Re: [SOGo] BTS activities for Friday, December 23 2016

[Steve Ankeny]

On 12/24/2016 04:02 AM, Christoph Kuhnert | YNA (christo...@yna11.com) 
wrote:

Good morning and Merry Christmas,

Just a formal question.
I wanted to look at the lists, that the email refers to 
(https://inverse.ca/sogo/lists) but it seems that this is empty? Does 
it require a login?



Kind Regards

Chris


It does not require login except to reply to a message thread.

Click on users@sogo.nu and then click on Archive to read messages (from 
there do a search if necessary)


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo Package Repositories

[Steve Ankeny]

and, me

On 07/19/2016 02:40 PM, Davide Bozzelli (bu...@olografix.org) wrote:

Thx Ludovic.

This reassures me.



Il 19/07/16 20:37, Ludovic Marcotte (lmarco...@inverse.ca) ha scritto:

On 2016-07-19 2:25 PM, Davide Bozzelli (bu...@olografix.org) wrote:

What i would always appreciated in nightly repo is the stability: 
they fix bugs even before the stable releases.
And what worried me now is the possibility the nightly become just 
as they sound like: unstable/untested repo

to play with .
Naa - we are always careful when pushing changes to the source repos 
because we know a lot of people are using the nightly builds - and we 
appreciate feedback we receive from them. We will continue doing so, 
we aren't morons doing software.







--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Move Email from Inbox to Folder (Web Frontend)

[Steve Ankeny]

On 06/07/2016 03:52 PM, "Alain Abbas" (alain.ab...@libertech.fr) wrote:


Hello
Yes it is possible unfortunally not in drag and drop
Select the mails that you want to move
and in the menu arround the search box you have move to
i kow it is not really intuitive
Regards

Le Mardi 7 Juin 2016 21:30 CEST, Schrödel Robert 
(robert.schroe...@gmail.com)  a écrit:

Hello,

is it possible to move emails from the inbox to a folder?
We didn’t see this function.

Thank you!

Rob
--
users@sogo.nu
https://inverse.ca/sogo/lists


--
*Alain Abbas*
3 rue des Violettes
54 410 Laneveuville-Devant-Nancy
Tel : +333 83 18 02 70
skype: alain.abbas
--
users@sogo.nu
https://inverse.ca/sogo/lists


I've done it numerous times via an e-mail client such as Thunderbird.

Simply highlight the e-mails you wish to move (say, in your IMAP Inbox), 
right-click and choose either "Copy to" or "Move to", then choose a 
folder Local to your computer.  It's very easily done.  I'd suggest 
"Copy to"


You can also move e-mail from Local folders to the IMAP server in much 
the same way.


It is also by far the easiest way to move IMAP mail from one server to 
another (though it will take two different connections on two different 
occasions - i.e., not connected simultaneously)  It's a simply, yet 
effective tool.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo - Openchange issue

[Steve Ankeny]

On 05/05/2016 02:01 PM, Ludovic Marcotte (lmarco...@inverse.ca) wrote:

On 2016-05-05 13:58, Rowland Penny (rpenny241...@gmail.com) wrote:

Then why are you still pushing 4.1.18 out the door ?
If you don't want it, don't get it. Or better, have fun and provide us 
Samba 4.3/4.4 packages on Jessie and Trusty. Good luck with that.


This discussion is over.
--
Ludovic Marcotte
lmarco...@inverse.ca   ::  +1.514.755.3630  ::http://inverse.ca
Inverse inc. :: Leaders behind SOGo (http://sogo.nu) and PacketFence 
(http://packetfence.org)
--
users@sogo.nu
https://inverse.ca/sogo/lists


I realize there are many who still use Ubuntu 14.04 Trusty, but moving 
to 16.04 is beneficial all-way-round.


That would provide Samba 4.3.8 via the Ubuntu repositories, which HAS 
the patches and will be supported.


And, I don't believe it would cause any other problems with the normal 
applications needed for SOGo or Dovecot/Postfix  It does move from PHP5 
to PHP7.0, and that can cause some problems until you understand.


However, I've decided that OpenChange is not the way I wish to take my 
clients (but EAS)  It's time to upgrade.  It's even time to upgrade my 
clients using Outlook 2010 to 2013 or beyond.  THAT's the best solution 
I see.


Wishing you well, today!

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Very initial question

[Steve Ankeny]

yes, it IS case sensitive

On 04/30/2016 09:38 AM, robb (r...@interlin.nl) wrote:

Isn't it so that the URL for the webinterface is case sensitive?
Try http(s):///SOGo

regards,
robb



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] How do I know which update script I have to call?

[Steve Ankeny]

hmm

You stated originally --

For example: I just
updated and I'm now on 2.3.1. I don't know if I have to call the script
"sql-update-2.2.17_to_2.3.0-mysql.sh".


So, that means you were on v. 2.3.0 and shouldn't need the upgrade script.

The update script upgrades from 2.2.17 to 2.3.0, so IF you were on 
2.3.0, you do not need the script.


However, check "/etc/sogo/sogo.conf" for the lines --


SOGoProfileURL =
"postgresql://sogo:sogo@localhost:5432/sogo/sogo_user_profile";
OCSFolderInfoURL =
"postgresql://sogo:sogo@localhost:5432/sogo/sogo_folder_info";
OCSSessionsFolderURL =
"postgresql://sogo:sogo@localhost:5432/sogo/sogo_sessions_folder";


Yours probably read --


SOGoProfileURL =
"mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile";
OCSFolderInfoURL =
"mysql://sogo:sogo@localhost:3306/sogo/sogo_folder_info";
OCSSessionsFolderURL =
"mysql://sogo:sogo@localhost:3306/sogo/sogo_sessions_folder";


That would tell you to call the "sql-update-2.2.17_to_2.3.0-mysql.sh" 
script, and as I stated earlier, it does not harm the installation for 
you to call it AGAIN (IF you're unsure or IF something doesn't work 
correctly)


So, no update script is required, but IF you're unsure or IF something 
doesn't work, call the MySQL script.


On 04/30/2016 09:27 AM, Michael Vogel (ica...@dabo.de) wrote:

Am 29.04.16 um 16:21 schrieb Steve Ankeny (stev...@cinergymetro.net):

read pg 58-59 of the documentation

It only tells:

"This section describes what needs to be done when upgrading to the
current version of SOGo from the previous release."

For example: When I'm not totally sure that my previous version was
version 2.3.0 and not 2.2.8 then I don't have a clue if I have to call
the script or not.


If it was working before upgrade, no script is needed.

Is it called automatically during the upgrade or why wouldn't the script
beeing needed in that case?

Michael



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Very initial question

[Steve Ankeny]

Have you followed the documentation?

http://sogo.nu/support/index.html#/documentation

For instance, have you installed Apache2 on your headless server?

Generally, you install SOGo (and other software) on one machine and 
access it from another (with a browser)  Once you've installed a mail 
server (Dovecot/Postfix), you can access it with Thunderbird or Outlook 2013


See the documentation.

On 04/30/2016 09:02 AM, Azam Premji (blueb...@gmail.com) wrote:

Hi Chris,

Welcome. I’ve found there are numerous ways to install SOGo so it’s 
kind of hard to tell where you are with this. Probably the best place 
to start is checking out what your logs say.


You can find the logs at /var/log/sogo/sogo.log

I’m also quite new around here but if there is something in there that 
I’ve seen before I’d be glad to help.



Azam



On Apr 29, 2016, at 8:52 AM, Christoph Kuhnert (christo...@me.com 
) > wrote:


Hi Everybody

I hope it’s ok to ask this here.

Trying to install sogo in a headless Ubuntu 14.04 server.
The server is running in a parallels Virtual machine.

Firewall of Ubuntu Server is disabled.

I have a fresh installation of 14.04 and install Sogo (via apt-get).

It installs without error messages and is running (service sogo status).

How can I now access Sogo?

http:/http://ip/>>/sogo doesn’t work.

I can’t do http://localhost/sogo (as written in the documentation) 
because I don’t have a browser.


Let’s say: I am stuck before it even started.

This is a pretty simple question.
But it's correct that I should ask such questions here, because there 
is no forum or similar that I can check for simple beginners 
questions, right?

I usually do that to try and help myself.

In any way: every hint into the right direction would be very much 
appreciated.



Kind Regards

Chris
__




--
users@sogo.nu 
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] How do I know which update script I have to call?

[Steve Ankeny]

I'm sorry!  I responded a bit too quickly.

IF you're using PostgreSQL, run 'sql-update-2.2.17_to_2.3.0.sh'

IF you're using MySQL, run 'sql-update-2.2.17_to_2.3.0-mysql.sh'

IF you're not sure which one you're running, running BOTH will not hurt 
your installation.


or, simply run something like, 'ps aux | grep mysql' to see if MySQL is 
being used


On 04/29/2016 10:22 AM, Steve Ankeny (stev...@cinergymetro.net) wrote:

better yet, just run them

IF they're needed, they will execute, and IF not, they'll do nothing.

On 04/29/2016 08:22 AM, Michael Vogel (ica...@dabo.de) wrote:

Hi!

Sometimes there seems to be a need to run database update scripts after
SOGo was updated. My problem is that I never know if or which of theses
scripts I had to call.

Mostly I really don't know the old SOGo version. For example: I just
updated and I'm now on 2.3.1. I don't know if I have to call the script
"sql-update-2.2.17_to_2.3.0-mysql.sh".

Is there any script that I haven't found by now that simply does a check
for the current database schema and does all needed changes?

Michael






--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] How do I know which update script I have to call?

[Steve Ankeny]

read pg 58-59 of the documentation

If it was working before upgrade, no script is needed.

On 04/29/2016 08:22 AM, Michael Vogel (ica...@dabo.de) wrote:

Hi!

Sometimes there seems to be a need to run database update scripts after
SOGo was updated. My problem is that I never know if or which of theses
scripts I had to call.

Mostly I really don't know the old SOGo version. For example: I just
updated and I'm now on 2.3.1. I don't know if I have to call the script
"sql-update-2.2.17_to_2.3.0-mysql.sh".

Is there any script that I haven't found by now that simply does a check
for the current database schema and does all needed changes?

Michael



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo and necessity of using OpenChange

[Steve Ankeny]

On 04/12/2016 04:17 PM, Daniel Bareiro (daniel-lis...@gmx.net) wrote:

Hi, Steve.

On 11/04/16 12:54, Steve Ankeny (stev...@cinergymetro.net) wrote:


Thank you for confirming and the references. I appreciate it. I'll see
how I will do this implementation and will consult you any questions
that arise.

Thanks for your time.

no problem, Daniel

I am not an expert!  However, I've struggled with OpenChange, and I've
come to the conclusion the better way for my users is to use EAS with
Outlook 2013, and like you, I think the CalDav Synchronizer looks great.

According to what I was seeing in the documentation that you mentioned,
the installation seems more complex and (correct me if I'm wrong,
please) seems necessarily to requires LDAP. I have no experience with
LDAP, so I probably have to fight with this installation in the case of
do it for the first time.


Samba uses the LDAP protocol, so you use Samba instead of LDAP

IF you wish to use OpenChange, you must use the Inverse package, which 
is Samba 4.1.18, because OpenChange is compiled to work with that 
version ONLY (there's an unconfirmed rumor to the contrary)


OpenChange is required for the older versions of Outlook (2003, 2007, 2010)

However, IF you are willing to use Outlook 2013 (and above), you do not 
need OpenChange.


From what Rowland Penny tells us in another thread, Samba 4.1.18 has 
security issues and requires patching.  Who's Rowland Penny?  He's a 
moderator on the Samba mailing list which you can review here


https://lists.samba.org/mailman/listinfo/samba

So, I would recommend following the details of installing the latest 
Samba from their wiki


https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO

On the other hand, having a working mail server (Dovecot/Postfix), Samba 
for user authentication, you can use SOGo to your heart's content for 
calendar, contacts, address books, etc. by using the EAS/EAW protocols.


Start with a mail server, add apache and mysql, then Samba, create users 
and install SOGo


That's the general progression you need to follow.  Most of it is in the 
documentation.



In the installation I did (only) for Outlook 2013 and Android clients, I
installed "sogo" and "sogo-activesync" packages (I am struck that Debian
Jessie has no the "sogo-activesync" package) in Ubuntu from SOGo
repositories. I also installed MySQL to create a database with users for
SOGo. Here these clients was connected using ActiveSync smoothly.


IF you're looking for Debian SOGo packages, use the Inverse repositories.

You can use MySQL for your user database, just follow the instructions 
for SQL authentication.  However, you can also migrate those users to 
Samba by using "samba-tool" to create users in the Samba LDAP DB


Once you login to SOGo via the web interface, it will populate the mysql 
database.



If I understood correctly, for users with older versions of Outlook who
want to use ActiveSync, instead of having SOGo users in a MySQL database
these must be on a LDAP directory, right?

While on this way SOGo contemplates using very old versions of Outlook
living with other newer of Outlook and all homogeneously using
ActiveSync, I think it would be the only case where SOGo worth
installing. Because if we will install SOGo for Outlook clients
connecting via CalDAV/CarDAV, we could use another web application as
the case of Horde Groupware.


That will help with Address Books and Contacts, but it will not help
with receiving Mail in Outlook.

When I had configured Outlook 2013 to use ActiveSync, I remember that it
showed two mail boxes: one for the IMAP connection and another for
synchronization with ActiveSync. This could be confusing for users,
especially because that environment had an IMAP server without the
capabilities necessary to synchronize emails using ActiveSync. So in a
mailbox the users were seeing all the emails obtained using IMAP and the
other mailbox looked empty.


I'm unsure of this (no experience with it)

I always use IMAP (but I also use Thunderbird for most of my mail needs)

I only have a few Outlook clients, and they use IMAP  It's the calendar 
they need.





That's where using EAS should work.  I'm on the same page as you as far
as not using OpenChange.  My users are long time Thunderbird users, so
using MAPI for Mail made sense, but "some" users need Outlook.

So, for those few users, I believe EAS should do the job.
Dovecot/Postfix, SOGo, Samba, no OpenChange

Yes, it is an option. Although the case of using CalDAV/CarDAV also
avoids confusion due to the double mailbox that a user might have in
Outlook if they use IMAP and ActiveSync simultaneously.


Kind regards,
Daniel




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo and necessity of using OpenChange

[Steve Ankeny]

On 04/11/2016 12:47 PM, "MicTieMix" (mictie...@gmail.com) wrote:

You don't need EAS for Mail, just use IMAP ...
(but maybe I am missing something ..)


I'm sure you're right!


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo and necessity of using OpenChange

[Steve Ankeny]

On 04/11/2016 10:51 AM, Daniel Bareiro (daniel-lis...@gmx.net) wrote:

Hi, Steve.

On 09/04/16 11:37, Steve Ankeny (stev...@cinergymetro.net) wrote:


Review pg 3, 51-58 of the SOGo Installation and Configuration Guide
<http://sogo.nu/files/docs/SOGoInstallationGuide.pdf> (PDF)

Generally, you will find that Outlook 2010, and below, require
OpenChange for use with the "Outlook Anywhere" protocol, while Outlook
2013 can be used without OpenChange with the Enterprise ActiveSync protocol.

Note: IF you need OpenChange, you MUST install the Inverse version of
Samba 4.1.18

Follow the Native Microsoft Outlook Configuration Guide
<http://sogo.nu/files/docs/SOGoNativeOutlookConfigurationGuide.pdf>
(PDF)  Works ONLY on Ubuntu Trusty & Debian 8

Thank you for confirming and the references. I appreciate it. I'll see
how I will do this implementation and will consult you any questions
that arise.

Thanks for your time.


Kind regards,
Daniel


no problem, Daniel

I am not an expert!  However, I've struggled with OpenChange, and I've 
come to the conclusion the better way for my users is to use EAS with 
Outlook 2013, and like you, I think the CalDav Synchronizer looks great.


That will help with Address Books and Contacts, but it will not help 
with receiving Mail in Outlook.


That's where using EAS should work.  I'm on the same page as you as far 
as not using OpenChange.  My users are long time Thunderbird users, so 
using MAPI for Mail made sense, but "some" users need Outlook.


So, for those few users, I believe EAS should do the job. 
Dovecot/Postfix, SOGo, Samba, no OpenChange




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Samba Authentication

[Steve Ankeny]

The Samba error is a common warning referring to a conflict in libraries.

It occurs with some distributions and some versions of Samba. Nothing to 
worry about and nothing to fix.


See Rowland Penny's comments -- 
https://www.spinics.net/lists/samba/msg130702.html


On 04/10/2016 06:24 AM, Azam Premji (blueb...@gmail.com) wrote:

Don't know if this is related or I should be starting a new  thread for it but 
log.samba shows this error:
[2016/04/10 06:15:45.597445,  0] ../source4/smbd/server.c:485(binary_smbd_main)
   samba: using 'standard' process model
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
[2016/04/10 06:15:45.626622,  0] ../lib/util/become_daemon.c:124(daemon_ready)
   STATUS=daemon 'samba' finished starting up and ready to serve connections
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.
samba: setproctitle not initialized, please either call setproctitle_init() or 
link against libbsd-ctor.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Samba Authentication

[Steve Ankeny]

On 04/10/2016 06:24 AM, Azam Premji (blueb...@gmail.com) wrote:

Hi guys,

I'm trying to get SOGo to authenticate to Samba4. I have installed Samba 4.4.0 
and SOGo 3 along with Postfix, Dovecot, MariaDB and Apache2. I'm not doing the 
OpenChange thing - I want to use the Web interface tho and maybe Outlook 2013 
so I have activesync installed. I installed Samba by downloading with wget and 
going thru ./configure, make, and make install.


