kopano-admin.8 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891
  1. '\" t
  2. .\" Title: kopano-admin
  3. .\" Author: [see the "Author" section]
  4. .\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
  5. .\" Date: November 2016
  6. .\" Manual: Kopano Core user reference
  7. .\" Source: Kopano 8
  8. .\" Language: English
  9. .\"
  10. .TH "KOPANO\-ADMIN" "8" "November 2016" "Kopano 8" "Kopano Core user reference"
  11. .\" -----------------------------------------------------------------
  12. .\" * Define some portability stuff
  13. .\" -----------------------------------------------------------------
  14. .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  15. .\" http://bugs.debian.org/507673
  16. .\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
  17. .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  18. .ie \n(.g .ds Aq \(aq
  19. .el .ds Aq '
  20. .\" -----------------------------------------------------------------
  21. .\" * set default formatting
  22. .\" -----------------------------------------------------------------
  23. .\" disable hyphenation
  24. .nh
  25. .\" disable justification (adjust text to left margin only)
  26. .ad l
  27. .\" -----------------------------------------------------------------
  28. .\" * MAIN CONTENT STARTS HERE *
  29. .\" -----------------------------------------------------------------
  30. .SH "NAME"
  31. kopano-admin \- Manages Kopano users and stores\&.
  32. .SH "SYNOPSIS"
  33. .HP \w'\fBkopano\-admin\fR\ 'u
  34. \fBkopano\-admin\fR \fIACTION\fR [\fIOPTION\fR...]
  35. .SH "DESCRIPTION"
  36. .PP
  37. This tool can be used to create the public store and to add, update and remove users from Kopano\&. The storage server must be running for
  38. \fBkopano\-admin\fR
  39. to work\&.
  40. .PP
  41. If no action is given, a listing of the possible parameters is printed\&. When invalid actions or not enough options for an action are given, an error message is printed\&.
  42. .PP
  43. When using LDAP as the users source, create, modify and delete actions are done in the LDAP tree and not using the kopano\-admin tool\&. Please see the
  44. \fBEXTERNAL USERS\fR()
  45. section for more information\&.
  46. .SH "ACTIONS"
  47. .PP
  48. kopano\-admin needs an action command with the appropriate options\&. Valid actions are:
  49. .PP
  50. \fB\-s\fR
  51. .RS 4
  52. Create a public store\&. No other options are needed\&. Only one public store can be created\&. Successive calls will fail\&.
  53. .RE
  54. .PP
  55. \fB\-c\fR \fIusername\fR
  56. .RS 4
  57. Create a new user,
  58. \fI\-p\fR,
  59. \fI\-f\fR
  60. and
  61. \fI\-e\fR
  62. options are required,
  63. \fI\-a\fR
  64. and
  65. \fI\-n\fR
  66. parameters are optional\&. To set a password using a password prompt, use the
  67. \fI\-P\fR
  68. option in stead of
  69. \fI\-p\fR\&.
  70. .RE
  71. .PP
  72. \fB\-d\fR \fIusername\fR
  73. .RS 4
  74. Delete a user\&. No other options are needed\&. The deleted store of the user will be marked as orphan store and can be restored with
  75. \fI\-\-hook\-store\fR
  76. .RE
  77. .PP
  78. \fB\-u\fR \fIusername\fR
  79. .RS 4
  80. Update user information\&. Valid parameters are:
  81. \fI[\-p|\-P]\fR,
  82. \fI\-f\fR,
  83. \fI\-e\fR,
  84. \fI\-a\fR,
  85. \fI\-n\fR
  86. and
  87. \fI\-U\fR
  88. to update user information\&. Use:
  89. \fI\-\-qo\fR,
  90. \fI\-\-qw\fR,
  91. \fI\-\-qs\fR
  92. or
  93. \fI\-\-qh\fR
  94. to set quota levels\&. Use 0 with quota options to set as \*(Aqunlimited\*(Aq\&.
  95. .sp
  96. \fI\-\-enable\-feature\fR
  97. and
  98. \fI\-\-disable\-feature\fR
  99. to enable or disable specific features for users\&.
  100. .sp
  101. This action is also required for all options to control the autoaccept of meeting requests\&. See the
  102. \fI\-\-mr\-accept\fR,
  103. \fI\-\-mr\-decline\-conflict\fR
  104. and
  105. \fI\-\-mr\-decline\-recurring\fR
  106. options\&.
