Exchange-ACL with LDAP

strat has asked for the wisdom of the Perl Monks concerning the following question:

Hello, via Net::LDAP, I create some email-distributionlists in MsExchange 5.5. This all works perfectly.
The Problem I've got is: how can I allow only certain exchange-users to post messages to this distributionlist. The problem is that I have to do that under Solaris, not under Windows; so I can't use CDO and the like.
Do you know a way how I can solve this?

Best regards and thanks in advance,
perl -e "print a|r,p|d=>b|p=>chr 3**2 .7=>t and t"

Comment on Exchange-ACL with LDAP Download Code

Replies are listed 'Best First'.
Re: Exchange-ACL with LDAP by scottstef (Curate) on Dec 06, 2001 at 19:41 UTC
On our directory we have an allowed broadcaster's attribute: so I can do a `if ($action eq "add"){$ldap -> modify ($dn, add => {allowed_broadcaste +r => $address_to_be_added}) or die "Ya screwed up again!";` [download] You should have an attribute that you can add/modify so it will only allow certain people can post. You will then need to modify it on the exchange server. HTH- if it doesn't please show some code and a little more of a description where you are getting stuck. "The social dynamics of the net are a direct consequence of the fact that nobody has yet developed a Remote Strangulation Protocol." -- Larry Wall	[reply] [d/l]
Re: Re: Exchange-ACL with LDAP by strat (Canon) on Dec 10, 2001 at 19:12 UTC
Thank you very much; I'll do it your way. Best regards, `perl -e "print a\|r,p\|d=>b\|p=>chr 3**2 .7=>t and t"`	[reply] [d/l]
Re: Exchange-ACL with LDAP by strat (Canon) on Dec 18, 2001 at 17:03 UTC
Now I've found another solution: An LDAP object in Exchange may have the following multivalued attribute: Auth-Orig If you put a senders dn here, you can allow this sender to post to that distribution list. EG: dn: cn=$dlName,cn=$server,o=$domain objectClass: groupOfNames objectClass: person objectClass: Top rdn: $dlName cn: $dlName distinguishedName: cn=$dlName,cn=$anything,ou=$server,o=$domain Hide-From-Address-Book: FALSE rfc822Mailbox: $email@$server.$domain.com mail: $email2@$server.$domain.com name: Strat Mailinglist (simpl-name) Hide-DL-Membership: FALSE uid: $dlName OOF-Reply-To-Originator: FALSE Report-To-Originator: FALSE Report-To-Owner: FALSE Auth-Orig: cn=$anyCn1,cn=Recipients,ou=$server,o=$domain' Auth-Orig: cn=$anyCn2,cn=Recipients,ou=$server,o=$domain' Auth-Orig: cn=$anyCn3,cn=Recipients,ou=$server,o=$domain' [download] $server, $domain and so on were just replaced by me for not to have to print real data ;-) Best regards, `perl -e "print a\|r,p\|d=>b\|p=>chr 3**2 .7=>t and t"`	[reply] [d/l] [select]


Perl: the Markov chain saw
	PerlMonks