Did you setup Samba as an Active Directory Controller?  Have you 
"joined" any client machines to the domain, which appears to be 
"rhytmic.ca," and can you authenticate as a Samba AD user against the 
Samba DB?


It's not that you MUST join your client machines to the domain but just 
a way of testing the Samba DB


Below: Can you login to the MySQL DB with "Administrator/password123"?

Again, it's just a way to troubleshoot whether the Samba DB recognizes 
the username/password.


Did you create the username/password during "samba-tool" domain 
provision?  Can you login to Samba or MySQL with username/password, 
particularly, "Administrator/password123" in MySQL?


pg 9, 17 in Native Microsoft Outlook Guide 
 (PDF)


Your setup below in SOGo.conf appears correct IF you're using Samba AD 
for authentication and IF the users actually exist (see creation of 
users with "samba-tool")  I'm not offering solutions as much as things 
to check.


When it doesn't work, you need to find out if you can login as 
username/password at the Samba level.


Try logging into MySQL as "Administrator/password123"  That should tell 
you something as well.  You login to the SOGo web interface with each 
user account to create user tables and fields, but you must create the 
users.


"samba-tool user add "  etc.


I'm able to see the Web interface of SOGo but logging in simply throws an 
'Authentication Failed, Wrong username or Password' message. When I look into 
my /var/log/sogo/sogo.log I see the following:


Apr 10 05:33:31 sogod [3841]: <0x0x56526fccc9b8[WOWatchDog]> child spawned with 
pid 3844
Apr 10 05:33:31 sogod [3841]: <0x0x56526fccc9b8[WOWatchDog]> child spawned with 
pid 3845
Apr 10 05:33:31 sogod [3841]: <0x0x56526fccc9b8[WOWatchDog]> child spawned with 
pid 3846
Apr 10 05:35:00 sogod [3845]: <0x0x56526ff25ba8[SOGoCache]> Cache cleanup 
interval set every 300.00 seconds
Apr 10 05:35:00 sogod [3845]: <0x0x56526ff25ba8[SOGoCache]> Using host(s) 
'127.0.0.1' as server(s)
Apr 10 05:35:00 sogod [3845]: [ERROR] <0x0x56526fcca9b8[NGBundleManager]> could 
not create bundle for path: 
'/usr/share/GNUstep/Libraries/gnustep-base/Versions/1.24/Resources/SSL.bundle'
Apr 10 05:35:00 sogod [3845]: [WARN] <0x0x7f0a438fd3c0[WOxElemBuilder]> could 
not locate builders: WOxExtElemBuilder,WOxExtElemBuilder
Apr 10 05:35:00 sogod [3845]: 10.10.1.100 "GET /SOGo/ HTTP/1.1" 200 6099/0 
0.065 22165 72% 4M
Apr 10 05:35:07 sogod [3845]: SOGoRootPage Login from '10.10.1.100' for user 
'test1' might not have worked - password policy: 65535  grace: -1  expire: -1  
bound: 0
Apr 10 05:35:07 sogod [3845]: 10.10.1.100 "POST /SOGo/connect HTTP/1.1" 403 
34/62 0.062 - - 596K


I read that there isn't really anything to worry about not being able to create 
the SSL.bundle thing but I don't know about the 
WOxExtElemBuilder,WOxExtElemBuilder error. I couldn't find a file like that on 
my system. And the last one there about the password policy I have no idea. I 
do have the following set:
/usr/local/samba/bin/samba-tool domain passwordsettings set --complexity=off
/usr/local/samba/bin/samba-tool domain passwordsettings set --min-pwd-length=1
/usr/local/samba/bin/samba-tool user setexpiry Administrator --noexpiry



Here is my sogo.conf (removed most parts that have have been commented out 
anyway, easy passwords for test environment):
/* Database configuration (mysql:// or postgresql://) */
SOGoProfileURL = 
"mysql://sogo:password123@localhost:3306/sogo/sogo_user_profile";
OCSFolderInfoURL = 
"mysql://sogo:password123@localhost:3306/sogo/sogo_folder_info";
OCSSessionsFolderURL = 
"mysql://sogo:password123@localhost:3306/sogo/sogo_sessions_folder";

/* Mail */
SOGoDraftsFolderName = INBOX/Drafts;
SOGoSentFolderName = INBOX/Sent;
SOGoTrashFolderName = INBOX/Trash;
SOGoIMAPServer = imaps://localhost:993;
SOGoSieveServer = sieve://127.0.0.1:4190;
SOGoSMTPServer = 127.0.0.1;
SOGoMailDomain = rhythmic.ca;
SOGoMailingMechanism = smtp;
//SOGoForceExternalLoginWithEmail = NO;
//SOGoMailSpoolPath = /var/spool/sogo;
//NGImap4ConnectionStringSeparator = "/";


/* LDAP AD/Samba4 example */
SOGoUserSources = (
   {
 type = ldap;
 CNFieldName = cn;
 UIDFieldName = sAMAccountName;
 baseDN = "CN=users,dc=rhythmic,dc=ca";
 bindDN = "administra...@rhythmic.ca";
 bindFields = (sAMAccountName, mail);
 bindPassword = password123;
 canAuthenticate = YES;
 displayName = "Public";
 hostname = ldap://127.0.0.1:389;
 filter = 

Re: [SOGo] SOGo and necessity of using OpenChange

[Steve Ankeny]

Review pg 3, 51-58 of the SOGo Installation and Configuration Guide 
 (PDF)


Generally, you will find that Outlook 2010, and below, require 
OpenChange for use with the "Outlook Anywhere" protocol, while Outlook 
2013 can be used without OpenChange with the Enterprise ActiveSync protocol.


Note: IF you need OpenChange, you MUST install the Inverse version of 
Samba 4.1.18


Follow the Native Microsoft Outlook Configuration Guide 
 
(PDF)  Works ONLY on Ubuntu Trusty & Debian 8


On 04/09/2016 09:54 AM, Daniel Bareiro (daniel-lis...@gmx.net) wrote:

Hi all!

I'm thinking to implement SOGo only for synchronization of address book,
tasks and contacts with Outlook 2003-2016.

Must I also to install OpenChange for these cases? Previously I made an
implementation of SOGo which we use with Outlook 2013 and some Android
clients and in these cases the synchronization of address book, tasks
and contacts ran smoothly without the need to install OpenChange.

Thanks in advance.


Kind regards,
Daniel



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Sogo Frontend Connector Firefox 38.7.

[Steve Ankeny]

It's to be installed in Thunderbird NOT Firefox

On 03/26/2016 07:46 AM, i...@ibdrigo.com wrote:

Hello,

the currently offered Sogo Connector (31.0.2) is claimed to work with Firefox
38.X. However, Fiorefox refuses to install the package. This is because in the
xpi file install.rdf contains

   
 {3550f703-e582-4d05-9a08-453d09bdfdc6}
 31.0
 31.*
   
 

Change
 31.*
to
 38.*
and installation is possible. The Sogo-Connector seems to work without problem
in FF38.7

Best regards

Gerald



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Exchange 2003 -> Sogo

[Steve Ankeny]

Martin . . .

Am I right in understanding your suggestion does not involve 
OpenChange?  Would that limit a user to Outlook 2013?  It appears to 
require a lot of resources to implement, and even then, there appear to 
be limitations.


pg. 51-55, SOGo Installation and Configuration Guide

From my view, this is certainly preferable to using OpenChange

On 03/10/2016 10:44 AM, Martin Simovic wrote:

Hi,

I recommend you test your setup before the actual migration. 
ActiveSync can be very resource demanding, especially with large 
mailboxes. At the moment, every EAS connection requires a separate 
sogod process, which in your case means you need 32+ GB RAM - assuming 
your users use Outlook only (and not the phone, etc.) Add one more 
device per user (e.g. Android phone) and amount of required RAM 
duplicates.


Best Regards
Martin.

On 10 Mar 2016, at 15:36, EFEKT PAWKI > wrote:


Hello.
I have to migrate from Exchange 2003 to something else.
My users will kill me if I force them to switch from MS Outlook to 
something else.


How Sogo behave with account with a lot of data using Active Sync 
protocol?

Especially owner of company - he have 5GB of OST and 45 in PST.

Calendar is full of meettings etc...
Will Sogo be able to work fluently with such amount of data?
There will be about 100 mailboxes.
Best regards. Pawel
--
users@sogo.nu 
https://inverse.ca/sogo/lists




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Documentation outdated???

[Steve Ankeny]

On 02/20/2016 07:50 AM, Jens Erat wrote:

I would like to install sogo-openchange on to my Raspberry Pi running
RASPIAN (equiv. to DEBIAN Jessie).

Have you added the Inverse repositories for Debian?

http://inverse.ca/debian

It is my understanding that a working Samba/OpenChange server is ONLY
possible by installing Inverse repos.

(at least from the SOGo/Inverse packages)


The Inverse repositories don't offer any builds for ARM devices like the
Raspberry Pi. You won't have any luck adding http://inverse.ca/debian as
a repository on ARM-devices, they will not find any suitable packages.
If you added this repository and see packages, they're offered by
Debian/Raspbian, not Inverse.


Looking at the Documentation  'Native Microsoft Outlook Configuration
Guide
for version 3.0.1'  (
http://sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuratio

n.pdf) published in FEB 2016, I find that I need to install among others:
openchange-ocsmanager, openchange-rpcproxy, python-sievelib and
python-rpclib.
None of these packages is available for Debian / Jessie.

On the other hand, I see 'openchange' as part of the SOGo-package at
Github,
but I am not sure if (and how) this is to be installed.
(I tried 'make' but had errors)

The documentation is still up to date, but you need to get those
dependencies with the correct versions (and possibly patches -- I'm not
up to date on patches applied in the Inverse repositories) running.
Building Samba 4 is a pain, I'd guess you're better off getting some
AMD64-based hardware if you really want to get SOGo running with OpenChange.



You're right!  I had forgotten the OP was running ARM


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Documentation outdated???

[Steve Ankeny]

On 02/19/2016 08:54 AM, MicTieMix wrote:

I would like to install sogo-openchange on to my Raspberry Pi running
RASPIAN (equiv. to DEBIAN Jessie).

Looking at the Documentation  'Native Microsoft Outlook Configuration Guide
for version 3.0.1'  (
http://sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuratio
n.pdf) published in FEB 2016, I find that I need to install among others:
openchange-ocsmanager, openchange-rpcproxy, python-sievelib and
python-rpclib.
None of these packages is available for Debian / Jessie.

On the other hand, I see 'openchange' as part of the SOGo-package at Github,
but I am not sure if (and how) this is to be installed.
(I tried 'make' but had errors)

Thank you, for your help!






(I am no expert)

Have you added the Inverse repositories for Debian?

http://inverse.ca/debian

It is my understanding that a working Samba/OpenChange server is ONLY 
possible by installing Inverse repos.


(at least from the SOGo/Inverse packages)


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] How can I change "example.com" to another domain name

[Steve Ankeny]

On 02/19/2016 07:20 PM, Mehdi Samani wrote:

Hi Ladies and Gentlemen

I run ZEG 3 on VMware machine and then I changed everything as 
following steps to have my own email (cfs-test.com) but still there is 
showing example.com, and when I try to send out it says "Can not send 
message: all recipients are invalid", while the recipient is correct.

Do you know what is the problem.
o Login as root (sudo -s)
o Stop the LDAP service:  root@sogo:~# service slapd stop
o Backup the existing LDAP Database: root@sogo:~# slapcat -v -l 
sogo_orig.ldif
o Create a new LDAP data file: root@sogo:~# sed 's/example//g' 
sogo_orig.ldif > sogo_new.ldif

  where  is the new domain name (don't include the "<" ">")
o If you need to change ".com" use:
root@sogo:~# sed -e 's/example//g' -e 's/com//g' 
sogo_orig.ldif > sogo_new.ldif

  again,  is "org", "net", etc.
o If you need to add additional domain extensions (eg - 
newdom.org.ca), you'll need to edit

  the sogo_new.ldif file manually
o Edit the file: /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif
  and replace all "example" with your new domain name and replace 
"com" with the different gTLD
  if needed. Again, if you need additional domain extensions, you'll 
need to add those to this
  file. Finally, remove the "CRC" line (2nd line). If you don't you'll 
get an error during the

  LDAP import
o Remove (or rename) the existing LDAP database: root@sogo:~# rm -r 
/var/lib/ldap/*

o Import the new LDAP data file: root@sogo:~# slapadd -v -l sogo_new.ldif
--> You should see *no* errors
o Change the ownership of the new LDAP database files (if not, LDAP 
won't run):

root@sogo:~# chown -R openldap: /var/lib/ldap
o Edit /etc/mailname and /etc/saslauthd.conf and replace "example" 
with the new domain
o Edit /etc/postfix/main.cf -> Replace "example" in "myhostname" with 
the new domain
o Edit /etc/postfix/people.ldap -> Replace "example" in "search_base" 
with the new domain

o Update GNUstep:
root@sogo:~# defaults write sogod SOGoTimeZone ""
(eg - ~# defaults write sogod SOGoTimeZone "US/Pacific")
root@sogo:~# defaults write sogod SOGoMailDomain ".com"
o Edit /home/sogo/GNUstep/Defaults/.GNUstepDefaults and replace all 
"example" entries

  with the new domain
o Reboot the ZEG and your new domain name is now in place. The 
"sogo1", "sogo2", and "sogo3" users are



--
Regards,
Mehdi Samani
Challenge Financial Services
714.541.3400 x174
www.cfsnow.com  
--

users@sogo.nu
https://inverse.ca/sogo/lists


(I am no expert)

"example.com" comes from the provisioning of Samba

You'll have to reprovision Samba (e.g. in "Outlook Configuration Guide") 
to change the domain name.


Caveat: You may also have to reprovision OpenChange (or make other changes)


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/17/2016 11:56 AM, Rowland Penny wrote:

On 17/02/16 13:47, Steve Ankeny wrote:

On 02/17/2016 06:44 AM, Rowland Penny wrote:

On 17/02/16 07:39, Dennis Moebus wrote:

Hi all,

I'm sorry for my late response...
First of all, thank you for your advices!!!

I joined my Samba4 Server as a Member to my Windows 2012 AD.
(https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member)
This worked without any problems.

This is my smb.conf, hope this will help :-)

#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
[ redacted text ]




OK, this is never going to work, you need to extend the AD schema 
with the Openchange extensions, this will only work with a Samba4 AD 
DC and specific versions. You could try setting up a Samba4 AD DC 
and adding the Openchange extensions to this, but you will not be 
able to join the windows 2012 DC to it, they are incompatible.


Rowland



Is there no way to join as a Member Server and point the SOGo 
installation to the Windows 2012 AD DB?


What appears to be happening from the error log is it's not "finding 
the first exchange organization"





As far as I am aware, you can join a Samba4 domain member to a windows 
2012 AD, but you will not be able to use Openchange with it.
What I am struggling to understand is that the OP has the Openchange 
lines in his smb.conf, yet the smb.conf is setup as a domain member, 
was it originally a DC and this got changed to a domain member ?


Rowland


It appears he didn't delete the "sample" smb.conf, and when he 
provisioned Samba according to the Inverse instructions ("Native 
Microsoft Outlook Guide"), he provisioned it as an AD but then joined as 
a Member.


The Guide tells you to "add" the OpenChange lines in the smb.conf

THAT's why I wondered if his Samba could point somehow to the Windows 
2012 AD exchange DB




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/17/2016 06:44 AM, Rowland Penny wrote:

On 17/02/16 07:39, Dennis Moebus wrote:

Hi all,

I'm sorry for my late response...
First of all, thank you for your advices!!!

I joined my Samba4 Server as a Member to my Windows 2012 AD.
(https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member)
This worked without any problems.

This is my smb.conf, hope this will help :-)

#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example
#
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
#  - When such options are commented with ";", the proposed setting
#differs from the default Samba behaviour
#  - When commented with "#", the proposed setting is the default
#behaviour of Samba but the option is considered important
#enough to be mentioned here
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not made any basic syntactic
# errors.