  107. .RE
  108. .PP
  109. \fB\-g\fR \fIgroupname\fR
  110. .RS 4
  111. Create a new group\&. Valid parameters are:
  112. \fI\-e\fR
  113. .RE
  114. .PP
  115. \fB\-\-update\-group\fR \fIgroupname\fR
  116. .RS 4
  117. Update group information\&. Valid parameters are:
  118. \fI\-e\fR
  119. .RE
  120. .PP
  121. \fB\-G\fR \fIgroupname\fR
  122. .RS 4
  123. Delete a group\&. No other options are needed\&.
  124. .RE
  125. .PP
  126. \fB\-b\fR \fIusername\fR
  127. .RS 4
  128. Add a user to a group\&. Use the
  129. \fI\-i\fR
  130. to set the groupname\&.
  131. .RE
  132. .PP
  133. \fB\-B\fR \fIusername\fR
  134. .RS 4
  135. Remove a user from a group\&. Use the
  136. \fI\-i\fR
  137. to set the groupname\&.
  138. .RE
  139. .PP
  140. \fB\-l\fR
  141. .RS 4
  142. List all users available in Kopano\&. When using an external user source, this action will implicitly synchronize all users in the external source, creating, updating and/or removing users and stores\&.
  143. .RE
  144. .PP
  145. \fB\-L\fR
  146. .RS 4
  147. List all groups available in Kopano\&. When using an external user source, this action will implicitly synchronize all groups in the external source, creating updating and/or removing groups and memberships\&.
  148. .RE
  149. .PP
  150. \fB\-\-list\-companies\fR
  151. .RS 4
  152. List all tenans available in Kopano\&. When using an external user source, this action will implicitly synchronize all tenants in the external source, creating updating and/or removing companies\&.
  153. .sp
  154. This option is only available in multi\-tenancy Kopano
  155. .RE
  156. .PP
  157. \fB\-\-details\fR \fIname\fR
  158. .RS 4
  159. Show all the details of a user, showing the fullname, e\-mailaddress, active state, administator state, group memberships and quota settings\&. Optionally use
  160. \fI\-\-type\fR
  161. to indicate for what kind of object the details are being requested\&.
  162. .sp
  163. Note: This function does not synchronize with the external user plugin\&. Thus changes from e\&.g\&. LDAP will not be set during this function\&.
  164. .RE
  165. .PP
  166. \fB\-\-type\fR \fItype\fR
  167. .RS 4
  168. Additional argument for
  169. \fI\-\-details\fR\&. The argument with this option indicates for what type of object the details are being requested\&. Allowed values are
  170. \fI\*(Aquser\*(Aq\fR,
  171. \fI\*(Aqgroup\*(Aq\fR
  172. or
  173. \fI\*(Aqcompany\*(Aq\fR
  174. When this option is not used, it defaults to
  175. \fI\*(Aquser\*(Aq\fR
  176. .RE
  177. .PP
  178. \fB\-\-create\-company\fR \fIcompanyname\fR
  179. .RS 4
  180. Create a new tenant space\&.
  181. .sp
  182. Use:
  183. \fI\-\-qo\fR,
  184. \fI\-\-qw\fR,
  185. \fI\-\-qs\fR,
  186. \fI\-\-qh\fR
  187. to set quota levels for the tenant\&.
  188. .sp
  189. Use:
  190. \fI\-\-udqo\fR,
  191. \fI\-\-udqw\fR,
  192. \fI\-\-udqs\fR,
  193. \fI\-\-udqh\fR
  194. to set the default quota levels for the users inside the tenant\&.
  195. .sp
  196. This option is only available in multi\-tenancy Kopano\&.
  197. .RE
  198. .PP
  199. \fB\-\-update\-company\fR \fIcompanyname\fR
  200. .RS 4
  201. Update an existing tenant space\&.
  202. .sp
  203. Use:
  204. \fI\-\-qo\fR,
  205. \fI\-\-qw\fR,
  206. \fI\-\-qs\fR,
  207. \fI\-\-qh\fR
  208. to set quota levels for the tenant\&.
  209. .sp
  210. Use:
  211. \fI\-\-udqo\fR,
  212. \fI\-\-udqw\fR,
  213. \fI\-\-udqs\fR,
  214. \fI\-\-udqh\fR
  215. to set the default quota levels for the users inside the \&.
  216. .sp
  217. This option is only available in multi\-tenancy Kopano\&.
  218. .RE
  219. .PP
  220. \fB\-\-delete\-company\fR \fIcompanyname\fR
  221. .RS 4
  222. Delete company space\&.
  223. .sp
  224. This option is only available in multi\-tenancy Kopano\&.
  225. .RE
  226. .PP
  227. \fB\-\-set\-system\-admin\fR \fIcompanyname\fR
  228. .RS 4
  229. Set system administrator for the tenant specified by
  230. \fI\-I\fR\&.
  231. .sp
  232. Please be aware that this option does not provide the user with administrator privileges\&. The system administrator is considered the main contact person for a company, it will for example be used as default sender for quota warning emails\&.
