When "AppleShare Mirror" is selected in ClickMail's Configure window, the database downloads all users from an AppleShare Users & Groups Registry, and maintains "mirror" entries in the ClickMail datafile.
Any changes made in ClickMail to AppleShare users are automatically made to their Users & Groups entry as well, for certain attributes that appear in AppleShare. AppleShare changes supported by ClickMail include add user, delete user, set Alias (the username part of the email address), and set password. The changes are reflected in AppleShare as soon as the ClickMail entry is saved.
ClickMail attributes that are kept in sync with AppleShare are common name (cn), email (before the "@", as AppleShare User Alias), user access flags, and password (if present in the ClickMail entry or enabled for all entries under ClickMail Preferences.)
Newly added AppleShare users have two settings enabled: "User may log on" and "User may change password."
Changes made in AppleShare are detected in ClickMail only when ClickMail performs a synchronize function. This occurs whenever ClickMail is started, when "Resync from AppleShare" is chosen from the File menu, and when scheduled under ClickMail Preferences. To bring ClickMail up to date after making AppleShare changes, choose the "Resync from AppleShare" command. When practical, make AppleShare user changes in ClickMail to avoid the need to resynchronize.
AppleShare IP groups are mirrored as separate entries of type "asipgroup" (an LDAP objectClass). This allows listing group email addresses that can be found by LDAP client searches. These entries are not regular LDAP "groupOfPersons" groups. Group membership must be assigned in AppleShare IP Web & File Admin.
AppleShare IP user access flags are included in mirror entries in the "asipflags" attribute. The flags are displayed in hexadecimal (preceded by "16#") and may be edited. Editing is only recommended if you are familiar with the flags and their effects in AppleShare IP.