#=== Global Settings ===

[global]

netbios name = SOGo
security = ADS
workgroup = 3PC
realm = 3PC.LOCAL

log file = /var/log/samba/%m.log
log level = 1

dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
winbind refresh tickets = yes

winbind trusted domains only = no
winbind use default domain = yes
winbind enum users  = yes
winbind enum groups = yes

# idmap config used for your domain.
# Choose one of the following backends fitting to your
# requirements and add the corresponding configuration.
#  - idmap config ad
#  - idmap config rid
#  - idmap config autorid

###  Configuration required by OpenChange server ###
 dsdb:schema update allowed = true
 dcerpc endpoint servers = epmapper, mapiproxy, dnsserver
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp,
exchange_ds_rfr
### Configuration required by OpenChange server ###

mapistore:namedproperties = mysql
namedproperties:mysql_user = openchange
namedproperties:mysql_pass = *
namedproperties:mysql_host = localhost
namedproperties:mysql_db = openchange
mapistore:indexing_backend =
mysql://openchange:*@localhost/openchange
mapiproxy:openchangedb =
mysql://openchange:*@localhost/openchange

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will 
part of

#   workgroup = WORKGROUP

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS 
Server

#   wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT 
both

;   wins server = w.x.y.z

# This will prevent nmbd to search for NetBIOS names through DNS.
dns proxy = no

 Networking 

# The specific set of interfaces / networks to bind to
# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred
;   interfaces = 127.0.0.0/8 eth0

# Only bind to the named interfaces and/or networks; you must use the
# 'interfaces' option above to use this.
# It is recommended that you enable this feature if your Samba 
machine is

# not protected by a firewall or is a firewall itself.  However, this
# option cannot handle dynamic or non-broadcast interfaces correctly.
;   bind interfaces only = yes



 Debugging/Accounting 

# This tells Samba to use a separate log file for each machine
# that connects
#   log file = /var/log/samba/log.%m

# Cap the size of the individual log files (in KiB).
max log size = 1000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
#   syslog only = no

# We want Samba to log a minimum amount of information to syslog. 
Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to 
log
# through syslog you should set the following parameter to something 
higher.

syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
panic action = /usr/share/samba/panic-action %d


### Authentication ###

# Server role. Defines in which mode Samba will operate. Possible
# values are "standalone server", "member server", "classic primary
# domain controller", "classic backup domain controller", "active
# directory domain controller".
#
# Most people will want "standalone sever" or "member server".
# Running as "active directory domain controller" will require 

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/16/2016 08:57 AM, Maxime RUBINO wrote:

Hi all,

You can found all warning and best practice to join an existing AD to 
a Samba AD, but, Samba4 doesn't support joining a 2012 AD as a Domain 
Controller, so... too bad for you if you have an 2012 AD.


https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD 




I don't believe the original poster was doing that.

He was trying to join an existing Windows AD as a Member Server. The 
question is "How did he do that?"


And, in order to discover his problem, he might need to look at his 
smb.conf (as Rowland suggests)


(I may be wrong, so we'll have to see what he says)


Le 16/02/2016 14:12, Rowland Penny a écrit :

On 16/02/16 12:26, Steve Ankeny wrote:

On 02/16/2016 02:43 AM, Dennis Moebus wrote:

Hey Steve,

I joined my Samba/OpenChange/Sogo Server to my existing Windows Active
Directory as a member. I followed the offical Native Microsoft Outlook
Configuration Guide from sogo.nu
(http://sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuration.pdf). 


Installing the software and entering my crendentials is done and
doublechecked.
But everytime I enter the command:

"openchange_newuser --create dmoebus",

I get the following error:

Traceback (most recent call last):
   File "/usr/sbin/openchange_newuser", line 70, in 
 lp, creds, opts.firstorg, opts.firstou)
   File "/usr/lib/python2.7/dist-packages/openchange/provision.py", 
line

167, in guess_names_from_smbconf
 raise Exception("Cannot find first exchange organization in %s",
exchangedn)
Exception: ('Cannot find first exchange organization in %s',
'CN=Microsoft Exchange,CN=Services,CN=Configuration,CN=SOGO')

What is wrong? Google has no answers for me...

Thank you!
Dennis


(I am no expert)

It cannot find the "first exchange organization" because it's not 
querying your existing Microsoft AD


IF you followed the Inverse, "Native Microsoft Outlook Configuration 
Guide," you installed the Samba & OpenChange packages from Inverse 
(so, you have the correct packages), but how did you provision Samba?


At the moment you can only provision as a DC.



The Guide tells you to provision as an AD controller. However, 
that's not going to "fit" your existing AD


At this point, I'd check the configuration options in the Samba Wiki 
on "joining" as a Member --


https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

Compare the configuration and setups between the Inverse Guide and 
the Samba link, and see what you find.  You're looking for 
differences.  One of the main issues is DNC: "Which AD DC does your 
smb.conf point to?"


There are people more expert in both Samba & OpenChange on this 
list, so maybe someone will see the flaw.


The flaw is probably that he has created a new domain and is now 
trying to join it to another domain, I don't think this is going to 
work, it may help to say one way or the other, if the OP was to post 
the smb.conf from the Sogo machine.




The "first exchange organization" is contained in the database 
controlling the AD (usually an LDB in Samba), but you're connected 
to the Microsoft AD, so it has to look there, and it's not looking 
at the right domain controller.


The question would be, "How did you join your existing Microsoft AD?"




Very good question.

Rowland






--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/16/2016 02:43 AM, Dennis Moebus wrote:

Hey Steve,

I joined my Samba/OpenChange/Sogo Server to my existing Windows Active
Directory as a member. I followed the offical Native Microsoft Outlook
Configuration Guide from sogo.nu
(http://sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuration.pdf).
Installing the software and entering my crendentials is done and
doublechecked.
But everytime I enter the command:

"openchange_newuser --create dmoebus",

I get the following error:

Traceback (most recent call last):
   File "/usr/sbin/openchange_newuser", line 70, in 
 lp, creds, opts.firstorg, opts.firstou)
   File "/usr/lib/python2.7/dist-packages/openchange/provision.py", line
167, in guess_names_from_smbconf
 raise Exception("Cannot find first exchange organization in %s",
exchangedn)
Exception: ('Cannot find first exchange organization in %s',
'CN=Microsoft Exchange,CN=Services,CN=Configuration,CN=SOGO')

What is wrong? Google has no answers for me...

Thank you!
Dennis


(I am no expert)

It cannot find the "first exchange organization" because it's not 
querying your existing Microsoft AD


IF you followed the Inverse, "Native Microsoft Outlook Configuration 
Guide," you installed the Samba & OpenChange packages from Inverse (so, 
you have the correct packages), but how did you provision Samba?


The Guide tells you to provision as an AD controller.  However, that's 
not going to "fit" your existing AD


At this point, I'd check the configuration options in the Samba Wiki on 
"joining" as a Member --


https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

Compare the configuration and setups between the Inverse Guide and the 
Samba link, and see what you find.  You're looking for differences.  One 
of the main issues is DNC: "Which AD DC does your smb.conf point to?"


There are people more expert in both Samba & OpenChange on this list, so 
maybe someone will see the flaw.


The "first exchange organization" is contained in the database 
controlling the AD (usually an LDB in Samba), but you're connected to 
the Microsoft AD, so it has to look there, and it's not looking at the 
right domain controller.


The question would be, "How did you join your existing Microsoft AD?"


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/12/2016 08:44 AM, Dennis Moebus wrote:

unfortunately its not possible to join a windows server 2012 AD with
samba4...

https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD#WARNING

Dennis


joining as a Member Server works (that settles that)

notice, it says "it's not supported" not that it "can't be done" (but 
why go there)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/12/2016 08:28 AM, Martin Simovic wrote:



On 12 Feb 2016, at 14:21, André Schild > wrote:


Am 12.02.2016 um 09:00 schrieb Dennis Möbus:

Hey guys,

is it possible to install/configure OpenChange without Samba4 and 
connect

directly to a Windows Server 2012 Domain Controller?


You can reuse the 2012 Domain for this, but samba 4 has still to be 
present on the box


Better said, you can join Samba4 to the 2012 Domain as a DC. This will 
replicate information already contained in your existing 2012 managed AD.


M.


THAT's a better choice but it may be the Windows 2012 Domain team won't 
allow it


I missed the part where the OP said he controlled the Windows 2012 
Domain Controller



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange without Samba

[Steve Ankeny]

On 02/12/2016 08:21 AM, André Schild wrote:

Am 12.02.2016 um 09:00 schrieb Dennis Möbus:

Hey guys,

is it possible to install/configure OpenChange without Samba4 and 
connect

directly to a Windows Server 2012 Domain Controller?


You can reuse the 2012 Domain for this, but samba 4 has still to be 
present on the box




use the Windows 2012 Domain for domain services and configure Samba as a 
member server (IMO)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] step by step SOGo installation and configuration

[Steve Ankeny]

On 02/01/2016 02:26 PM, Mehdi Samani wrote:

Hi All

Is anybody know the correct step by step SOGo installation and 
configuration???

There is lots of documents but most of hem are tricky.
If you know please assist me.



Do you have an existing server running the prerequisites listed on pg. 4 
of the Installation Guide?


http://sogo.nu/files/docs/SOGo%20Installation%20Guide.pdf

You start there.  You need an existing server running database, 
directory, SMTP & IMAP software, and once those work properly, you 
install SOGo through the Inverse repositories.  SOGo uses your existing 
infrastructure.




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v3.0 released!

[Steve Ankeny]

On 01/28/2016 03:53 AM, Alessandro Briosi wrote:

Il 28/01/2016 04:33, Ludovic Marcotte ha scritto:

Version 2 will continue to be maintained and it is possible to run
both versions 2 and 3 concurrently on the same data set to ease the
transition.


Congratulations.

Can this be concurrently installed on the same server? if so is there
some howto?
I suppose it's possible as SOGo service listens on a specific port,
though I'm not sure the prebuilt packages are usable and also if the
/SOGo is easy to be changed.

Thanks.
Alessandro


Is there an upgrade path from v.2.x.x to v.3..0?  And, are there 
problems with upgrading?




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Why have you choosen SOGO?

[Steve Ankeny]

On 01/26/2016 02:46 PM, Chris wrote:

Dear All,

why have you chosen SOGo? I'm looking for a groupware. SOGo is so far my
favorite, but there are some other (also free) alternatives. Which
programs have you tested? What were advantages / disadvantages?

- Chris



We chose SOGo originally for the shared calendars, and since we used 
Thunderbird exclusively, it served us well.  However, once our business 
grew a dependency on Outlook connectivity, we've been disappointed.


It's not SOGo that's disappointed but OpenChange, as we've never got it 
to work correctly in our domain.


SOGo does extremely well with small, medium and large organizations.  
There are some who use it with several thousand users, and I 
congratulate them on their ability to make it work, but OpenChange does 
not work for us.


My users have moved to a Citrix portal offering Microsoft Outlook and 
other Microsoft products.


What you need to do is assess how you want to use SOGo  What are the 
needs of your organization?  If you need webmail or Thunderbird 
connectivity, SOGo is one of the best groupware & calendar solutions 
available.




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Has anyone had problems with Firefox 42.x and the SOGo interface?

[Steve Ankeny]

On 11/20/2015 12:34 AM, Johannes Faber wrote:



Am 19.11.15 um 17:46 schrieb Steve Ankeny:

On 11/19/2015 10:58 AM, Johannes Faber wrote:


Am 19.11.15 um 16:16 schrieb Steve Ankeny:

I know that Firefox 42.x blocks Java, but there's a work around --

https://www.java.com/en/download/help/firefox_java.xml

However, I get the following error when I attempt to login to the SOGo
web interface --

2015-11-15 20:58:01.607 sogod[1829] 
ERROR(-[NSException(NGMiscellaneous)

initWithFormat:]): missing format!
Nov 15 20:58:01 sogod [1829]: <0x0x7f9f9166bf98[NGImap4Client]>
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): 
catched

non-IMAP4 parsing exception NGSocketException: NGActiveSocket is not
open
Nov 15 20:58:01 sogod [1829]: [ERROR]
<0x0x7f9f9138f368[NGImap4ConnectionManager]> IMAP4 login failed:

Before anyone thinks it's an IMAP error, IMAP works correctly in
Thunderbird 38.3.0 with SOGo Connector/Integrator 31.0.2 and Lightning
4.0.3.1, and it works correctly with 'telnet' commands.

Any suggestion beside "rolling back" to an earlier version of Firefox?


Hi Steve,

SOGo runs without problems on Firefox 42.0 here. And without Java.

Why do you think you need Java? SOGo web frontend is
HTML/CSS/JavaScript only.

Firefox does not connect directly to IMAP but connects thru Apache. It
looks like something mangels your login credentials on the way (virus
scanner, adblocker etc.) or the authenciation between Apache/SOGo/IMAP
is not configured right.

Enable debug logging on your IMAP server and look how SOGo tries to
authenticate.

Regards,

Johannes


debugging is enabled, and there are no IMAP errors (except in the 
SOGo log)


So your imap log says steve can just log in fine WITH SOGo?

If you have Dovecot set auth_verbose and auth_debug to yes.

Have you setup trust between SOGo and your IMAP server or how do you 
pass credentials to your IMAP server?



as for Java, it's required for "other" applications, and it's disabled
by default in Firefox

there is no virus scanner or adblocker on this interface

I've set both Java plugins to "Never activate" but the problem persists.


You don't need Java for SOGo. Only JavaScript. That are two different 
things, altought they sound alike.



thx for the quick reply

here are the errors that follow --

2015-11-19 11:30:12.169 sogod[10430]
ERROR(-[NSException(NGMiscellaneous) initWithFormat:]): missing format!
Nov 19 11:30:12 sogod [10430]: <0x0x7f8c3fa9ed58[NGImap4Client]>
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): catched
non-IMAP4 parsing exception NGSocketException: NGActiveSocket is not 
open

Nov 19 11:30:12 sogod [10430]: [ERROR]
<0x0x7f8c3faad708[NGImap4ConnectionManager]> IMAP4 login failed:
   host=127.0.0.1, user=steve, pwd=yes
   url=imap://steve@127.0.0.1:443/INBOX/
   base=(null)
   base-class=(null))
   = <0x0x7f8c3fa9ed58[NGImap4Client]: login=steve(pwd)
socket=<NGActiveSocket[0x0x7f8c3f801ab8]: mode=
address=<0x0x7f8c3f858288[NGInternetSocketAddress]:
host=localhost.smbdomain.com port=46129>>>
Nov 19 11:30:12 sogod [10430]: <0x3F8BB6F8[SOGoMailFolder]:folderINBOX>
renewing imap4 password
Nov 19 11:30:20 sogod [10416]: [WARN]
<0x0x7f8c3f4b6678[WOWatchDogChild]> pid 10430 has been hanging in the
same request for 1 minutes
2015-11-19 11:31:03.593 sogod[10430]
ERROR(-[NSException(NGMiscellaneous) initWithFormat:]): missing format!
Nov 19 11:31:03 sogod [10430]: <0x0x7f8c3fb23668[NGImap4Client]>
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): catched
non-IMAP4 parsing exception NGSocketException: NGActiveSocket is not 
open

Nov 19 11:31:03 sogod [10430]: [ERROR]
<0x0x7f8c3faad708[NGImap4ConnectionManager]> IMAP4 login failed:

and, it repeats several more times


SOGo can't login with the user name steve. Why? Only your imap log can 
tell you the details.



as I said earlier, the IMAP mailing system is working fine with
Thunderbird (send/receive, etc.)


I guess nobody doubts that you have a working IMAP setup. But it looks 
like your authentication setup between Firefox/Apache/SOGo/IMAP does 
not work.



there is one other error in the SOGo log --

Nov 19 10:13:34 sogod [1866]: 192.168.121.179 "PROPFIND
/SOGo/dav/steve/Calendar/personal/ HTTP/1.1" 401 0/306 0.199 - - 3M
Nov 19 10:13:36 sogod [1866]: 192.168.121.179 "PROPFIND
/SOGo/dav/steve/Calendar/personal/ HTTP/1.1" 401 0/306 0.012 - - 0
Nov 19 10:13:40 sogod [1809]: [ERROR] <0x0x7fc6cc71a428[WOWatchDog]> No
child available to handle incoming request!
Nov 19 10:13:40 sogod [1867]: 192.168.121.179 "OPTIONS
/SOGo/dav/steve/Contacts HTTP/1.1" 401 0/0 0.025 - - 1M
Nov 19 10:13:40 sogod [1809]: [ERROR] <0x0x7fc6cc71a428[WOWatchDog]> No
child available to handle incoming request!
Nov 19 10:13:40 sogod [1867]: 192.168.121.179 "PROPFIND
/SOGo/dav/steve/Mail HTTP/1.1" 401 0/146 0.012 - - 64K
Nov 19 10:13:

[SOGo] Has anyone had problems with Firefox 42.x and the SOGo interface?

[Steve Ankeny]

I know that Firefox 42.x blocks Java, but there's a work around --

https://www.java.com/en/download/help/firefox_java.xml

However, I get the following error when I attempt to login to the SOGo 
web interface --


2015-11-15 20:58:01.607 sogod[1829] ERROR(-[NSException(NGMiscellaneous) 
initWithFormat:]): missing format!
Nov 15 20:58:01 sogod [1829]: <0x0x7f9f9166bf98[NGImap4Client]> 
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): catched 
non-IMAP4 parsing exception NGSocketException:  NGActiveSocket is not open
Nov 15 20:58:01 sogod [1829]: [ERROR] 
<0x0x7f9f9138f368[NGImap4ConnectionManager]> IMAP4 login failed:


Before anyone thinks it's an IMAP error, IMAP works correctly in 
Thunderbird 38.3.0 with SOGo Connector/Integrator 31.0.2 and Lightning 
4.0.3.1, and it works correctly with 'telnet' commands.


Any suggestion beside "rolling back" to an earlier version of Firefox?


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Has anyone had problems with Firefox 42.x and the SOGo interface?

[Steve Ankeny]

On 11/19/2015 10:58 AM, Johannes Faber wrote:


Am 19.11.15 um 16:16 schrieb Steve Ankeny:

I know that Firefox 42.x blocks Java, but there's a work around --

https://www.java.com/en/download/help/firefox_java.xml

However, I get the following error when I attempt to login to the SOGo
web interface --

2015-11-15 20:58:01.607 sogod[1829] ERROR(-[NSException(NGMiscellaneous)
initWithFormat:]): missing format!
Nov 15 20:58:01 sogod [1829]: <0x0x7f9f9166bf98[NGImap4Client]>
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): catched
non-IMAP4 parsing exception NGSocketException:  NGActiveSocket is not 
open

Nov 15 20:58:01 sogod [1829]: [ERROR]
<0x0x7f9f9138f368[NGImap4ConnectionManager]> IMAP4 login failed:

Before anyone thinks it's an IMAP error, IMAP works correctly in
Thunderbird 38.3.0 with SOGo Connector/Integrator 31.0.2 and Lightning
4.0.3.1, and it works correctly with 'telnet' commands.