  233. .sp
  234. This option is only available in multi\-tenancy Kopano\&.
  235. .RE
  236. .PP
  237. \fB\-\-add\-to\-viewlist\fR \fIcompanyname\fR
  238. .RS 4
  239. Add tenant
  240. \fI\*(Aqcompanyname\*(Aq\fR
  241. to remote\-view list of company specified by
  242. \fI\-I\fR\&. After this command the
  243. \fI\*(Aqcompanyname\*(Aq\fR
  244. is capable of viewing all members of the company specified by
  245. \fI\-I\fR\&.
  246. .sp
  247. This option is only available in multi\-tenancy Kopano\&.
  248. .RE
  249. .PP
  250. \fB\-\-del\-from\-viewlist\fR \fIcompanyname\fR
  251. .RS 4
  252. Delete company
  253. \fI\*(Aqcompanyname\*(Aq\fR
  254. from remote\-view list of tenant specified by
  255. \fI\-I\fR\&. After this command the
  256. \fI\*(Aqcompanyname\*(Aq\fR
  257. is no longer capable of viewing all members of the tenant specified by
  258. \fI\-I\fR\&.
  259. .sp
  260. This option is only available in multi\-tenancy Kopano\&.
  261. .RE
  262. .PP
  263. \fB\-\-list\-view\fR
  264. .RS 4
  265. List all tenants in the remote\-view list of the tenant specified by
  266. \fI\-I\fR\&. The tenants in this list are able to view all members of the specified tenant in their Address Book\&.
  267. .sp
  268. This option is only available in multi\-tenancy Kopano\&.
  269. .RE
  270. .PP
  271. \fB\-\-add\-to\-adminlist\fR \fIusername\fR
  272. .RS 4
  273. Add user
  274. \fI\*(Aqusername\*(Aq\fR
  275. to remote\-admin list of tenant specified by
  276. \fI\-I\fR\&. This is the administrator list for remote administrators, as such it only manages administrators from a different tenant\&. Users who should be administrator over their own tenant are managed by updating (\fB\-u\fR) the user and specifying the
  277. \fB\-a\fR
  278. argument\&.
  279. .sp
  280. Users can only be administrator over a different company when they have also been granted view privileges, can be granted by using the
  281. \fB\-\-add\-to\-viewlist\fR\&.
  282. .sp
  283. This option is only available in multi\-tenancy Kopano\&.
  284. .RE
  285. .PP
  286. \fB\-\-del\-from\-adminlist\fR \fIusername\fR
  287. .RS 4
  288. Delete user
  289. \fI\*(Aqusername\*(Aq\fR
  290. from remote\-admin list of company specified by
  291. \fI\-I\fR\&. This is the administrator list for remote administrators, as such it only manages administrators from a different tenant\&. Users who should be administrator over their own tenant are managed by updating (\fB\-u\fR) the user and specifying the
  292. \fB\-a\fR
  293. argument\&.
  294. .sp
  295. This option is only available in multi\-tenancy Kopano\&.
  296. .RE
  297. .PP
  298. \fB\-\-list\-admin\fR
  299. .RS 4
  300. List all users in the remote\-admin list of the tenant specified by
  301. \fI\-I\fR\&. This is the administrator list for remote administrators, as such it only manages administrators from a different tenant\&. Users who should be administrator over their own tenant are managed by updating (\fB\-u\fR) the user and specifying the
  302. \fB\-a\fR
  303. argument\&.
  304. .sp
  305. Users can only be administrator over a different tenant when they have also been granted view privileges, can be granted by using the
  306. \fB\-\-add\-to\-viewlist\fR\&.
  307. .sp
  308. This option is only available in multi\-tenancy Kopano\&.
  309. .RE
  310. .PP
  311. \fB\-\-add\-userquota\-recipient\fR \fIuser\fR
  312. .RS 4
  313. Add
  314. \fI\*(Aquser\*(Aq\fR
  315. as recipient to userquota warning emails\&. You can optionally use
  316. \fI\-I\fR
  317. to set the tenant space to apply the recipient action on\&.
  318. .RE
  319. .PP
  320. \fB\-\-del\-userquota\-recipient\fR \fIuser\fR
  321. .RS 4
  322. Delete
  323. \fI\*(Aquser\*(Aq\fR
  324. as recipient to userquota warning emails\&. You can optionally use
  325. \fI\-I\fR
  326. to set the tenant space to apply the recipient action on\&.
  327. .RE
  328. .PP
  329. \fB\-\-list\-userquota\-recipients\fR
  330. .RS 4
  331. List all additional recipients for a userquota warning email\&. Use
  332. \fI\-I\fR
  333. to request the recipient list for a particular tenant space\&.
