Hello,
Thank you very much, I have found the problem.
Well, fixing might be problematic.
api-cli run cluster/list-domain-groups --data '{"domain":"DOMAIN"}'
Truncated response:
{"groups": [{"group": "it", "description": "", "users": ["Nagy K\u00e1roly"]}]}
I believe you see the problem:
Strangely all of us has letter á somewhere in our first or last name which is translated to \u00e1 in this list.
While it does not cause a problem when rights given to the individual users, but somehow it does not work with rights set to groups in mail.
I tried it with the admin user that does not have any special characters and it works with that account. Also I created a user with space in the name but that was not a problem either. So it must be the á (and we have 9 such characters in the Hungarian alphabet).
Now I tried to fix it: I removed á from the display name, and NS8 updated it in the Users list, but the console query above still shows the same. I believe NS8 uses the name from the AD properties Object tab - Canonical name which cannot be changed. This means if I would need to fix it, then I would need to recreate all 5 users an possibly mess up everything in Windows and on NS8 as well.
So I don’t know how should it be fixed - preferably on NS8 side.
- Maybe the received Canonical name (or whatever is its codename) should be converted to the same charset as it compares in mail permissions.
- Or login name (in my case karoly.nagy or karoly.nagy@domain.tld) should be used.
- Or?
Thanks!