Any suggestion beside "rolling back" to an earlier version of Firefox?


Hi Steve,

SOGo runs without problems on Firefox 42.0 here. And without Java.

Why do you think you need Java? SOGo web frontend is 
HTML/CSS/JavaScript only.


Firefox does not connect directly to IMAP but connects thru Apache. It 
looks like something mangels your login credentials on the way (virus 
scanner, adblocker etc.) or the authenciation between Apache/SOGo/IMAP 
is not configured right.


Enable debug logging on your IMAP server and look how SOGo tries to 
authenticate.


Regards,

Johannes


debugging is enabled, and there are no IMAP errors (except in the SOGo log)

as for Java, it's required for "other" applications, and it's disabled 
by default in Firefox


there is no virus scanner or adblocker on this interface

I've set both Java plugins to "Never activate" but the problem persists.

thx for the quick reply

here are the errors that follow --

2015-11-19 11:30:12.169 sogod[10430] 
ERROR(-[NSException(NGMiscellaneous) initWithFormat:]): missing format!
Nov 19 11:30:12 sogod [10430]: <0x0x7f8c3fa9ed58[NGImap4Client]> 
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): catched 
non-IMAP4 parsing exception NGSocketException: NGActiveSocket is not open
Nov 19 11:30:12 sogod [10430]: [ERROR] 
<0x0x7f8c3faad708[NGImap4ConnectionManager]> IMAP4 login failed:

  host=127.0.0.1, user=steve, pwd=yes
  url=imap://steve@127.0.0.1:443/INBOX/
  base=(null)
  base-class=(null))
  = <0x0x7f8c3fa9ed58[NGImap4Client]: login=steve(pwd) 
socket=<NGActiveSocket[0x0x7f8c3f801ab8]: mode= 
address=<0x0x7f8c3f858288[NGInternetSocketAddress]: 
host=localhost.smbdomain.com port=46129>>>
Nov 19 11:30:12 sogod [10430]: <0x3F8BB6F8[SOGoMailFolder]:folderINBOX> 
renewing imap4 password
Nov 19 11:30:20 sogod [10416]: [WARN] 
<0x0x7f8c3f4b6678[WOWatchDogChild]> pid 10430 has been hanging in the 
same request for 1 minutes
2015-11-19 11:31:03.593 sogod[10430] 
ERROR(-[NSException(NGMiscellaneous) initWithFormat:]): missing format!
Nov 19 11:31:03 sogod [10430]: <0x0x7f8c3fb23668[NGImap4Client]> 
ERROR(-[NGImap4Client _processUnknownCommandParserException:]): catched 
non-IMAP4 parsing exception NGSocketException: NGActiveSocket is not open
Nov 19 11:31:03 sogod [10430]: [ERROR] 
<0x0x7f8c3faad708[NGImap4ConnectionManager]> IMAP4 login failed:


and, it repeats several more times

as I said earlier, the IMAP mailing system is working fine with 
Thunderbird (send/receive, etc.)


there is one other error in the SOGo log --

Nov 19 10:13:34 sogod [1866]: 192.168.121.179 "PROPFIND 
/SOGo/dav/steve/Calendar/personal/ HTTP/1.1" 401 0/306 0.199 - - 3M
Nov 19 10:13:36 sogod [1866]: 192.168.121.179 "PROPFIND 
/SOGo/dav/steve/Calendar/personal/ HTTP/1.1" 401 0/306 0.012 - - 0
Nov 19 10:13:40 sogod [1809]: [ERROR] <0x0x7fc6cc71a428[WOWatchDog]> No 
child available to handle incoming request!
Nov 19 10:13:40 sogod [1867]: 192.168.121.179 "OPTIONS 
/SOGo/dav/steve/Contacts HTTP/1.1" 401 0/0 0.025 - - 1M
Nov 19 10:13:40 sogod [1809]: [ERROR] <0x0x7fc6cc71a428[WOWatchDog]> No 
child available to handle incoming request!
Nov 19 10:13:40 sogod [1867]: 192.168.121.179 "PROPFIND 
/SOGo/dav/steve/Mail HTTP/1.1" 401 0/146 0.012 - - 64K
Nov 19 10:13:40 sogod [1809]: [ERROR] <0x0x7fc6cc71a428[WOWatchDog]> No 
child available to handle incoming request!
Nov 19 10:13:40 sogod [1867]: 192.168.121.179 "OPTIONS 
/SOGo/dav/steve/Calendar HTTP/1.1" 401 0/0 0.017 - - 0
Nov 19 10:13:40 sogod [1809]: [ERROR] <0x0x7fc6cc71a428[WOWatchDog]> No 
child available to handle incoming request!


repeated several times

thx again for your attention


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo Configuration

[Steve Ankeny]

On 11/03/2015 02:32 AM, 王建常-Test wrote:

Thanks Steve,
I had followed the document to configure these settings, but I don't 
know how to make sure the setting is correct or not on connect to MySQL.

Below are the ERROR logs

Nov 03 07:08:49 sogod [13856]: [ERROR] 
<0x0x7f9535c64810[SOGoSQLUserProfile]> failed to acquire channel for 
URL: mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile
Nov 03 07:08:49 sogod [13856]: [ERROR] 
<0x0x7f9535c64810[SOGoSQLUserProfile]> failed to acquire channel for 
URL: mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile
Nov 03 07:08:49 sogod [13856]: [ERROR] 
<0x0x7f9535c64810[SOGoSQLUserProfile]> failed to acquire channel for 
URL: mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile

My SQL config on sogo.conf
  /* Database configuration (mysql:// or postgresql://) */
  SOGoProfileURL = 
"mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile";
  OCSFolderInfoURL = 
"mysql://sogo:sogo@localhost:3306/sogo/sogo_folder_info";
  OCSSessionsFolderURL = 
"mysql://sogo:sogo@localhost:3306/sogo/sogo_sessions_folder";



My environments:
CentOS7
MariaDB 1:5.5.44-1.el7
OpenLDAP 2.4.39-6.el7
Postfix 2:2.10.1-6.el7
Dovecot 1:2.2.10-4.el7



Sounds like an SQL error -- perhaps the 'sogo' user and password (or grants)

I ran into something similar when I initially configured MariaDB v.10, 
and I "dropped" the user, recreated and granted permissions, etc. until 
I got it right.  Try logging into MySQL with the user 'sogo'


It acts as though it's not "binding" the user to the database.  I can't 
tell you more.




-- Original Message --
From: "Steve Ankeny" <stev...@cinergymetro.net>
To: users@sogo.nu
Sent: 2015/11/2 下午 09:33:52
Subject: Re: [SOGo] SOGo Configuration


On 11/02/2015 01:20 AM, cc.w...@concords.com.tw wrote:

Hi, I'm trying to install and config SOGo for test purpose,
but I have no ideas how to configure SOGo to make it work properly.
I had installed postfix and dovecot with AD integrated and make them 
work
properly, but I don't know how to config SOGo to use global address 
book,

calendar and webmail function.
Is there any step by step configuration guide for a newbie to follow 
up?

Thanks in advance.

documentation here --

http://www.sogo.nu/downloads/documentation.html

faqs here --

http://www.sogo.nu/english/nc/support/faq.html


-- users@sogo.nu
https://inverse.ca/sogo/lists






--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo Configuration

[Steve Ankeny]

On 11/03/2015 07:24 AM, dan le bray wrote:

Hello,
Have you tried establishing a connection using the cli command with the
user/pwd set for SOGo ie, "mysql -u sogo -p sogo -h localhost sogo"?

Just make sure you do have the database created with privileges granted
to the dedicated db user and the mysql daemon accept incoming
connections on the loopback.

If both conditions are met, you may also try using 127.0.0.1 instead of
localhost


yes, I agree . . .


On 03/11/2015 08:32, 王建常-Test wrote:

Thanks Steve,
I had followed the document to configure these settings, but I don't
know how to make sure the setting is correct or not on connect to MySQL.
Below are the ERROR logs

Nov 03 07:08:49 sogod [13856]: [ERROR]
<0x0x7f9535c64810[SOGoSQLUserProfile]> failed to acquire channel for
URL: mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile
Nov 03 07:08:49 sogod [13856]: [ERROR]
<0x0x7f9535c64810[SOGoSQLUserProfile]> failed to acquire channel for
URL: mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile
Nov 03 07:08:49 sogod [13856]: [ERROR]
<0x0x7f9535c64810[SOGoSQLUserProfile]> failed to acquire channel for
URL: mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile
My SQL config on sogo.conf
   /* Database configuration (mysql:// or postgresql://) */
   SOGoProfileURL =
"mysql://sogo:sogo@localhost:3306/sogo/sogo_user_profile";
   OCSFolderInfoURL =
"mysql://sogo:sogo@localhost:3306/sogo/sogo_folder_info";
   OCSSessionsFolderURL =
"mysql://sogo:sogo@localhost:3306/sogo/sogo_sessions_folder";


My environments:
CentOS7
MariaDB 1:5.5.44-1.el7
OpenLDAP 2.4.39-6.el7
Postfix 2:2.10.1-6.el7
Dovecot 1:2.2.10-4.el7


-- Original Message --
From: "Steve Ankeny" <stev...@cinergymetro.net>
To: users@sogo.nu
Sent: 2015/11/2 下午 09:33:52
Subject: Re: [SOGo] SOGo Configuration


On 11/02/2015 01:20 AM, cc.w...@concords.com.tw wrote:

Hi, I'm trying to install and config SOGo for test purpose,
but I have no ideas how to configure SOGo to make it work properly.
I had installed postfix and dovecot with AD integrated and make them
work
properly, but I don't know how to config SOGo to use global address
book,
calendar and webmail function.
Is there any step by step configuration guide for a newbie to follow up?
Thanks in advance.

documentation here --

http://www.sogo.nu/downloads/documentation.html

faqs here --

http://www.sogo.nu/english/nc/support/faq.html


-- users@sogo.nu
https://inverse.ca/sogo/lists





--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo Configuration

[Steve Ankeny]

On 11/02/2015 01:20 AM, cc.w...@concords.com.tw wrote:

Hi, I'm trying to install and config SOGo for test purpose,
but I have no ideas how to configure SOGo to make it work properly.
I had installed postfix and dovecot with AD integrated and make them work
properly, but I don't know how to config SOGo to use global address book,
calendar and webmail function.
Is there any step by step configuration guide for a newbie to follow up?
Thanks in advance.

documentation here --

http://www.sogo.nu/downloads/documentation.html

faqs here --

http://www.sogo.nu/english/nc/support/faq.html


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: Aw: [SOGo] SOGo and Outlook and samba 4 AD

[Steve Ankeny]

On 10/29/2015 07:29 AM, "Daniel Müller" wrote:
As far As I can say "openchange/samba" needs to be the boss. Member 
Server will not work.


I believe you'll also find you'll need to use the Inverse Samba packages 
for your AD DC


4.1.18+dfsg-3~inverse1

You "might" get by joining the "second" Samba AD as an additional DC

https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Outlook clients failure (MAPIStoreIOException)

[Steve Ankeny]

On 10/26/2015 01:54 PM, Rowland Penny wrote:
Two things, you can ignore the 'setproctitle' lines, these are very 
common and are harmless.
You should not start smbd and samba-ad-dc together, you should just 
start samba-ad-dc, this will start the 'samba' daemon, which will then 
start the 'smbd' daemon and on later versions of samba4, it will also 
start the 'winbindd' daemon. Note that you should never start the 
'nmbd' daemon if running a Samba4 AD DC.


Rowland


We've discussed this before, Rowland.

When I install the Inverse Samba packages, I have the following running --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 814
adam@sogo:~$

I've tried "disabling" nmbd but the only way I've found was to change 
the filename at '/etc/init.d/nmbd'


It doesn't seem to "harm" my Samba AD DC (but it might have an effect on 
my OpenChange, not sure)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] rpcproxy not working with outlook 2007 / 2010

[Steve Ankeny]

On 10/23/2015 09:32 AM, Chris Coleman wrote:

And this tip:
"If you face strange issues from Microsoft Outlook, you might want to 
remove any data associated with the user from the SOGo server and 
recreate a Microsoft Outlook profile. To remove any data associated to 
a user, use the openchange_cleanup.py script distributed with sogo. 
The script can be found in |/usr/share/doc/sogo/| 
(|/usr/share/sogo-VERSION/| on |RHEL|). To reset a user, run the 
script as root: |python openchange_cleanup.py username|. See the usage 
output for additional options."


Chris . . .

What is meant by "strange issues?"  Can you give examples?

For instance, I'm receiving, "The name cannot be resolved.  The 
requested operation failed because no search criteria were given to the 
Microsoft Exchange Address Book." -- with errors in '/ocsmanager.log' --


Starting server in PID 1885.
serving on http://127.0.0.1:5000
2015-10-17 07:44:28,313 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 0] client did not pass auth cookie
2015-10-17 07:44:28,321 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 1] client did not pass auth cookie
2015-10-17 07:44:28,358 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 1] acquiring lock /var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock 
(1885)
2015-10-17 07:44:29,019 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 2] acquiring lock /var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock 
(1885)


Would clearing out any existing data and recreating an Outlook profile 
benefit my users?


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/16/2015 09:41 AM, Steve Ankeny wrote:

On 10/16/2015 09:18 AM, Martin Simovic wrote:


On 15 Oct 2015, at 18:13, Chris Coleman <ch...@espacenetworks.com> 
wrote:



On 10/15/2015 10:32 AM, Martin Simovic wrote:


On 14 Oct 2015, at 21:06, Chris Coleman <ch...@espacenetworks.com> 
wrote:


You can try:
sudo openchange_provision --standalone --ignore_already_exists


This command line switch seems to be unimplemented: 
openchange_provision: error: no such option: —ignore_already_exists


I am using openchange 3:2.4-zentyal6 package from inverse 
repository. Maybe the way to go is to delete 
the CN=ms-Exch-Access-Control-Map attribute directly from 
directory? I am going to find out the hard way ..


Regards
Martin.
Sorry, try --ignore-already-exists (instead of 
--ignore_already_exists), e.g.

sudo openchange_provision --standalone --ignore-already-exists


Yes, that works, Thanks. Now I get further but:

root@pdc:~# openchange_provision --standalone --ignore-already-exists
NOTE: This operation can take several minutes
[+] Step 1: Register Exchange OIDs
[+] Step 2: Add Exchange attributes to Samba schema
[+] Step 3: Add Exchange auxiliary classes to Samba schema
[+] Step 4: Add Exchange objectCategory to Samba schema
[+] Step 5: Add Exchange containers to Samba schema
[+] Step 6: Add Exchange *sub* containers to Samba schema
[+] Step 7: Add Exchange CfgProtocol subcontainers to Samba schema
[+] Step 8: Add Exchange mailGateway subcontainers to Samba schema
[+] Step 9: Add Exchange classes to Samba schema
[+] Step 10: Add possSuperior attributes to Exchange classes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_possSuperior.ldif

[+] Step 11: Extend existing Samba classes and attributes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_modify.ldif

[+] Step 12: Generic Exchange configuration objects
[+] Step 13: Exchange Organization objects
Error: "(64, 'structural objectClass msExchAdminGroup is not a valid 
child class for CN=Administrative Groups,CN=First 
Organization,CN=Microsoft 
Exchange,CN=Services,CN=Configuration,DC=example,DC=com')" when 
adding element:


And I continue stuck. Still unable to provision entirely or 
deprovision either.


Best Regards
Martin.



didn't get a chance to do this until today . . .

mine was successful --


AND, I was able to configure and start 'openchange-ocsmanager' WITHOUT 
shutting down Samba-AD-DC  That solves one problem I've had with 
DCERPC/OpenChange!  Thanks for all who helped over the last few weeks.


Now, when I tried to setup the Outlook mailbox, I received the error --

"The name cannot be resolved.  The requested operation failed because no 
search criteria were given to the Microsoft Exchange Address Book."


I followed the directions in the "Outlook Configuration Guide," pg 18

When I looked in '/var/log/ocsmanager/ocsmanager.log,' I found the 
following --


Starting server in PID 1885.
serving on http://127.0.0.1:5000
2015-10-17 07:44:28,313 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 0] client did not pass auth cookie
2015-10-17 07:44:28,321 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 1] client did not pass auth cookie
2015-10-17 07:44:28,358 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 1] acquiring lock /var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock 
(1885)
2015-10-17 07:44:29,019 INFO  [openchange.web.auth.NTLMAuthHandler] 
[worker 2] acquiring lock /var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock 
(1885)


So, it appears to be an authentication issue.  Any suggestions on where 
to start?


As far as I know, it's using HTTPS & SSL (it gives me the certificate)  
I added 'autodiscover.smbdomain.com' to the hosts file on the Windows 
Remote Desktop Server where the client resides (and, it "pings" correctly)


I get no response from '_autodiscover._tcp.smbdomain.com. IN SRV 0 0 443 
sogo.smbdomain.com.'


Maybe I need to add a CNAME to my Samba DNS records?