  334. .RE
  335. .PP
  336. \fB\-\-add\-companyquota\-recipient\fR \fIuser\fR
  337. .RS 4
  338. Add
  339. \fI\*(Aquser\*(Aq\fR
  340. as recipient to tenant quota warning emails\&. You can optionally use
  341. \fI\-I\fR
  342. to set the tenant space to apply the recipient action on\&.
  343. .RE
  344. .PP
  345. \fB\-\-del\-companyquota\-recipient\fR \fIuser\fR
  346. .RS 4
  347. Delete
  348. \fI\*(Aquser\*(Aq\fR
  349. as recipient to tenant quota warning emails\&. You can optionally use
  350. \fI\-I\fR
  351. to set the tenant space to apply the recipient action on\&.
  352. .RE
  353. .PP
  354. \fB\-\-list\-companyquota\-recipients\fR
  355. .RS 4
  356. List all additional recipients for a tenant quota warning email\&. Use
  357. \fI\-I\fR
  358. to request the recipient list for a particular tenant space
  359. .RE
  360. .PP
  361. \fB\-\-list\-sendas\fR \fIuser\fR
  362. .RS 4
  363. List all users who are able to directly send an email as
  364. \fIuser\fR\&. This has been set in the LDAP server, or with the
  365. \fB\-\-add\-sendas\fR
  366. command for Unix and DB plugins\&. Optionally use
  367. \fI\-\-type\fR
  368. to indicate for what kind of object the sendas details are being requested\&.
  369. .RE
  370. .PP
  371. \fB\-\-clear\-cache\fR
  372. .RS 4
  373. Clears the server\*(Aqs caches\&. All data cached inside the kopano\-server is cleared\&. Although this can never cause any data loss, it can affect the performance of your server, since any data requested after the cache is cleared needs to be re\-requested from the database or LDAP server\&. Normally this option is never needed; it is mostly used as a diagnostics tool\&.
  374. .sp
  375. Optionally use
  376. \fI\-\-clear\-cache=\fR
  377. to specify a set of purge options\&. The following options can be used:
  378. .RS 4
  379. 0x0000 Release no longer used memory back to the kernel
  380. .RE
  381. .RS 4
  382. 0x0001 Purge the quota cache
  383. .RE
  384. .RS 4
  385. 0x0002 Purge the quota default cache
  386. .RE
  387. .RS 4
  388. 0x0004 Purge the object cache
  389. .RE
  390. .RS 4
  391. 0x0008 Purge the store cache
  392. .RE
  393. .RS 4
  394. 0x0010 Purge the ACL cache
  395. .RE
  396. .RS 4
  397. 0x0020 Purge the cell cache
  398. .RE
  399. .RS 4
  400. 0x0040 Purge the index1 cache
  401. .RE
  402. .RS 4
  403. 0x0080 Purge the index2 cache
  404. .RE
  405. .RS 4
  406. 0x0100 Purge the indexproperty cache
  407. .RE
  408. .RS 4
  409. 0x0200 Purge the user object cache
  410. .RE
  411. .RS 4
  412. 0x0400 Purge the externid cache
  413. .RE
  414. .RS 4
  415. 0x0800 Purge the userdetails cache
  416. .RE
  417. .RS 4
  418. 0x1000 Purge the server cache
  419. .RE
  420. .RE
  421. .PP
  422. \fB\-\-purge\-softdelete\fR \fIdays\fR
  423. .RS 4
  424. Starts a softdelete purge on the server, removing all soft\-deleted items which have been deleted
  425. \fIdays\fR
  426. days ago, or earlier
  427. .RE
  428. .PP
  429. \fB\-\-purge\-deferred\fR
  430. .RS 4
  431. The server has an optimization in which changes to the tproperties table are not writted directly, but delayed for a more efficient write at a later time\&. The server auto\-purges these regularly\&. This command allows you to purge all changes pending\&. It may be useful to run this during low I/O load of your server (eg at night)\&.
  432. .RE
  433. .PP
  434. \fB\-\-list\-orphans\fR
  435. .RS 4
  436. When a user is removed, the store becomes orphaned\&. This option shows a list of stores that are not hooked to a user\&. You can use the
  437. \fB\-\-remove\-store\fR
  438. and
  439. \fB\-\-hook\-store\fR
  440. from this list\&.
  441. .RE
  442. .PP
  443. \fB\-\-hook\-store\fR \fIstore\-guid\fR
  444. .RS 4
  445. You can hook an orphaned store to an existing user, so you may access the store again\&. Use the
  446. \fB\-u\fR
  447. \fIusername\fR
  448. to specify the user to hook the store to\&.
