Hide default Users/Groups in all applications (It is not in Nethgui/Cockpit)

Feature
1

There is a problem with groups and users in NethServer!

Impossible to manage it, hide it, disable it in app, …

There are missing groups in Nethgui and Cockpit, I have listed all:

Showed users in Netgui/Cockpit (account can be disabled but in always in all applications):

  • Administrator
  • Admin

Hidden users in Netgui/Cockpit (No management and in all applications):

  • NethServer LDAP simple auth identity
  • krbtgt (Key Distribution Center Service Account)
  • Guest (Built-in account for guest access to the computer/domain)

Showed group in Netgui/Cockpit (And in all applications):

  • Domain Admins (Designated administrators of the domain)

Hidden groups in Netgui/Cockpit (No management and in all applications):

  • DnsUpdateProxy (DNS clients who are permitted to perform dynamic updates on behalf of some other clients (such as DHCP servers).)
  • Domain Computers (All workstations and servers joined to the domain)
  • Domain Controllers (All domain controllers in the domain)
  • Domain Guests (All domain guests)
  • Domain Users (All domain users)
  • Enterprise Admins (Designated administrators of the enterprise)
  • Enterprise Read-only Domain Controllers (Members of this group are Read-Only Domain Controllers in the enterprise)
  • Read-only Domain Controllers (Members of this group are Read-Only Domain Controllers in the domain)
  • Schema Admins (Designated administrators of the schema)

I have done screenshots for you:
Nethgui:

Cockpit:

Roundcube:

SOGo users:

SOGo groups:

Linked to Users/Groups in NethServer.

2

Exchange/Office365 has an option to hide:

Note: Groups and Users have not an email address.

There are only 2 default accounts with email address:

  • Administrator
  • Admin
3

Linked to for example:

SOGo, Roundcube know it…

Note: If Groups or Users have not an email address, it must not listed.

4

We decided to not show builtin AD users/groups in the server manager. If you need them you can connect with Microsoft RSAT tools. https://wiki.samba.org/index.php/Installing_RSAT

5

Can you see for Address Book?
It is always here.

6

Sadly, email addresses are not in the LDAP DB so it cannot be configured as filtering criterion for address books.

Applications offer a LDAP search query generally. This is not enough to distinguish the account types. The server manager filter excludes also some entries with a couple of “hidelists”: /etc/nethserver/system-users and /etc/nethserver/system-groups.

7

I see “mail”:

8

I can’t help with SOGo. Let’s ask @stephdl!

9

Of course, it is for all softwares, not only Roundcube or SOGo, there are Nextcloud, ejabberd, etc.

It is a bug, we do not need to see.

10

If it is a bug, I can’t fix it sorry.

Edit: We can consider it a #feature enhancement though. As LDAP filters in applications do not allow to cherry-pick what accounts/groups are visible and what are hidden let’s create accounts in a different LDAP branch. However this can be achieved for local account providers; for remote ones, the same limitation can persist.

I’ll keep it in mind for NS8.

1 Like
11

Can you move this ticket in bug section? Badly one people has moved my ticket.

12

No, I’d move it to #feature instead.

Every application you listed is an LDAP client and to achieve what you’re asking it has to implement an LDAP search filter, to exclude unwanted entries. However (especially with AD) this is a daunting task because some “builtin” items cannot be easily recognized by their attributes; furthermore the name of the item could be localized and unpredictable.

13

How other servers have possibility to hide from Global Address List? :slight_smile:

For default accounts by default and possibility for users, groups, alias mails, shared mails, …

14

I don’t know, but if you know how they implement this feature please tell me.