Anyway, I appreciate any ideas I can try in troubleshooting the problem.

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/16/2015 09:18 AM, Martin Simovic wrote:



On 15 Oct 2015, at 18:13, Chris Coleman > wrote:




On 10/15/2015 10:32 AM, Martin Simovic wrote:



On 14 Oct 2015, at 21:06, Chris Coleman  
wrote:


You can try:
sudo openchange_provision --standalone --ignore_already_exists


This command line switch seems to be unimplemented: 
openchange_provision: error: no such option: —ignore_already_exists


I am using openchange 3:2.4-zentyal6 package from inverse 
repository. Maybe the way to go is to delete 
the CN=ms-Exch-Access-Control-Map attribute directly from directory? 
I am going to find out the hard way ..


Regards
Martin.
Sorry, try --ignore-already-exists (instead of 
--ignore_already_exists), e.g.

sudo openchange_provision --standalone --ignore-already-exists


Yes, that works, Thanks. Now I get further but:

root@pdc:~# openchange_provision --standalone --ignore-already-exists
NOTE: This operation can take several minutes
[+] Step 1: Register Exchange OIDs
[+] Step 2: Add Exchange attributes to Samba schema
[+] Step 3: Add Exchange auxiliary classes to Samba schema
[+] Step 4: Add Exchange objectCategory to Samba schema
[+] Step 5: Add Exchange containers to Samba schema
[+] Step 6: Add Exchange *sub* containers to Samba schema
[+] Step 7: Add Exchange CfgProtocol subcontainers to Samba schema
[+] Step 8: Add Exchange mailGateway subcontainers to Samba schema
[+] Step 9: Add Exchange classes to Samba schema
[+] Step 10: Add possSuperior attributes to Exchange classes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_possSuperior.ldif

[+] Step 11: Extend existing Samba classes and attributes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_modify.ldif

[+] Step 12: Generic Exchange configuration objects
[+] Step 13: Exchange Organization objects
Error: "(64, 'structural objectClass msExchAdminGroup is not a valid 
child class for CN=Administrative Groups,CN=First 
Organization,CN=Microsoft 
Exchange,CN=Services,CN=Configuration,DC=example,DC=com')" when adding 
element:


And I continue stuck. Still unable to provision entirely or 
deprovision either.


Best Regards
Martin.



didn't get a chance to do this until today . . .

mine was successful --

adam@sogo:~$ sudo openchange_provision --standalone --ignore-already-exists
NOTE: This operation can take several minutes
[+] Step 1: Register Exchange OIDs
[+] Step 2: Add Exchange attributes to Samba schema
[+] Step 3: Add Exchange auxiliary classes to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_auxiliary_class.ldif

[+] Step 4: Add Exchange objectCategory to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_objectCategory.ldif

[+] Step 5: Add Exchange containers to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_container.ldif

[+] Step 6: Add Exchange *sub* containers to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_subcontainer.ldif

[+] Step 7: Add Exchange CfgProtocol subcontainers to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_sub_CfgProtocol.ldif

[+] Step 8: Add Exchange mailGateway subcontainers to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_sub_mailGateway.ldif

[+] Step 9: Add Exchange classes to Samba schema
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema.ldif

[+] Step 10: Add possSuperior attributes to Exchange classes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_possSuperior.ldif

[+] Step 11: Extend existing Samba classes and attributes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_modify.ldif

[+] Step 12: Generic Exchange configuration objects
[+] Step 13: Exchange Organization objects
[+] Step 14: Update generic Exchange configuration objects
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_configuration_finalize.ldif

[SUCCESS] Done!
[+] Step 1: Exchange Samba registration
[SUCCESS] Done!
[+] Step 1: Register Exchange Samba as the main server
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_configuration_as_main.ldif

[SUCCESS] Done!
adam@sogo:~$

adam@sogo:~$ sudo openchange_provision --openchangedb --openchangedb-uri 
'mysql://openchange-user:$Passwd@localhost/openchange'

Setting up openchange db
[+] Public Folders
===
* Public Folder Root  : 0x0101 
(72057594037927937)
* IPM_SUBTREE : 0x0201 
(144115188075855873)
/usr/lib/python2.7/dist-packages/openchange/mailbox.py:408: *Warning: 
Unsafe statement* written to the binary log using statement format since 
BINLOG_FORMAT = STATEMENT. Statements writing to a table with an 

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/14/2015 03:06 PM, Chris Coleman wrote:



On 10/14/2015 7:58 AM, Steve Ankeny wrote:

On 10/14/2015 12:25 AM, Chris Coleman wrote:
It appears that the openchange.org documentation page is showing an 
example of how to setup a zentyal server for an openchange developer 
to run code against the server, with  python scripts included to 
help get it going for the tutorial.  It seems in a different order 
but really all it means is you should do all the things in the sogo 
PDF setup document for openchange (native outlook client 
compatibility PDF) first, which initializes certain data inside the 
databases, so that their openchange developer server setup doesn't 
produce errors due to uninitialized data.


forgot to say, I am considering removing ALL of OpenChange (maybe 
even purging) and starting again


Would this be the best way around my problem?



You can try:
sudo openchange_provision --standalone --ignore_already_exists


thx, Chris . . .

I'll try this, and if not successful, post my errors on the developer's 
list as you suggest.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/14/2015 12:25 AM, Chris Coleman wrote:
It appears that the openchange.org documentation page is showing an 
example of how to setup a zentyal server for an openchange developer 
to run code against the server, with  python scripts included to help 
get it going for the tutorial.  It seems in a different order but 
really all it means is you should do all the things in the sogo PDF 
setup document for openchange (native outlook client compatibility 
PDF) first, which initializes certain data inside the databases, so 
that their openchange developer server setup doesn't produce errors 
due to uninitialized data.


I'm stuck!  Running, 'sudo openchange_provision --standalone' FAILS

This is after I successfully ran 'sudo openchange_provision --deprovision'

It fails with the following errors --

adam@sogo:~$ sudo openchange_provision --standalone
NOTE: This operation can take several minutes
[+] Step 1: Register Exchange OIDs
[+] Step 2: Add Exchange attributes to Samba schema
Error: "(68, 'Entry 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com 
*already exists*')" when adding element:

#
# ms-Exch-Access-Control-Map
# Contains the mapping for the access controls.
#
dn: 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com

objectClass: top
objectClass: attributeSchema
cn: ms-Exch-Access-Control-Map
distinguishedName: 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com

attributeID: 1.2.840.113556.1.4.7000.102.64
attributeSyntax: 2.5.5.12
isSingleValued: TRUE
showInAdvancedViewOnly: TRUE
adminDisplayName: ms-Exch-Access-Control-Map
adminDescription: ms-Exch-Access-Control-Map
oMSyntax: 64
searchFlags: 0
lDAPDisplayName: msExchAccessControlMap
name: ms-Exch-Access-Control-Map
#schemaIDGUID: 8ff54464-b093-11d2-aa06-00c04f8eedd8
isMemberOfPartialAttributeSet: FALSE
objectCategory: 
CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=smbdomain,DC=com


[!] error while provisioning the Exchange schema classes (68): Entry 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com 
*already exists*

Traceback (most recent call last):
  File "/usr/sbin/openchange_provision", line 115, in 
*ignore_already_exists*=opts.ignore_already_exists)
  File "/usr/lib/python2.7/dist-packages/openchange/provision.py", line 
1062, in provision

*ignore_already_exists*=ignore_already_exists)
  File "/usr/lib/python2.7/dist-packages/openchange/provision.py", line 
470, in install_schemas

*ignore_already_exists*=ignore_already_exists)
  File "/usr/lib/python2.7/dist-packages/openchange/provision.py", line 
251, in provision_schema

ldif_apply_method(el, ['relax:0'])
  File "/usr/lib/python2.7/dist-packages/samba/__init__.py", line 224, 
in add_ldif

self.add(msg, controls)
_*ldb.LdbError*: (68, 'Entry 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com 
*already exists*')

adam@sogo:~$

Are there any switches I can use with the command to provision that 
EXCEPTS these errors?


And, where can I find this stuff on my own?  Documentation is SCARCE 
with OpenChange, IMO


Thanks for all your help!  I know it's not your responsibility but it's 
appreciated.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/14/2015 12:25 AM, Chris Coleman wrote:
It appears that the openchange.org documentation page is showing an 
example of how to setup a zentyal server for an openchange developer 
to run code against the server, with  python scripts included to help 
get it going for the tutorial.  It seems in a different order but 
really all it means is you should do all the things in the sogo PDF 
setup document for openchange (native outlook client compatibility 
PDF) first, which initializes certain data inside the databases, so 
that their openchange developer server setup doesn't produce errors 
due to uninitialized data.


forgot to say, I am considering removing ALL of OpenChange (maybe even 
purging) and starting again


Would this be the best way around my problem?


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/12/2015 05:36 PM, Chris Coleman wrote:



On 10/12/2015 12:20 PM, Steve Ankeny wrote:

On 10/12/2015 10:28 AM, Chris Coleman wrote:
You have to deactivate each of your 8 user mailboxes before the 
command to deprovision the server will work.
Try to devprovision the users with the commands shown at the bottom 
of this page:

http://www.openchange.org/documentation/howto/zentyal_developer.html


ok . . .

first of all, there is no 'backends' folder at 
'/usr/lib/python2.7/dist-packages/openchange/'


secondly, the only 'sample.py' is found at 
'/usr/lib/python2.7/dist-packages/twisted/trial/test/sample.py'


using THAT 'sample.py' to '--deprovision' results in the following --

adam@sogo:~$ sudo python 
/usr/lib/python2.7/dist-packages/twisted/trial/test/sample.py -d0 
--deprovision --username=michael

adam@sogo:~$

ran it for each of 8 users, then reran the 'openchange_provision 
--deprovision" command --


adam@sogo:~$ sudo openchange_provision --deprovision
[!] Unable to unregister this server, it's being used for: handling 8 
mailboxes

adam@sogo:~$





Do this:
sudo openchange_newuser --disable 
sudo openchange_newuser --disable 
sudo openchange_newuser --disable 
etc...
sudo openchange_provision --deprovision

If that doesn't work, do this:
sudo openchange_newuser --delete 
sudo openchange_newuser --delete 
etc...
sudo openchange_provision --deprovision



ok, worked perfectly . . .

adam@sogo:~$ sudo openchange_newuser --disable user1
[+] Account user1 disabled
adam@sogo:~$ sudo openchange_newuser --disable user2
[+] Account user2 disabled
. . . . . . . . . .
adam@sogo:~$ sudo openchange_provision --deprovision
[+] Step 1: Unregistering Openchange server
[+] Step 1: Remove Exchange configuration objects
Removing openchange db
adam@sogo:~$

Thanks!



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/13/2015 02:52 PM, Chris Coleman wrote:



On 10/13/2015 1:55 PM, Steve Ankeny wrote:

On 10/13/2015 07:12 AM, Steve Ankeny wrote:

On 10/12/2015 05:36 PM, Chris Coleman wrote:



On 10/12/2015 12:20 PM, Steve Ankeny wrote:

On 10/12/2015 10:28 AM, Chris Coleman wrote:
You have to deactivate each of your 8 user mailboxes before the 
command to deprovision the server will work.
Try to devprovision the users with the commands shown at the 
bottom of this page:

http://www.openchange.org/documentation/howto/zentyal_developer.html


on the site listed above, I see the following --

"You MUST create the OpenChange user and log into its mailbox once 
with Outlook prior following this guide."


I've never seen documentation telling me to login with Outlook using 
the 'openchange-user' account.  I've tested the account in MySQL by 
logging in as 'openchange-user' but never using Outlook, Dovecot, etc.


Could this be why so many are having issues with OpenChange? What is 
the purpose of this login?



Yes, it's probable that using Outlook, as documented, to do a first 
login as "openchange-user", will create/initialize some basic required 
data, which will be needed for the proper running openchange.


You should try and do that first login as openchange-user, and see if 
the issues with OpenChange are resolved, and post your results back to 
the list.



will do . . .

I'm in the midst of provisioning OpenChange (after hours)

Am I reading it correctly, "Login as 'openchange-user' with Outlook 
AFTER following the guide?"


In other words, speaking the language of the SOGo Outlook Configuration 
guide --


(1) install the OpenChange packages
(2) create the 'openchange-user'
(3) provision the server as '--standalone' and '--openchangedb 
--openchangedb-uri', etc.
(4) THEN login as 'openchange-user' FIRST before attempting to configure 
any other user


There's a typo in the instructions on that page if I'm reading it right.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/13/2015 07:12 AM, Steve Ankeny wrote:

On 10/12/2015 05:36 PM, Chris Coleman wrote:



On 10/12/2015 12:20 PM, Steve Ankeny wrote:

On 10/12/2015 10:28 AM, Chris Coleman wrote:
You have to deactivate each of your 8 user mailboxes before the 
command to deprovision the server will work.
Try to devprovision the users with the commands shown at the bottom 
of this page:

http://www.openchange.org/documentation/howto/zentyal_developer.html


on the site listed above, I see the following --

"You MUST create the OpenChange user and log into its mailbox once with 
Outlook prior following this guide."


I've never seen documentation telling me to login with Outlook using the 
'openchange-user' account.  I've tested the account in MySQL by logging 
in as 'openchange-user' but never using Outlook, Dovecot, etc.


Could this be why so many are having issues with OpenChange?  What is 
the purpose of this login?



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/07/2015 11:23 PM, Chris Coleman wrote:



On 10/7/2015 4:46 PM, Mario Gruenwald wrote:

Unfortunately this issue is still open. Nobody here who can help me?

kindly regards
Mario

On Fri, Aug 21, 2015 at 10:15:39AM +0200, Mario Gruenwald wrote:

Hi

I guess my openchange config is broken. Therefore i want to cleanup and
restart from beginning. Problem is:

# openchange_provision --deprovision
[!] Unable to unregister this server, it's being used for: handling 2 mailboxes

I already searched in documentation and forums without success. There are a
lot of commands (openchangeclient, mapiprofile, sogo-tool, ...). I don't know
which to use and/or doesn't find the correct options.

I am even not able to list which users are in openchange and which mailboxes
are handled.

Anyone out there, who can help me?

regards
Mario


Mario,
Zentyal are the maintainers of openchange.
The exact instructions to deprovision openchange, with explanation, 
are here:

http://labs.zentyal.org/zentyal-openchange-as-an-additional-exchange-server/
Search in the page for keyword "Step 6".
Here is the text, without the screenshots.


"Step 6 – Undo the traveled road

If for any reason, you want to uninstall the openchange service, one 
of the features added with Zentyal 3.4 is a way to do that. However, 
to be able to do it, you should not be using any resource from that 
server. Basically, you need to move, disable or remove all mailboxes 
hosted on it.


OpenChange deprovision fails because there is an active mailbox

Zentyal does not support yet any way to move mailboxes from one server 
to other server, so you would need to use Microsoft Exchange tools if 
you want to keep those mailboxes. In this guide we are going to just 
disable it.


OpenChange mailbox deactivation

We are now ready to deprovision OpenChange:

OpenChange deprovision is successful

And we can see that this server is not available anymore from Windows"



Was the original poster Mario able to complete the '--deprovision' 
operation?


I've not been able to --

adam@sogo:~$ sudo openchange_provision --deprovision
[!] Unable to unregister this server, it's being used for: handling 8 
mailboxes

adam@sogo:~$


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

[Steve Ankeny]

On 10/12/2015 10:28 AM, Chris Coleman wrote:
You have to deactivate each of your 8 user mailboxes before the 
command to deprovision the server will work.
Try to devprovision the users with the commands shown at the bottom of 
this page:

http://www.openchange.org/documentation/howto/zentyal_developer.html


ok . . .

first of all, there is no 'backends' folder at 
'/usr/lib/python2.7/dist-packages/openchange/'


secondly, the only 'sample.py' is found at 
'/usr/lib/python2.7/dist-packages/twisted/trial/test/sample.py'


using THAT 'sample.py' to '--deprovision' results in the following --

adam@sogo:~$ sudo python 
/usr/lib/python2.7/dist-packages/twisted/trial/test/sample.py -d0 
--deprovision --username=michael

adam@sogo:~$

ran it for each of 8 users, then reran the 'openchange_provision 
--deprovision" command --


adam@sogo:~$ sudo openchange_provision --deprovision
[!] Unable to unregister this server, it's being used for: handling 8 
mailboxes

adam@sogo:~$



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] General Question

[Steve Ankeny]

On 10/09/2015 08:17 AM, Christian Eichert wrote:

OK, so it looks like I need a example of using SogoUserSources with Mysql
Can someone help please?


Am 09-10-2015 um 13:29 schrieb Christian Eichert:

I am a bit confused about SOGo
It looks to be a nice combination of webmail calendar and addressbook.

I have installed it and configured it as best I can, (of course its 
not working yet, else everybody would use it) and now I reached the 
point where it comes to the user configuration. I am using Dovecot 
with Postfix and virtual users in a MySQL database.


Now SOG is demanding a LDAP usermanagement.
Is there a way to access this already existing user database I am 
using with dovecot?


mfg
Christian Eichert



Have you looked in '/etc/sogo/sogo.conf'?

