the following feature request in the bug tracker, which got implemented.
https://bugs.sogo.nu//view.php?id=3685
https://github.com/Alinto/sogo/commit/d9943e559f42a7d122e9fa30d78579e9159538e4 (Docs commit)

It's adding a placeholder for the domain to the LDAP path. Currently, SOGo access LDAP via "ou=mailboxes,dc=cloudron".
Can you edit Cloudron LDAP so the for example under "ou=example1.com,ou=mailboxes,dc=cloudron" you can find the mailboxes of a specific domain as well? Then you could change the baseDN to "ou=%d,ou=mailboxes,dc=cloudron" and we would have full multi domain support with separation between the domains.

This is great, when you offer SOGo to different companies or different set of people. This way, they cannot see the others.

[nebulon]

This might be a useful feature, we have to look into this in more detail. I will move that to the feature request section as it requires improvements to the LDAP server itself.

[Jarod]

@nebulon Is there a possibility to pay 50€ or so to push this request? The possibility to use SOGo on a multi-tenant base is really the only thing keeping my stuck in Plesk.