  449. .sp
  450. You can copy an orphaned store to the public store\&. Use the
  451. \fB\-\-copyto\-public\fR
  452. to copy the store to the public folder named \*(AqAdmin/deleted stores\*(Aq\&. This folder is then only visible for users with Kopano admin privileges\&.
  453. .sp
  454. To hook a public store, use
  455. \fB\-\-type\fR
  456. group/company to influence the name type in the \-u switch\&.
  457. .sp
  458. To hook an archive store, use
  459. \fB\-\-type\fR
  460. \fIarchive\fR\&.
  461. .RE
  462. .PP
  463. \fB\-\-remove\-store\fR \fIstore\-guid\fR
  464. .RS 4
  465. Use this action to remove the store from the database\&. The store is actually just marked as deleted, so the softdelete system can remove the store from the database\&.
  466. .RE
  467. .PP
  468. \fB\-\-create\-store\fR \fIusername\fR
  469. .RS 4
  470. This action will create a store for a newly created user, and is normally called through the createuser script\&. If the
  471. \fB\-\-list\-orphans\fR
  472. action listed users without a store, you can create a new store for those users with this command\&.
  473. .RE
  474. .PP
  475. \fB\-\-unhook\-store\fR \fIusername\fR
  476. .RS 4
  477. You can unhook a store from a user, so you can remove the store and create a new one\&.
  478. .sp
  479. To unhook a public store, use the
  480. \fB\-\-type\fR
  481. group/company option to influence the name type in the
  482. \fIusername\fR
  483. argument\&. Use a company name with type company or \*(AqEveryone\*(Aq with type group to unhook the public\&.
  484. .sp
  485. To unhook an archive store, use
  486. \fB\-\-type\fR
  487. \fIarchive\fR\&.
  488. .RE
  489. .PP
  490. \fB\-\-force\-resync\fR \fIusernames\fR
  491. .RS 4
  492. You can force a resync of cached profiles when the data is out of sync\&. One or more usernames can be specified\&. If no usernames are given, all offline profiles can be resynced\&.
  493. .RE
  494. .PP
  495. \fB\-\-reset\-folder\-count\fR \fIusername\fR
  496. .RS 4
  497. Reset the counters on all folders in
  498. \fIusername\fR\*(Aqs store\&.
  499. .RE
  500. .PP
  501. \fB\-\-user\-count\fR
  502. .RS 4
  503. Shows an overview of user counts per type of user
  504. .RE
  505. .SH "OPTIONS"
  506. .PP
  507. The options used by actions are as follows:
  508. .PP
  509. \fB\-\-verbose\fR \fIlevel\fR
  510. .RS 4
  511. Set the verbosity level (0=critical, \&..., 6=debug)\&.
  512. .RE
  513. .PP
  514. \fB\-v\fR
  515. .RS 4
  516. Increases the verbosity level by one, up to the maximum of 6\&.
  517. .RE
  518. .PP
  519. \fB\-U\fR \fI\*(Aqnew username\*(Aq\fR
  520. .RS 4
  521. Use this parameter to rename a user\&. This option is only valid with the
  522. \fI\-u\fR
  523. update action\&.
  524. .RE
  525. .PP
  526. \fB\-p\fR \fIpassword\fR
  527. .RS 4
  528. Set password for a user\&. This option is only valid with the
  529. \fI\-c\fR
  530. create or
  531. \fI\-u\fR
  532. update action\&.
  533. .RE
  534. .PP
  535. \fB\-P\fR
  536. .RS 4
  537. Set password for a user\&. The password can be entered on the password prompt\&. The password will not be shown\&. This option is only valid with the
  538. \fI\-c\fR
  539. create or
  540. \fI\-u\fR
  541. update action\&.
  542. .RE
  543. .PP
  544. \fB\-f\fR \fI\*(Aqfull name\*(Aq\fR
  545. .RS 4
  546. Specify full user name\&. Use single quotes around the name to pass it as a single parameter\&. This option is only valid with the
  547. \fI\-c\fR
  548. create or
  549. \fI\-u\fR
  550. update action\&.
  551. .RE
  552. .PP
  553. \fB\-e\fR \fI\*(Aqemail address\*(Aq\fR
  554. .RS 4
  555. Specify the email address\&. This address will be used to set the \*(AqFrom\*(Aq email address in outgoing email messages\&. Use single quotes around the name to pass it as a single parameter\&. This option is only valid with the
  556. \fI\-c\fR
  557. create or
  558. \fI\-u\fR
  559. update action\&.