  /* SQL authentication example */
  /*  These database columns MUST be present in the view/table:
   *c_uid - will be used for authentication -  it's the username or 
usern...@domain.tld)
   *c_name - which can be identical to c_uid -  will be used to 
uniquely identify entries
   *c_password - password of the user, plain-text, md5 or sha 
encoded for now

   *c_cn - the user's common name - such as "John Doe"
   *mail - the user's mail address
   *  See the installation guide for more details
   */
  //SOGoUserSources =
  //  (
  //{
  //  type = sql;
  //  id = directory;
  //  viewURL = "mysql://sogo:$Isaiah53@127.0.0.1:3306/sogo/sogo_view";
  //  canAuthenticate = YES;
  //  isAddressBook = YES;
  //  userPasswordAlgorithm = md5;
  //}
  //  );

That plus the Installation guide should walk you through it.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Outlook question . . .

[Steve Ankeny]

On 09/28/2015 07:40 AM, Martin Simovic wrote:

Hi,

On 25 Sep 2015, at 18:46, Steve Ankeny <stev...@cinergymetro.net 
<mailto:stev...@cinergymetro.net>> wrote:


On 09/25/2015 12:16 PM, Martin Simovic wrote:

Hi

On 25 Sep 2015, at 16:43, Steve Ankeny <stev...@cinergymetro.net> 
wrote:


I am using MariaDB 10.0.21, Ubuntu Trusty 14.04, Dovecot & Postfix, 
OpenChange/OCSManager 2.4


*What can I do to troubleshoot or resolve this 
problem?*OpenChange/OCSManager installed after the recent upgrade 
but when they're initiated by DCERPC calls, they shutdown my Samba 
AD DC server.


Two questions:

1. What version of Samba do you use?
2. Have you EVER had working Openchange setup?

Best Regards
Martin.


1 --

adam@sogo:~$ sudo apt-cache policy samba
samba:
  Installed: 2:4.1.18+dfsg-3~inverse1
  Candidate: 2:4.1.18+dfsg-3~inverse1
  Version table:
 *** 2:4.1.18+dfsg-3~inverse1 0
600 http://inverse.ca/ubuntu/ trusty/trusty amd64 Packages
100 /var/lib/dpkg/status
 2:4.1.6+dfsg-1ubuntu2.14.04.9 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty-updates/main 
amd64 Packages

 2:4.1.6+dfsg-1ubuntu2.14.04.7 0
500 http://security.ubuntu.com/ubuntu/ trusty-security/main 
amd64 Packages

 2:4.1.6+dfsg-1ubuntu2 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 
Packages

adam@sogo:~$

2 --

I have NEVER had a working OpenChange setup.

As I said previously, it ran fine all day yesterday until someone 
attempted to use Outlook.  And, what I mean by that is, "All the 
appropriate servers and services ran together until I attempted to 
setup Outlook."





1.This Samba version is not very stable when used together with 
openchange. Version 4.1.17 packaged by Zentyal seems to have much less 
problems.
2. Does not surprise me. I believe that openchange is not production 
ready, especially not with large mailboxes. Could not get it to sync 
my 3,5GB mailbox reliably ever.


Regards
Martin.




Samba is updating their documentation wiki --

https://wiki.samba.org/index.php/Operating_system_requirements

On the list of Operating system requirements/Dependencies, I found I am 
missing 'xattr' & 'setproctitle'


The last is interesting, because I've had an error in my 'log.samba' 
from the first regarding 'setproctitle,' and the first in interesting, 
because the standard 'domain provision' utilizes 'xattr'  I'll install 
both libraries.


And, I will make sure I have these two installed before I try any "new" 
Samba AD DC configurations.


Many have had problems with OpenChange, so I'm not surprised by your 
observation.  I am not ready to remove my existing Samba 4.1.18 lest I 
go through the same problems I had installing it.


Ludovic tells me they build the ZEG after each upgrade from the 
repositories with no problem.  I am waiting for his response to my 
earlier questions.  Meanwhile, I am preparing to "build from scratch" 
yet again.


I want to get this right.  Thx for your response.

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Outlook question . . .

[Steve Ankeny]

On 09/25/2015 08:38 PM, Ludovic Marcotte wrote:

On 25/09/2015 15:40, Steve Ankeny wrote:
(1) What are the differences between Ubuntu Samba 4.1.6 and Inverse 
Samba 4.1.18 in terms of libraries?  Could there be some library or 
package from 4.1.6 which if removed would cause 4.1.18 to work properly?


It seems to me this might be the source of my problems, as I 
originally installed 4.1.6
If you use our repository for Samba packages, all should be 
up-to-date. Here is the bash Samba/OpenChancge function used in the 
script to prepare the ZEG:


function setupSambaOpenChange {
  mv /etc/samba/smb.conf /etc/samba/smb.conf.bak || true

  apt-get -y install samba openchangeserver sogo-openchange \
 openchangeproxy python-ocsmanager 
openchange-ocsmanager openchange-rpcproxy python-sievelib python-spyne 
python-rpclib python-mysqldb


  ln -s /etc/apache2/conf.d/ocsmanager.conf 
/etc/apache2/conf-available/ocsmanager.conf
  ln -s /etc/apache2/conf.d/rpcproxy.conf 
/etc/apache2/conf-available/rpcproxy.conf

  cat >/etc/apache2/conf.d/rpcproxy.conf <

Order deny,allow
Allow from all

= 2.4>
Require all granted


  SetEnv RPCPROXY_LOGLEVEL INFO
  SetEnv NTLMAUTHHANDLER_WORKDIR /var/cache/ntlmauthhandler
  SetEnv SAMBA_HOST 127.0.0.1
  WSGIPassAuthorization On
  WSGIProcessGroup %{GLOBAL}


WSGIScriptAlias /rpc/rpcproxy.dll 
/usr/lib/openchange/web/rpcproxy/rpcproxy.wsgi
WSGIScriptAlias /rpcwithcert/rpcproxy.dll 
/usr/lib/openchange/web/rpcproxy/rpcproxy.wsgi

EOF



My 'rpcproxy.conf' was not EXACTLY the same as here, but I've changed it.

It was missing the 'IfVersion' lines and specifically, 'Order, 
deny,allow' 'Allow from all'


THAT may or may not make a difference but I've modified mine to match 
your script.



  # ocsmanager
  cat >/etc/ocsmanager/ocsmanager.ini <ldap://127.0.0.1
port = 389
bind_dn = cn=administrator,cn=Users,dc=example,dc=com
bind_pw = %1OpenChange
basedn = cn=Users,dc=example,dc=com

[auth:single]
username = openchange
password = {SSHA}I6Hy5Wv0wuxyXvMBFWFQDVVN12_CLaX9



How important is THIS password with THIS hash?

The same hash is used in the Configuration guide for 'openchange$123'

Should it not be the hash generated in MySQL for "my" password? (if I've 
changed it)



[server:main]
use = egg:Paste#http
host = 127.0.0.1
port = 5000
protocol_version = HTTP/1.1

[app:main]
use = egg:ocsmanager
full_stack = true
static_files = true
cache_dir = %(here)s/data
beaker.session.key = ocsmanager
beaker.session.secret = SDyKK3dKyDgW0mlpqttTMGU1f
app_instance_uuid = {ee533ebc-f266-49d1-ae10-d017ee6aa98c}
NTLMAUTHHANDLER_WORKDIR = /var/cache/ntlmauthhandler
SAMBA_HOST = 127.0.0.1

[rpcproxy:ldap]
host = localhost
port = 389
basedn = CN=Users,DC=example,DC=com


set debug = true

[autodiscover]

[autodiscover:rpcproxy]
enabled = true

[outofoffice]

[outofoffice:file]
sieve_script_path = /var/vmail/\$domain/\$user/sieve-script


My line reads 'sieve_script_path = /var/vmail/$domain/$user/sieve-script'

The example in the Configuration guide does not include the back slashes.

How important are the back slashes?  I will modify mine and test it.


sieve_script_path_mkdir = false

[outofoffice:managesieve]
secret = secret

[loggers]
keys = root

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = INFO
handlers = console

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[formatter_generic]
format = %(asctime)s %(levelname)-5.5s [%(name)s] [%(threadName)s] 
%(message)s

EOF

  # enable modules
  a2enconf rpcproxy
  a2enconf ocsmanager

  # it gets better, provision will fail if smb.conf exists
  mv /etc/samba/smb.conf /etc/samba/smb.conf.bak || true
  rm -rf /var/lib/samba/private/* || true

  samba-tool domain provision --realm=$DOMAINNAME.$TLD \
  --domain=$DOMAINNAMEUPPER \
  --adminpass='%1OpenChange' \
  --server-role='domain controller'

  samba-tool user setexpiry administrator --noexpiry

  cat >/etc/samba/smb.conf <

Again, the Configuration guide lists ONLY 'dcerpc endpoint servers = 
+epmapper, +mapiproxy'


I have been using 'dcerpc endpoint servers = +mapiproxy'

How important are these DCERPC calls when Samba AD includes 'epmapper' & 
'dnsserver' natively?


adam@sogo:~$ samba-tool testparm -v | grep 'dcerpc endpoint servers'

dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, 
netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, 
eventlog6, backupkey, dnsserver

adam@sogo:~$

It is my understanding that invoking 'epmapper' & 'dnsserver' through 
DCERPC calls disables --


wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, 
unixinfo, browser, eventlog6, backupkey


Are we sure we want to "turn off" those endpoint servers?


dcerpc_mapiproxy:server = true
  dcerpc_map

Re: [SOGo] Outlook question . . .

[Steve Ankeny]

On 09/24/2015 04:12 PM, Steve Ankeny wrote:
Setting up "new" Outlook 2010 account following the "Outlook 
Configuration" guide (pg 18)


It's giving me the following error --





"The action cannot be completed.  The name cannot be matched to a name 
in the address list."


Is this a server error or an Outlook error?  It appears to me to be an 
Outlook error.


Should the account be setup within Outlook as well as under "Control 
Panel | Mail"?


I am using all the suggestions on pg 18  Thx



update ---

DCERPC calls "still" shutdown Samba AD DC (on my system)

Samba AD DC with OpenChange ran perfectly yesterday for almost 12 
hours.  However, it should be noted that no one was attempting to use 
Outlook until myself after 4PM EDT  That's when things went screwy.


I worked my way through the suggestions in the Configuration Guide 
(i.e., enabling Apache2 mods & confs, disabling 'reqtimeout' then 
querying 'rpcproxy.dll' over https/http from Firefox -- everything worked)


However, I was also not able to setup an Outlook 2010 account as 
evidenced above.


It was the querying 'rpcproxy.dll' that gave me suspicion.  It said 
"more data needed"


After those attempts, I found that OpenChange had "shutdown" Samba AD DC 
logins.


Amazingly, 'ocsmanager' continued to run in daemon mode.  Relevant 
errors are reproduced below.


'apache2 error.log' --

[Thu Sep 24 18:11:38.117806 2015] [:error] [pid 2110] RPCProxy started
[Thu Sep 24 18:11:38.118432 2015] [:error] [pid 2110] 
INFO:openchange.web.auth.NTLMAuthHandler:client did not pass auth cookie

[Thu Sep 24 18:11:50.651197 2015] [:error] [pid 2110] RPCProxy started
[Thu Sep 24 18:11:50.651672 2015] [:error] [pid 2110] 
INFO:openchange.web.auth.NTLMAuthHandler:client did not pass auth cookie
[Thu Sep 24 18:11:50.680363 2015] [:error] [pid 2110] 
INFO:openchange.web.auth.NTLMAuthHandler:acquiring lock 
/var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock (2110)
[Thu Sep 24 18:11:50.763411 2015] [:error] [pid 2229] 
INFO:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler daemon spawned 
with pid 2229
[Thu Sep 24 18:11:51.265125 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 1
[Thu Sep 24 18:11:52.267209 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 2
[Thu Sep 24 18:11:53.269349 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 3
[Thu Sep 24 18:11:54.271378 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 4
[Thu Sep 24 18:11:55.273437 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 5
[Thu Sep 24 18:11:56.275497 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 6
[Thu Sep 24 18:11:57.277639 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 7
[Thu Sep 24 18:11:58.279731 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 8
[Thu Sep 24 18:11:59.281756 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 9
[Thu Sep 24 18:12:00.283799 2015] [:error] [pid 2229] 
ERROR:openchange.web.auth.NTLMAuthHandler:NTLMAuthHandler: caught 
exception when connecting to samba host: attempt 10
[Thu Sep 24 18:12:01.291685 2015] [:error] [pid 2229] 
CRITICAL:openchange.web.auth.NTLMAuthHandler:Uncaught exception: 
NTLMAuthHandler: unable to connect to samba host aborting after 10$
[Thu Sep 24 18:12:01.291770 2015] [:error] [pid 2229] Traceback (most 
recent call last):
[Thu Sep 24 18:12:01.291815 2015] [:error] [pid 2229]   File 
"/usr/lib/python2.7/dist-packages/openchange/web/auth/NTLMAuthHandler.py", 
line 155, in _daemonize

[Thu Sep 24 18:12:01.291848 2015] [:error] [pid 2229] self._run_as_daemon()
[Thu Sep 24 18:12:01.291858 2015] [:error] [pid 2229]   File 
"/usr/lib/python2.7/dist-packages/openchange/web/auth/NTLMAuthHandler.py", 
line 228, in _run_as_daemon

[Thu Sep 24 18:12:01.291869 2015] [:error] [pid 2229] now)):
[Thu Sep 24 18:12:01.291878 2015] [:error] [pid 2229]   File 
"/usr/lib/python2.7/dist-packages/openchange/web/auth/NTLMAuthHandler.py", 
line 294, in _process_client_request
[Thu Sep 24 18:12:01.291888 2015] [:error] [pid 2229] = 
self._handle_negotiate(client_id, ntlm_payload)
[Thu Sep 24 18:12:01.291898 2015] [:error]

Re: [SOGo] Outlook question . . .

[Steve Ankeny]

On 09/25/2015 12:46 PM, Steve Ankeny wrote:

On 09/25/2015 12:16 PM, Martin Simovic wrote:

Hi


On 25 Sep 2015, at 16:43, Steve Ankeny <stev...@cinergymetro.net> wrote:

I am using MariaDB 10.0.21, Ubuntu Trusty 14.04, Dovecot & Postfix, 
OpenChange/OCSManager 2.4


*What can I do to troubleshoot or resolve this 
problem?*OpenChange/OCSManager installed after the recent upgrade 
but when they're initiated by DCERPC calls, they shutdown my Samba 
AD DC server.


Two questions:

1. What version of Samba do you use?
2. Have you EVER had working Openchange setup?

Best Regards
Martin.


1 --

adam@sogo:~$ sudo apt-cache policy samba
samba:
  Installed: 2:4.1.18+dfsg-3~inverse1
  Candidate: 2:4.1.18+dfsg-3~inverse1
  Version table:
 *** 2:4.1.18+dfsg-3~inverse1 0
600 http://inverse.ca/ubuntu/ trusty/trusty amd64 Packages
100 /var/lib/dpkg/status
 2:4.1.6+dfsg-1ubuntu2.14.04.9 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty-updates/main 
amd64 Packages

 2:4.1.6+dfsg-1ubuntu2.14.04.7 0
500 http://security.ubuntu.com/ubuntu/ trusty-security/main 
amd64 Packages

 2:4.1.6+dfsg-1ubuntu2 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 
Packages

adam@sogo:~$

2 --

I have NEVER had a working OpenChange setup.

As I said previously, it ran fine all day yesterday until someone 
attempted to use Outlook.  And, what I mean by that is, "All the 
appropriate servers and services ran together until I attempted to 
setup Outlook."




Here are a couple of questions --

(1) What are the differences between Ubuntu Samba 4.1.6 and Inverse 
Samba 4.1.18 in terms of libraries?  Could there be some library or 
package from 4.1.6 which if removed would cause 4.1.18 to work properly?


It seems to me this might be the source of my problems, as I originally 
installed 4.1.6


(2) Could there be an issue with 'NTLMAuthHandler.py' such as was 
experienced in Bug 0002732?


http://www.sogo.nu/bugs/view.php?id=2732

thx again for consideration

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Outlook question . . .

[Steve Ankeny]

On 09/25/2015 12:16 PM, Martin Simovic wrote:

Hi

On 25 Sep 2015, at 16:43, Steve Ankeny <stev...@cinergymetro.net 
<mailto:stev...@cinergymetro.net>> wrote:


I am using MariaDB 10.0.21, Ubuntu Trusty 14.04, Dovecot & Postfix, 
OpenChange/OCSManager 2.4


*What can I do to troubleshoot or resolve this problem?*  
OpenChange/OCSManager installed after the recent upgrade but when 
they're initiated by DCERPC calls, they shutdown my Samba AD DC server.


Two questions:

1. What version of Samba do you use?
2. Have you EVER had working Openchange setup?

Best Regards
Martin.


1 --

adam@sogo:~$ sudo apt-cache policy samba
samba:
  Installed: 2:4.1.18+dfsg-3~inverse1
  Candidate: 2:4.1.18+dfsg-3~inverse1
  Version table:
 *** 2:4.1.18+dfsg-3~inverse1 0
600 http://inverse.ca/ubuntu/ trusty/trusty amd64 Packages
100 /var/lib/dpkg/status
 2:4.1.6+dfsg-1ubuntu2.14.04.9 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty-updates/main 
amd64 Packages

 2:4.1.6+dfsg-1ubuntu2.14.04.7 0
500 http://security.ubuntu.com/ubuntu/ trusty-security/main 
amd64 Packages

 2:4.1.6+dfsg-1ubuntu2 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
adam@sogo:~$

2 --

I have NEVER had a working OpenChange setup.

