Zimbra Permissions Inspector

This CLI utility allows you to query sending permissions on a Zimbra server.

You can retrieve sending permissions for a particular Zimbra Distribution List (ZDL) or get a complete list of 'Send as' permissions. The most basic query, list all the existing ZDLs (both dynamic and static).

Requirements

Make sure you meet the following requirements:

• Make sure to setup the Zimbra LDAP admin user, on your Zimbra server.
• You need the python-ldap package.

Tested on Zimbra v8.8.12

Installation

You can install it with pip:

pip install zimbra-permissions-inspector

Usage

Help output:

usage: zimbra-permissions-inspector.py [-h] [-l ZDL] [-sa] [-v]
                                       SERVER BASEDN LDAP_ADMIN

Query sending permissions on a Zimbra server

positional arguments:
  SERVER             URI formatted address of the Zimbra server
  BASEDN             Specify the searchbase or base DN of the Zimbra LDAP
                     server
  LDAP_ADMIN         Admin user of the Zimbra LDAP server

optional arguments:
  -h, --help         show this help message and exit
  -l ZDL, --zdl ZDL  Query which Zimbra accounts have permissions to send
                     mails to the given ZDL
  -sa, --sendas      Query 'send as' permissions on both Zimbra accounts and
                     ZDLs
  -v, --version      Show current version

Note that positional arguments are mandatory!.

Usage examples

If no optional arguments are given, it'll list all the existing ZDLs (both dynamic and static):

zimbra-permissions-inspector ldap://zimbra.somecorp.com dc=somecorp,dc=com uid=zimbra,cn=admins,cn=zimbra 

Query which Zimbra accounts have permissions to send mails to a ZDL ("Zimbra Distribution Lists") named "my-zdl-list":

zimbra-permissions-inspector ldap://zimbra.somecorp.com dc=somecorp,dc=com uid=zimbra,cn=admins,cn=zimbra -l zdl-list 

Get a list of "send as" permissions:

zimbra-permissions-inspector ldap://zimbra.somecorp.com dc=somecorp,dc=com uid=zimbra,cn=admins,cn=zimbra -sa