  560. .RE
  561. .PP
  562. \fB\-a\fR \fI[yes|y|1|2 / no|n|0]\fR
  563. .RS 4
  564. Set the user as administrator by passing \*(Aqyes\*(Aq\&. When passing \*(Aqno\*(Aq, administrator rights will be revoked from the user\&. This option is only valid with the
  565. \fI\-c\fR
  566. create or
  567. \fI\-u\fR
  568. update action\&.
  569. .sp
  570. It is also possible to pass 2 as administrator level, this will make the user a system administrator who can create/modify/delete companies\&.
  571. .RE
  572. .PP
  573. \fB\-n\fR \fI[yes|y|1 / no|n|0]\fR
  574. .RS 4
  575. Specify a non\-active user\&. This user cannot login, but email can be delivered, and the store can be opened by users with correct rights\&.
  576. .RE
  577. .PP
  578. \fB\-\-qo\fR \fI[yes|y|1 / no|n|0]\fR
  579. .RS 4
  580. Override the default server quota settings for this user\&. User specific quota levels will used\&. The default value of this option is \*(Aqno\*(Aq, always using server quota levels\&. This option is only valid with the
  581. \fI\-c\fR
  582. create or
  583. \fI\-u\fR
  584. update action\&.
  585. .RE
  586. .PP
  587. \fB\-\-qw\fR \fIvalue in Mb\fR
  588. .RS 4
  589. Set the warning quota level for a user\&. The user may receive a warning email when this level is reached\&. See
  590. \fBkopano-monitor\fR(8)
  591. for warning emails\&. This option is only valid with the
  592. \fI\-c\fR
  593. create or
  594. \fI\-u\fR
  595. update action\&.
  596. .RE
  597. .PP
  598. \fB\-\-qs\fR \fIvalue in Mb\fR
  599. .RS 4
  600. Set the soft quota level for a user\&. The user will be unable to receive new emails, bouncing the email back to the sender\&. This option is only valid with the
  601. \fI\-c\fR
  602. create or
  603. \fI\-u\fR
  604. update action\&.
  605. .RE
  606. .PP
  607. \fB\-\-qh\fR \fIvalue in Mb\fR
  608. .RS 4
  609. Set the hard quota level for a user\&. The user will be unable to receive and create new emails\&. This option is only valid with the
  610. \fI\-c\fR
  611. create or
  612. \fI\-u\fR
  613. update action\&.
  614. .RE
  615. .PP
  616. \fB\-\-udqo\fR \fI[yes|y|1 / no|n|0]\fR
  617. .RS 4
  618. Override the default server quota settings for all user within the specified tenant\&. default value of this option is \*(Aqno\*(Aq, always using server quota levels\&.
  619. .RE
  620. .PP
  621. \fB\-\-udqw\fR \fIvalue in Mb\fR
  622. .RS 4
  623. Set the warning quota level for all users within the specified tenant\&. The user may receive a warning email when this level is reached\&. See
  624. \fBkopano-monitor\fR(8)
  625. for warning emails\&.
  626. .RE
  627. .PP
  628. \fB\-\-udqs\fR \fIvalue in Mb\fR
  629. .RS 4
  630. Set the soft quota level for all users within the specified tenant\&. The user will be unable to receive new emails, bouncing the email back to the sender\&. See
  631. \fBkopano-monitor\fR(8)
  632. for warning emails\&.
  633. .RE
  634. .PP
  635. \fB\-\-udqh\fR \fIvalue in Mb\fR
  636. .RS 4
  637. Set the hard quota level for all users within the specified tenant\&. The user will be unable to receive and create new emails\&. See
  638. \fBkopano-monitor\fR(8)
  639. for warning emails\&.
  640. .RE
  641. .PP
  642. \fB\-i\fR \fIgroupname\fR
  643. .RS 4
  644. This sets the groupname for
  645. \fI\-b\fR
  646. and
  647. \fI\-B\fR
  648. actions\&.
  649. .RE
  650. .PP
  651. \fB\-I\fR \fIcompanyname\fR
  652. .RS 4
  653. This sets the companyname for all user, group and tenant commands\&. This option is only available for multi\-tenancy Kopano\&.
  654. .RE
  655. .PP
  656. \fB\-\-mr\-accept\fR \fI[yes|y|1 / no|n|0]\fR
  657. .RS 4
  658. Specified that meeting requests should automatically be accepted for a user\&. This means that when a meeting request is sent to this user when specified as being a \*(Aqresource\*(Aq, the request will directly be honoured and written to the calendar\&. This is a client\-side action and this setting therefore does not affect actual meeting requests being delivered via kopano\-dagent\&. The user on which to operate is select using the
  659. \fI\-u\fR
  660. switch\&.