As I said previously, it ran fine all day yesterday until someone 
attempted to use Outlook.  And, what I mean by that is, "All the 
appropriate servers and services ran together until I attempted to setup 
Outlook."



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOLVED] [SOGo] ANN: SOGo v2.3.2 upgrade successful

[Steve Ankeny]

On 09/23/2015 09:30 AM, Steve Ankeny wrote:

On 09/23/2015 03:32 AM, Christian Mack wrote:

Am 22.09.2015 um 14:47 schrieb Steve Ankeny:

On 09/21/2015 07:11 AM, Steve Ankeny wrote:

On 08/31/2015 03:51 PM, Ludovic Marcotte wrote:


JUST REALIZED I RESPONDED TO THE WRONG THREAD (sorry)  I've changed 
the subject line.


Ok, how do I resolve the issue at this point?  Re-provision OpenChange?


I realized the message -- "nothing to migrate" -- meant just that!

Everything was alright!  I could query the database, and since there 
were no Outlook profiles, there was no data to migrate after the 
upgrade.  All the FSMO schemas, including SchemaMasterRole, were present.




*Notice: OpenChange is not running!*



OpenChange WAS running as 'openchange-ocsmanager' (and, I misunderstood)



*How do I check OpenChange provision?*


I installed 'openchange-client' and ran 'mapiprofile' successfully 
(again, no profiles yet) after resolution.




THAT was my original problem.  I will take a snapshot of my VM and 
start OpenChange


I took a snapshot of the VM (for backup), uncommented the DCERPC calls 
in 'smb.conf' and restarted.


Everything works fine, and I'm pleased the addition of 'libnanomsg0' and 
'python-memcache' resolve the issue I was having getting OpenChange 
working.  Both Samba & OpenChange now run properly on my server.


Thanks for your consideration, and thanks for your patience.


--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Outlook question . . .

[Steve Ankeny]

Setting up "new" Outlook 2010 account following the "Outlook 
Configuration" guide (pg 18)


It's giving me the following error --





"The action cannot be completed.  The name cannot be matched to a name 
in the address list."


Is this a server error or an Outlook error?  It appears to me to be an 
Outlook error.


Should the account be setup within Outlook as well as under "Control 
Panel | Mail"?


I am using all the suggestions on pg 18  Thx

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v2.3.2

[Steve Ankeny]

On 09/23/2015 03:32 AM, Christian Mack wrote:

Am 22.09.2015 um 14:47 schrieb Steve Ankeny:

On 09/21/2015 07:11 AM, Steve Ankeny wrote:

On 08/31/2015 03:51 PM, Ludovic Marcotte wrote:

Hello,

After many months of development, Inverse is happy to announce the
availability of SOGo v3.0 beta 1.

ran "update|upgrade" successfully ('sope', 'sogo',
'openchange-ocsmanager', etc.)

after running update a second time, I saw the following --

The following packages have been kept back:
   openchangeproxy openchangeserver

so, I ran the following --

adam@sogo:~$ sudo apt-get install openchangeproxy openchangeserver
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
   libnanomsg0 python-memcache
The following NEW packages will be installed:
   libnanomsg0 python-memcache
The following packages will be upgraded:
   openchangeproxy openchangeserver
2 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 1,008 kB of archives.
After this operation, 646 kB of additional disk space will be used.
Do you want to continue? [Y/n]

once I chose Y, I received the following error --

=== OpenChange Directory ===
schema_data_add: updates are not allowed: reject request

THAT was because I had the following in my 'smb.conf' --

 ### Configuration required by OpenChange server ###
 #dsb:schema update allowed = true
 #dcerpc endpoint servers = +epmapper, +mapiproxy
 #dcerpc_mapiproxy:server = true
 #dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp,
exchange_ds_rfr
 ### Configuration required by OpenChange server ###


BEFORE I uncommented 'dsb:scheme update allowed = true' I saw the
following --

=== OpenChange Directory ===
schema_data_add: updates are not allowed: reject request

Error adding msExchRecipientTypeDetails and msExchRecipientDisplayType
atributes to schema: (53, 'schema_data_add: updates are not allowed:
reject request\n')
Unable to find attribute msExchRecipientDisplayType in the schema
Error adding msExchRecipientTypeDetails and msExchRecipientDisplayType
to Mail-Recipient schema: (21, "objectclass_attrs: attribute
'mayContain' on entry
'CN=Mail-Recipient,CN=Schema,CN=Configuration,DC=smbdomain,DC=com'
contains at least one invalid value!")
Error migrating user CN=cbsexports,CN=Users,DC=smbdomain,DC=com: (16,
"objectclass_attrs: attribute 'msExchRecipientTypeDetails' on entry
'CN=cbsexports,CN=Users,DC=smbdomain,DC=com' was not found in the
schema!"). Skipping user
Error migrating user CN=cbsexports,CN=Users,DC=smbdomain,DC=com: (16,
"objectclass_attrs: attribute 'msExchRecipientDisplayType' on entry
'CN=cbsexports,CN=Users,DC=smbdomain,DC=com' was not found in the
schema!"). Skipping user
Error migrating user CN=steve,CN=Users,DC=smbdomain,DC=com: (16,
"objectclass_attrs: attribute 'msExchRecipientTypeDetails' on entry
'CN=steve,CN=Users,DC=smbdomain,DC=com' was not found in the schema!").
Skipping user
Error migrating user CN=steve,CN=Users,DC=smbdomain,DC=com: (16,
"objectclass_attrs: attribute 'msExchRecipientDisplayType' on entry
'CN=steve,CN=Users,DC=smbdomain,DC=com' was not found in the schema!").
Skipping user

[listing each user in the database and ending with "Skipping user"]

Migration of openchange directory done
=== OpenChange DB ===
Migration openchange db done
=== Indexing ===
Nothing to migrate
=== Named Properties ===
Migration MAPIStore named properties backend done
Processing triggers for libc-bin (2.19-0ubuntu6.6) ...
adam@sogo:~$


It appears there WAS data to migrate BEFORE the error, and it's still in
the database.

THAT's why I ask the question --


*Do I need to simply reprovision OpenChange?

*I'm still not able to call 'dcerpc' services from 'smb.conf' and
OpenChange is not running properly.



Looks for me, like your SAMBA4 was not Schema master when you upgraded.
This should be checked in the upgrade script if needed.
Therefore you should open a bug report athttp://www.sogo.nu/bugs


Kind regards,
Christian Mack



JUST REALIZED I RESPONDED TO THE WRONG THREAD (sorry)  I've changed the 
subject line.


Ok, how do I resolve the issue at this point?  Re-provision OpenChange?

I built this server from scratch using Ubuntu 14.04 and Samba 4.1.6

I built it in preparation for the SOGo upgrade to 2.3.0, and when that 
arrived, I had difficulty upgrading Samba 4.1.6 to the Inverse version 
4.1.18, as the 'postinst' script was not removing previous links in 'rc.d'


I downloaded the Inverse DEB, extracted and edited it at line 50 --

'update-rc.d -f samba remove'

-- then repackaged and installed it.  I reported the issue here --

https://lists.inverse.ca/sogo/arc/users/2015-07/msg00174.html

re: FSMO roles on my Samba-AD-DC, I find the following --

adam@sogo:~$ sudo samba-tool fsmo show
InfrastructureMasterRole owner: CN=NTDS 
Settings,CN=SOGO,CN=Servers,CN=Default-First-Site-Name

Re: [SOGo] sogo-tool list users

[Steve Ankeny]

On 09/23/2015 01:57 PM, Márcio Merlone wrote:

Greetings!

Is there how to list all users currently on database, something like 
'sogo-tool list users' or alike?


Regards,

--
*Marcio Merlone*


IF you're using Samba, you can use 'samba-tool' --

'sudo samba-tool user list'


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v3.0 beta 1

[Steve Ankeny]

On 08/31/2015 03:51 PM, Ludovic Marcotte wrote:

Hello,

After many months of development, Inverse is happy to announce the 
availability of SOGo v3.0 beta 1.



ran "update|upgrade" successfully ('sope', 'sogo', 
'openchange-ocsmanager', etc.)


after running update a second time, I saw the following --

The following packages have been kept back:
  openchangeproxy openchangeserver

so, I ran the following --

adam@sogo:~$ sudo apt-get install openchangeproxy openchangeserver
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libnanomsg0 python-memcache
The following NEW packages will be installed:
  libnanomsg0 python-memcache
The following packages will be upgraded:
  openchangeproxy openchangeserver
2 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 1,008 kB of archives.
After this operation, 646 kB of additional disk space will be used.
Do you want to continue? [Y/n]

once I chose Y, I received the following error --

=== OpenChange Directory ===
schema_data_add: updates are not allowed: reject request

THAT was because I had the following in my 'smb.conf' --

### Configuration required by OpenChange server ###
#dsb:schema update allowed = true
#dcerpc endpoint servers = +epmapper, +mapiproxy
#dcerpc_mapiproxy:server = true
#dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

### Configuration required by OpenChange server ###

so, once I removed # from 'dsb:schema update allowed = true' and 
restarted 'samba-ad-dc' --


ran 'sudo apt-get remove libnanomsg0 python-memcache'

and, of course, it removed 'openchangeproxy openchangeserver' as well

I can install/upgrade all four packages but I get the following --

=== OpenChange Directory ===
Nothing to migrate

*Do I need to simply reprovision OpenChange?

*the database is still intact in MySQL

thx

ADDENDUM --

I'm thinking not having these two packages ('libnanomsg0' and 
'python-memcache') was the reason every time I tried to call DCERPC 
services from 'smb.conf', it "shut down" my Samba-AD-DC (which was NOT 
solved)


https://lists.inverse.ca/sogo/arc/users/2015-07/msg00257.html

I'm still not able to call 'dcerpc' services from 'smb.conf' and 
OpenChange is not running properly.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Installing Thunderbird Extension on Windows

[Steve Ankeny]

On 09/04/2015 07:59 AM, Tilman Schmidt wrote:

Am 04.09.2015 um 06:15 schrieb mr.ad...@mail.ru:

I am sorry to bother you with this question, but is it possible to install the
SOGO connector extension for Thunderbird on my windows client??  I am at a
loss.

Yes, it is possible. Just follow the instructions.

Do you have any particular reason for asking that question?

You download it via Firefox (or another browser), save to disk, then 
install it in Thunderbird.


You DO NOT install it in Firefox (if that's the confusion)  It's the 
same with the Integrator except the latter needs to be edited 
(instructions in the Thunderbird PDF found on the SOGo site)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Outlook 0x80004005 Error

[Steve Ankeny]

On 08/25/2015 02:55 PM, Gerald Brandt wrote:


Hi,

No solution here.  It sounds like an OpenChange issue, and SOGo is 
waiting for a new release.


Gerald


I'm having a different problem (OpenChangedcerpc calls shutting down 
Samba-AD-DC), but I'm beginning to think it's an OpenChange error (and, 
here, I was going to try Outlook 2013 EAS instead of Outlook 2010)


Have there been any new releases in the nightly channels?  How close 
is the new release?



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 08/15/2015 05:24 PM, Rowland Penny wrote:


*two questions* --

(1) should nmbd be running?


Definitely no, there is an 'nbt' component built into the 'samba' process.


having difficulty removing it from startup

'initctl list' BEFORE removal --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 854
adam@sogo:~$

stop and remove 'nmbd' --

adam@sogo:~$ sudo service nmbd stop
nmbd stop/waiting
adam@sogo:~$ sudo update-rc.d -f nmbd remove
 Removing any system startup links for /etc/init.d/nmbd ...
adam@sogo:~$

'initctl list' AFTER removal --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 854
adam@sogo:~$

How do I remove 'nmbd' from startup?

I tried ' sudo initctl --system stop nmbd' with the same results.

thx

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 08/16/2015 10:46 AM, Rowland Penny wrote:

Are you sure nmbd is starting at boot ?
Try 'ps ax | grep 'nmb' after the machine has just rebooted, if it 
returns anything, then it is starting at boot and you need to stop it.
You seem to be mixing up 'is it running' with 'can I start it' 
commands, it may help you to look here:


http://askubuntu.com/questions/19320/how-to-enable-or-disable-services

Rowland


it was running immediately after reboot

I renamed '/etc/init/nmbd.conf' and rebooted, and here's the results --

adam@sogo:~$ sudo initctl status nmbd
initctl: Unknown job: nmbd
adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 871
adam@sogo:~$

domain login works perfectly, and 'nmbd' is no longer started at boot 
(I'll work on OpenChange later)


thx


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 08/14/2015 09:32 AM, Rowland Penny wrote:

On 14/08/15 14:17, Steve Ankeny wrote:

On 08/01/2015 03:28 PM, Steve Ankeny wrote:

On 07/31/2015 10:23 AM, Steve Ankeny wrote:

[ redacted text ]

This is the instance where dcerpc calls from 'smb.conf' --

 ### Configuration required by OpenChange server ###
 dsb:schema update allowed = true
 dcerpc endpoint servers = +mapiproxy
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

 ### Configuration required by OpenChange server ###

When I uncomment those dcerpc calls, Samba AD allows the first 
few users to login then gives Access denied to the next users.  
Curiously enough, even in that instance, Samba services are STILL 
running.


*Looking further in '/var/log/samba/log.samba'* --

[ redacted text ]
===
[2015/07/27 10:17:19.849708,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

*OPENCHANGE INTERNAL ERROR: pid 1486*
[2015/07/27 10:17:19.850012,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

*[exchange_emsmdb] Unable to initialize openchangedb*
[2015/07/27 10:17:19.955017,  0] 
mapiproxy/libmapiproxy/fault_util.c:53(debug_print_backtrace)

  BACKTRACE: 14 stack frames:
   #00 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(debug_print_backtrace+0x96) 
[0x7f6634c36368]
   #01 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(openchange_abort+0x75) 
[0x7f6634c364d6]
   #02 
/usr/lib/x86_64-linux-gnu/openchange/dcerpc_mapiproxy_server/exchange_emsmdb.so(+0x1087f) 
[0x7f66333fe87f]
   #03 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(+0x9aca) 
[0x7f6634c1caca]
   #04 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(mapiproxy_server_init+0x89) 
[0x7f6634c1cb7c]
   #05 
/usr/lib/x86_64-linux-gnu/samba/dcerpc_server/dcesrv_mapiproxy.so(+0x162ce) 
[0x7f6634e6c2ce]
   #06 
/usr/lib/x86_64-linux-gnu/libdcerpc-server.so.0(dcesrv_init_context+0x79) 
[0x7f6640052069]
   #07 /usr/lib/x86_64-linux-gnu/samba/service/dcerpc.so(+0xc99) 
[0x7f66402c7c99]
   #08 
/usr/lib/x86_64-linux-gnu/samba/process_model/standard.so(+0x1656) 
[0x7f6645046656]
   #09 
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(task_server_startup+0x4a) 
[0x7f6652c28eda]
   #10 
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(server_service_startup+0x93) 
[0x7f6652c27b83]

   #11 samba(+0x9a35) [0x7f6653f31a35]
   #12 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) 
[0x7f664fa82ec5]

   #13 samba(+0x5e4e) [0x7f6653f2de4e]
[2015/07/27 10:17:19.957226,  0] 
../source4/rpc_server/dcerpc_server.c:1194(dcesrv_init_context)
*dcesrv_init_context: failed to init endpoint server = 'mapiproxy': 
NT_STATUS_INTERNAL_ERROR*
[2015/07/27 10:17:19.957543,  0] 
../source4/smbd/service_task.c:35(task_server_terminate)

*task_server_terminate: [Failed to startup dcerpc server task]*
  STATUS=daemon 'samba' finished starting up and ready to serve 
connections*samba_terminate: Failed to startup dcerpc server task*


I've *emboldened* the lines showing 'openchangedb' is not initiating.

It appears to err on '*exchange_emsmdb*'  That's one of the dcerpc 
calls in 'smb.conf'


--


sorry to be so late updating this issue, it is STILL unresolved

I uncommented the dcerpc calls in 'smb.conf' and restarted the server.

Samba services were running --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running


Something wrong here, nmbd shouldn't be running on a DC, how are you 
starting samba ?




'samba-ad-dc'

adam@sogo:~$ sudo ls /etc/init.d/ | egrep 'samba|smb|nmb|winbind|ocsmanager'
nmbd
openchange-ocsmanager
samba
samba-ad-dc
smbd
winbind
adam@sogo:~$


winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 841
adam@sogo:~$



What does 'ps ax' show ?


adam@sogo:~$ sudo ps ax | egrep 'samba|smb|nmb|winbind|ocsmanager'
  765 ?Ss 0:05 samba -D
 1334 ?S  0:00 samba -D
 1344 ?S  1:37 samba -D
 1382 ?S  0:10 samba -D
 1420 ?S  0:03 samba -D
 1448 ?Ss 2:06 /usr/sbin/smbd -D --option=server role 
check:inhibit=yes --foreground

 1450 ?S  4:20 samba -D
 1452 ?S  0:32 samba -D
 1476 ?S  0:58 samba -D
 1487 ?S 13:42 samba -D
 1488 ?S  0:27 samba -D
 1489 ?S  0:03 samba -D
 1490 ?S  9:26 samba -D
 1499 ?S  2:38 samba -D
 1501 ?S  3:19 samba -D
 1516 ?S  0:10 /usr/sbin/smbd -D --option=server role 
check:inhibit=yes --foreground
 8340 pts/2S+ 0:00 egrep --color=auto 
samba|smb|nmb|winbind|ocsmanager

adam@sogo:~$

I don't currently have 'ocsmanager' running as the dcerpc calls are 
commented out.