  661. .RE
  662. .PP
  663. \fB\-\-mr\-decline\-conflict\fR \fI[yes|y|1 / no|n|0]\fR
  664. .RS 4
  665. This option only has effect when \-\-mr\-accept=yes is in effect\&. When specifying \-\-mr\-decline\-conflict, meeting requests that conflict with an existing meeting will be declined\&. The user on which to operate is select using the
  666. \fI\-u\fR
  667. switch\&.
  668. .RE
  669. .PP
  670. \fB\-\-mr\-decline\-recurring\fR \fI[yes|y|1 / no|n|0]\fR
  671. .RS 4
  672. This option only has effect when \-\-mr\-accept=yes is in effect\&. When specifying \-\-mr\-decline\-recurring, meeting requests that are recurring will be declined\&. The user on which to operate is select using the
  673. \fI\-u\fR
  674. switch\&.
  675. .RE
  676. .PP
  677. \fB\-\-add\-sendas\fR \fIsender\fR
  678. .RS 4
  679. Add user
  680. \fIsender\fR
  681. to the list of the senders you\*(Aqre updating as a \*(Aqsend as\*(Aq user\&. The
  682. \fIsender\fR
  683. can now send mails under the updated user\*(Aqs name, unless the updated user sets the
  684. \fIsender\fR
  685. as a delegate\&. When the
  686. \fIsender\fR
  687. is a delegate, the mail will be sent with \*(AqOn behalf of\*(Aq markings in the email\&. This option is only valid with the
  688. \fI\-u\fR
  689. and
  690. \fI\-\-update\-group \fR
  691. update action\&.
  692. .RE
  693. .PP
  694. \fB\-\-del\-sendas\fR \fIsender\fR
  695. .RS 4
  696. Remove user
  697. \fIsender\fR
  698. from the list of the senders you\*(Aqre updating as a \*(Aqsend as\*(Aq user\&. This option is only valid with the
  699. \fI\-u\fR
  700. and
  701. \fI\-\-update\-group \fRupdate action\&.
  702. .RE
  703. .PP
  704. \fB\-\-lang\fR \fIlanguage\fR
  705. .RS 4
  706. Use
  707. \fIlanguage\fR
  708. to create new stores; this means that folders in the new store will be in the language specified\&. Only valid in combination with \-\-create\-store\&. When this options in not specified, the system default will be selected according the LC_* and LANG environment variables, depending on your OS\&.
  709. .RE
  710. .PP
  711. \fB\-\-utf8\fR
  712. .RS 4
  713. Force the current locale to UTF\-8
  714. .RE
  715. .PP
  716. Other options to control the connection to the kopano\-server are:
  717. .PP
  718. \fB\-\-host\fR, \fB\-h\fR \fIpath\fR
  719. .RS 4
  720. Connect to the storage server through
  721. \fIpath\fR, e\&.g\&.
  722. file:///path/to/socket\&. Default:
  723. file:///var/run/kopano/server\&.sock\&. This option can always be specified\&.
  724. .RE
  725. .PP
  726. \fB\-\-node\fR \fIname\fR
  727. .RS 4
  728. Execute the command on cluster node
  729. \fIname\fRreplaceable>
  730. .RE
  731. .PP
  732. \fB\-\-config\fR \fIfile\fR
  733. .RS 4
  734. Use a configuration file\&. See the
  735. \fBCONFIG\fR()
  736. section for more information\&.
  737. .sp
  738. Default:
  739. \fI/etc/kopano/admin\&.cfg\fR
  740. .RE
  741. .SH "CONFIG"
  742. .PP
  743. Normally, no configuration file is used or required\&. If the file
  744. \fI/etc/kopano/admin\&.cfg\fR
  745. exists, it is used as configuration file, but no error checking is performed\&. This way, you can use any config file from a kopano program, eg\&. kopano\-spooler or kopano\-dagent, to load SSL settings\&.
  746. .PP
  747. The following options can be set in the configuration file:
  748. .PP
  749. \fBserver_socket\fR
  750. .RS 4
  751. Unix socket to find the connection to the Kopano server\&.
  752. .sp
  753. Default:
  754. \fIfile:///var/run/kopano/server\&.sock\fR
  755. .RE
  756. .PP
  757. \fBsslkey_file\fR
  758. .RS 4
  759. Use this file as key to logon to the server\&. This is only used when server_socket is set to an HTTPS transport\&. See the
  760. \fBkopano-server\fR(8)
  761. manual page on how to setup SSL keys\&.
  762. .sp
  763. Default: value not set\&.
  764. .RE
  765. .PP
  766. \fBsslkey_pass\fR
  767. .RS 4
  768. The password of the SSL key file that is set in sslkey_file\&.
  769. .sp
  770. Default: value not set\&.
  771. .RE
  772. .SH "EXAMPLES"
  773. .PP
  774. For creating a user:
  775. .PP
  776. \fBkopano\-admin\fR
  777. \fB\-c\fR
  778. \fIloginname\fR
  779. \fB\-p\fR
  780. \fIpassword\fR
  781. \fB\-f\fR
  782. \fI\*(AqFirstname Lastname\*(Aq\fR
  783. \fB\-e\fR
  784. \fIf\&.lastname@tenant\&.com\fR
  785. .PP
  786. For creating a non\-login store:
  787. .PP
  788. \fBkopano\-admin\fR
  789. \fB\-c\fR
  790. \fIloginname\fR
  791. \fB\-p\fR
  792. \fIpassword\fR
  793. \fB\-f\fR
  794. \fI\*(AqFirstname Lastname\*(Aq\fR
  795. \fB\-e\fR
  796. \fIf\&.lastname@tenant\&.com\fR
  797. \fI\-n\fR
  798. 1
  799. .PP
  800. For modifying the password and e\-mail address:
  801. .PP
  802. \fBkopano\-admin\fR
  803. \fB\-u\fR
  804. \fIloginname\fR
  805. \fB\-p\fR
  806. \fInewpass\fR
  807. \fB\-e\fR
  808. \fIfistname@tenant\&.com\fR
  809. .PP
  810. For deleting a user:
  811. .PP
  812. \fBkopano\-admin\fR
  813. \fB\-d\fR
  814. \fIloginname\fR
  815. .PP
  816. For adding a user to a group:
  817. .PP
  818. \fBkopano\-admin\fR
  819. \fB\-b\fR
  820. \fIloginname\fR
  821. \fB\-i\fR
  822. \fIgroupname\fR
  823. .PP
  824. For setting a specific quota level for a user\&. Warning level to 80 Mb, soft level to 90 Mb and hard level to 100 Mb:
  825. .PP
  826. \fBkopano\-admin\fR
  827. \fB\-u\fR
  828. \fIloginname\fR
  829. \fB\-\-qo\fR
  830. \fIyes\fR
  831. \fB\-\-qw\fR
  832. \fI80\fR
  833. \fB\-\-qs\fR
  834. \fI90\fR
  835. \fB\-\-qh\fR
  836. \fI100\fR
  837. .PP
  838. For automatically accepting meeting requests for a user or resource:
  839. .PP
  840. \fBkopano\-admin\fR
  841. \fB\-u\fR
  842. \fIloginname\fR
  843. \fB\-\-mr\-accept\fR
  844. \fIy\fR
  845. \fB\-\-mr\-decline\-conflict\fR
  846. \fIy\fR
  847. \fB\-\-mr\-decline\-recurring\fR
  848. \fIn\fR
  849. .SH "EXTERNAL USERS"
  850. .PP
  851. When the users are located in an external database, and the storage server is configured to use these users, a lot of commands from the kopano\-admin tool make no sense anymore\&. An example of an external database, and currently the only option, is an LDAP database\&.
  852. .PP
  853. The following actions can still be used, all other commands will be automatically triggered by changing the values in the LDAP server\&.
  854. .PP
  855. \fB\-s\fR: create public store\&.
  856. .PP
  857. \fB\-l\fR: list users known to Kopano\&.
  858. .PP
  859. \fB\-L\fR: list groups known to Kopano\&.
  860. .PP
  861. \fB\-\-details\fR
  862. \fIusername\fR: show user details\&.
  863. .PP
  864. \fB\-\-sync\fR: trigger full synchronization for users and groups from the external source\&.
  865. .PP
  866. When the users change in the external source, the Kopano server instantly synchronizes to these changes\&. There are two exceptions that need some extra attention, and these are when users are created or deleted\&. When a user is created, the
  867. \fBcreateuser_script\fR
  868. from the
  869. \fBkopano-server.cfg\fR(5)
  870. will be started to create a store for a user\&. Likewise, when deleting a user, the
  871. \fBdeleteuser_script\fR
  872. from the
  873. \fBkopano-server.cfg\fR(5)
  874. will be started to delete a store from a user\&. The same is valid for creating and deleting a group and tenant, starting the
  875. \fBcreategroup_script\fR/\fBcreatecompany_script\fR
  876. and
  877. \fBdeletegroup_script\fR/\fBdeletecompany_script\fR
  878. scripts respectively\&.
  879. .SH "DIAGNOSTICS"
  880. .PP
  881. Could not create user/store/public store\&.
  882. .PP
  883. When you get this error, make sure the storage server and database server are running\&.
  884. .SH "AUTHOR"
  885. .PP
  886. Written by Kopano\&.
  887. .SH "SEE ALSO"
  888. .PP
  889. \fBkopano-server\fR(8),
  890. \fBkopano-server.cfg\fR(5)