I could find no instance

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 08/15/2015 12:52 PM, Rowland Penny wrote:
Can I ask how you installed Openchange, one of the lines you have in 
smb.conf is only needed when updating the AD schema 'dsdb:schema 
update allowed = true', I would think that Openchange only does this 
once, so you can probably remove this.


Rowland


SOGo Native Microsoft Outlook Configuration 
http://www.sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuration.pdf, 
pg 9 lists the packages to install --


apt-get install openchangeserver \
sogo-openchange \
openchangeproxy \
python-ocsmanager \
mysql-server \
python-mysqldb \
openchange-ocsmanager \
openchange-rpcproxy \
python-sievelib \
python-spyne \
python-rpclib

here are my installed packages (plus 'mariadb-server' and libs)

adam@sogo:~$ sudo dpkg --get-selections | egrep 
'openchange|ocsmanager|rpc|spyne'

libgssrpc4:amd64install
openchange-ocsmanager   install
openchange-rpcproxy install
openchangeproxy   install
openchangeserver  install
python-ocsmanagerinstall
python-rpclib   install
python-spyne  install
sogo-openchange:amd64install
adam@sogo:~$

pg 10 of the manual discusses Samba 4 configuration and includes --

––– Configuration required by OpenChange server –––
dsdb:schema update allowed = true
dcerpc endpoint servers = epmapper, mapiproxy, dnsserver
dcerpc_mapiproxy:server = true
dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr
––– Configuration required by OpenChange server –––

my 'smb.conf' reads --

### Configuration required by OpenChange server ###
#dsb:schema update allowed = true
#dcerpc endpoint servers = +mapiproxy
#dcerpc_mapiproxy:server = true
#dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

### Configuration required by OpenChange server ###

currently, I have the dcerpc calls commented out of the conf (as above)

*two questions* --

(1) should nmbd be running?

(2) should the 'dsb:schema' line be commented out?

thx, as always

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 08/01/2015 03:28 PM, Steve Ankeny wrote:

On 07/31/2015 10:23 AM, Steve Ankeny wrote:

In '/var/log/auth.log' there are a series of authentication errors --

Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): check pass; user 
unknown
Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): authentication 
failure; logname= uid=0 euid=0 tty=dovecot ruser=michael rhost=127.0.0.1
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): getting 
password (0x0388)
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): pam_get_item 
returned a password


These were logged during an attempt to login to Samba AD

It appears there's an issue with Dovecot authentication (or pam) 
but it may be elsewhere.


This is the instance where dcerpc calls from 'smb.conf' --

 ### Configuration required by OpenChange server ###
 dsb:schema update allowed = true
 dcerpc endpoint servers = +mapiproxy
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

 ### Configuration required by OpenChange server ###

When I uncomment those dcerpc calls, Samba AD allows the first few 
users to login then gives Access denied to the next users.  
Curiously enough, even in that instance, Samba services are STILL 
running.


*Looking further in '/var/log/samba/log.samba'* --

[2015/07/27 10:17:14.598525,  0] 
../source4/smbd/server.c:370(binary_smbd_main)

  samba version 4.1.18-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2013
[2015/07/27 10:17:17.689989,  0] 
../source4/smbd/server.c:488(binary_smbd_main)

  samba: using 'standard' process model
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
[2015/07/27 10:17:18.257922,  0] 
../lib/util/become_daemon.c:136(daemon_ready)

[2015/07/27 10:17:19.731517,  0] libmapi/oc_log.c:52(oc_logv)
*MAPIPROXY server mode enabled*
[2015/07/27 10:17:19.735772,  0] libmapi/oc_log.c:54(oc_logv)
  Using MySQL backend for openchangedb: 
mysql://openchange-user:$passwd@localhost/openchange
[2015/07/27 10:17:19.849272,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

  ===
[2015/07/27 10:17:19.849708,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

*OPENCHANGE INTERNAL ERROR: pid 1486*
[2015/07/27 10:17:19.850012,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

*[exchange_emsmdb] Unable to initialize openchangedb*
[2015/07/27 10:17:19.955017,  0] 
mapiproxy/libmapiproxy/fault_util.c:53(debug_print_backtrace)

  BACKTRACE: 14 stack frames:
   #00 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(debug_print_backtrace+0x96) [0x7f6634c36368]
   #01 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(openchange_abort+0x75) 
[0x7f6634c364d6]
   #02 
/usr/lib/x86_64-linux-gnu/openchange/dcerpc_mapiproxy_server/exchange_emsmdb.so(+0x1087f) 
[0x7f66333fe87f]
   #03 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(+0x9aca) 
[0x7f6634c1caca]
   #04 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(mapiproxy_server_init+0x89) [0x7f6634c1cb7c]
   #05 
/usr/lib/x86_64-linux-gnu/samba/dcerpc_server/dcesrv_mapiproxy.so(+0x162ce) 
[0x7f6634e6c2ce]
   #06 
/usr/lib/x86_64-linux-gnu/libdcerpc-server.so.0(dcesrv_init_context+0x79) 
[0x7f6640052069]
   #07 /usr/lib/x86_64-linux-gnu/samba/service/dcerpc.so(+0xc99) 
[0x7f66402c7c99]
   #08 
/usr/lib/x86_64-linux-gnu/samba/process_model/standard.so(+0x1656) 
[0x7f6645046656]
   #09 
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(task_server_startup+0x4a) 
[0x7f6652c28eda]
   #10 
/usr/lib/x86_64-linux-gnu/samba

Re: [SOGo] Need Help for setup SOGo

[Steve Ankeny]

On 08/07/2015 04:05 AM, Thomas Schulze wrote:

Hi Steve,

Thanks for reply.

Yes, you are right, i bound ZEG to an existing AD. It's clear that 
SOGo got no User when he login first time. But i can't believe that 
this scenario was not considered. Maybe i have to setup the local 
Samba as an secondary LDAP, but i dont want to. The other possibility 
is to customize ZEG in this way that the user will be created during 
login if he doesn't exist.


I will check your advice and create a local user who already exist in 
my AD.


You could also use the ZEG Samba installation as a member server in your AD

https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Need Help for setup SOGo

[Steve Ankeny]

On 08/06/2015 10:54 AM, tommi...@googlemail.com wrote:

Hi @ all,

i have running the ZEG SOGo VM. After searching on Google i found the Solution
to bind on an existing Active Directory (Windows 2012 r2) for authentication.

just to clarify --

You bound the SOGo ZEG to an existing Windows 2012R2 for user 
authentication?

I dont want to use the local LDAP (samba), i just want to use openchange/SOGo
in combination with my AD.

Did you stop the 'samba' or 'samba-ad-dc' service on the ZEG?

After successfully login (browser) i'll get object not found: SOGo =
user.name (where user.name is the username for login).
It sounds as though the ZEG is using the Microsoft AD to authenticate 
users but cannot find a mailbox.


I'm not certainly, but I'd suspect it might require the user mailboxes 
being created on the ZEG


The ZEG used Dovecot/Postfix, so you need to check those to see if it 
allows the creation of virtual mailboxes.


I have not looked at the current ZEG, and it's quite a bit different 
than some of the previous ones.


Try creating a test user on both the ZEG and in your AD to see if you 
get a mailbox.


Someone else will have to give you some pointers on using the ZEG in an 
existing AD

Also with Outlook i can't login into openchange (Message here even more
worser).

Question:

Do i need the local LDAP-Users to get openchange/SOGo to work? What is the
solution?

Sincerely

Thomas




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Calendar name changed to non-readable

[Steve Ankeny]

good, but it's odd that it happened

On 08/04/2015 05:01 AM, Khapare Joshi wrote:

nope, But i renamed those calendar and it seem to be work



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: Aw: [SOGo] ANN: SOGo v2.3.0

[Steve Ankeny]

Can you download the individual package and install it manually?

IF you remember, I had to do that with the Inverse Samba package.

I downloaded, edited the package then installed it manually, but it did 
the job.


On 08/04/2015 06:53 AM, Kai-Uwe Rommel wrote:

Hello,

please see below. May I ask again? Or does nobody have any idea how to 
solve

this?

Otherwise I'm stuck ... thanks!

Kai-Uwe Rommel

kai-uwe.rom...@ars.de
Telefon+Mobil +49 89 32468-120


__

users-requ...@sogo.nu wrote on 02.06.2015 14:59:37:
 On 02/06/2015 08:26, Daniel Müller wrote:
 /usr/sbin/sogod: error while loading shared libraries:
 libmemcached.so.11: cannot open shared object file: No such file or 
directory


I have the same problem when I attempt to upgrade to 2.3.1.

 Make sure you pull the libmemcached 1.0.18 packages from our repo.

How do I do this?

When I check for newest package:

[root@srv sogo-2.3.1]# yum list installed libmemcached
Installed Packages
libmemcached.x86_64 0.49-1   @SOGo
[root@srv sogo-2.3.1]# yum list libmemcached
Installed Packages
libmemcached.x86_64  0.49-1@SOGo
Available Packages
libmemcached.i6860.31-1.1.el6  base

I have:

[root@srv sogo-2.3.1]# cat /etc/yum.repos.d/inverse.repo
[SOGo]
name=Inverse SOGo Repository
baseurl=http://inverse.ca/downloads/SOGo/RHEL6/$basearch
gpgcheck=0
priority=7
enabled=1

(This is on CentOS 6.6 x86_64)

When I browse the repo with a web browser, I see that there is a 1.0.18
version of it together with 0.49 but why does my yum not pull it?

Kai-Uwe Rommel

kai-uwe.rom...@ars.de
Telefon+Mobil +49 89 32468-120



*
Veranstaltungshinweis:*
ARS Konferenz ARScon – Strategien von morgen am 15.10.2015 in der 
Allianz Arena Muenchen

http://www.ars.de/konferenz

ARS Computer und Consulting GmbH, http://www.ars.de http://www.ars.de/
Ridlerstrasse 37, 80339 Muenchen, Deutschland

Individuelle Softwareentwicklung, Beratung und Projekte
IBM Software, IBM Lizenzmanagement
IT-Infrastrukturservices

Handelsregister Muenchen, HRB 101829, USt-ID: DE 155 068 909
Geschaeftsfuehrer: Michael Arbesmeier, Kai-Uwe Rommel, Roland Schock, 
Joachim Gucker


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] sogo update from 2.1.16 , 2.3.1 calendars dissappeard

[Steve Ankeny]

Read the script to see where it failed?  It might have looked for 2.2.17 
and found only 2.1.16


I was going to ask if during your upgrade it moved from 2.1.16 to 2.2.8 
(listed in the Instructions)  That was the version before 2.3.0 which 
required running the script, so I wondered if the script could be modified.


On 08/04/2015 12:15 PM, Khapare Joshi wrote:
the script been running for few hours then ask me password again for 
the database, once entered it returns me to the bash prompt. then 
restarted the sogo and database - login to sogo, still no calendars - 
what shall i do next ?


?


On 08/04/2015 12:25 PM, Khapare Joshi wrote:
okay, I am running sql-update-2.2.17_to_2.3.0.sh script, it seem it 
will take a long to finish this



On 08/04/2015 11:42 AM, Khapare Joshi wrote:

hello all,

I just hit yum update sogo and sope49. all working but now I could 
not see anymore calendars events etc.


I read somewhere updating database script. which database script I 
should run ? I see following script in

/usr/share/doc/sogo-2.3.1

-rw-r--r-- 1 root root 5385142 Jul 23 16:25 ChangeLog
-rw-r--r-- 1 root root   82993 Jul 23 16:25 NEWS
-rw-r--r-- 1 root root2378 Jul 23 16:25 SOGo-apple-ab.conf
-rwxr-xr-x 1 root root1352 Jul 23 16:25 sogo-backup.sh
-rwxr-xr-x 1 root root1201 Jul 23 16:25 sql-update-101_to_102.sh
-rwxr-xr-x 1 root root 960 Jul 23 16:25 
sql-update-1.2.2_to_1.3.0-mysql.sh
-rwxr-xr-x 1 root root 958 Jul 23 16:25 
sql-update-1.2.2_to_1.3.0.sh
-rw-r--r-- 1 root root 880 Jul 23 16:25 
sql-update-1.3.11_to_1.3.12-mysql.sh
-rwxr-xr-x 1 root root1347 Jul 23 16:25 
sql-update-1.3.11_to_1.3.12.sh
-rw-r--r-- 1 root root1487 Jul 23 16:25 
sql-update-1.3.16_to_1.3.17-mysql.sh
-rwxr-xr-x 1 root root1441 Jul 23 16:25 
sql-update-1.3.16_to_1.3.17.sh
-rw-r--r-- 1 root root 958 Jul 23 16:25 
sql-update-1.3.3_to_1.3.4-mysql.sh
-rw-r--r-- 1 root root 956 Jul 23 16:25 
sql-update-1.3.3_to_1.3.4.sh

-rwxr-xr-x 1 root root1746 Jul 23 16:25 sql-update-20070724.sh
-rwxr-xr-x 1 root root1974 Jul 23 16:25 sql-update-20070822.sh
-rw-r--r-- 1 root root1343 Jul 23 16:25 sql-update-20080303.sh
-rwxr-xr-x 1 root root1101 Jul 23 16:25 
sql-update-2.0.4b_to_2.0.5-mysql.sh
-rwxr-xr-x 1 root root1666 Jul 23 16:25 
sql-update-2.2.17_to_2.3.0-mysql.sh
-rwxr-xr-x 1 root root1620 Jul 23 16:25 
sql-update-2.2.17_to_2.3.0.sh

-rwxr-xr-x 1 root root3047 Jul 23 16:25 updates.php


I hope this upgrade doesn't destroy all the users events :)







--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 08/01/2015 03:28 PM, Steve Ankeny wrote:


I can login to MariaDB as 'openchange-user' with its password but I'm 
unsure if the configuration is right.


*Do I need to reprovision OpenChange?*  What are the issues with 
reprovisioning OpenChange?


Thanks for any suggestions.  I'll look at the database next.



The database appears to be populated correctly --

MariaDB [openchange] show tables;
+--+
| Tables_in_openchange |
+--+
| company  |
| folders  |
| folders_properties|
| mailboxes |
| mailboxes_properties   |
| mapistore_indexes   |
| mapistore_indexing  |
| messages |
| messages_properties   |
| migrations|
| named_properties|
| organizational_units |
| provisioning_folders |
| provisioning_special_folders |
| public_folders   |
| servers |
+--+
16 rows in set (0.00 sec)

MariaDB [openchange] select * from company;
++-+
| id | domain  |
++-+
|  1 | MEADORANDCO |
++-+
1 row in set (0.00 sec)

MariaDB [openchange] select * from folders;
++---++--++--++---+--+
| id | ou_id | folder_id  | folder_class | mailbox_id | 
parent_folder_id | FolderType | SystemIdx | MAPIStoreURI |

++---++--++--++---+--+
|  1 | 1 |  72057594037927937 | public   |   NULL 
| NULL |  1 | 1 | NULL |
|  2 | 1 | 144115188075855873 | public   |   NULL 
|1 |  1 | 2 | NULL |
|  3 | 1 | 216172782113783809 | public   |   NULL 
|1 |  1 | 3 | NULL |
|  4 | 1 | 288230376151711745 | public   |   NULL 
|3 |  1 | 4 | NULL |
|  5 | 1 | 360287970189639681 | public   |   NULL 
|3 |  1 | 6 | NULL |
|  6 | 1 | 432345564227567617 | public   |   NULL 
|5 |  1 | 9 | NULL |
|  7 | 1 | 504403158265495553 | public   |   NULL 
|3 |  1 | 5 | NULL |
|  8 | 1 | 576460752303423489 | public   |   NULL 
|7 |  1 | 8 | NULL |
|  9 | 1 | 648518346341351425 | public   |   NULL 
|3 |  1 |-1 | NULL |

++---++--++--++---+--+
9 rows in set (0.00 sec)

MariaDB [openchange] select * from folders_properties;  (last portion)


| 8 | PidTagContainerClass   | IPF.Note (check this) |
| 9 | PidTagFolderChildCount | 0|
| 9 | PidTagChangeNumber | 648518346341351425 |
| 9 | PidTagDisplayName  | Events Root  |
| 9 | PidTagCreationTime | 13063821508000|
| 9 | PidTagLastModificationTime | 13063821508000 |
| 9 | PidTagSubFolders   | FALSE|
| 9 | PidTagAttributeHidden  | 0 |
| 9 | PidTagAttributeReadOnly| 0   |
| 9 | PidTagAttributeSystem  | 0|
| 9 | PidTagContainerClass   | IPF.Note (check this) |
+---+++
86 rows in set (0.00 sec)

MariaDB [openchange] select * from mailboxes;
Empty set (0.00 sec)

MariaDB [openchange] select * from mailboxes_properties;
Empty set (0.00 sec)

MariaDB [openchange] select * from mapistore_indexes;
++--+---+
| id | username | next_fmid |
++--+---+
|  1 | michael  | 1090  |(*only one Outlook user*)
++--+---+
1 row in set (0.00 sec)

MariaDB [openchange] select * from mapistore_indexing;
++--+-+--+--+
| id | username | fmid| url | soft_deleted |
++--+-+--+--+
|  1 | michael  | 289356276058554369  | 
sogo://michael@fallback/0x3040001/1856-55B37C00-1-506A3900

Re: [SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

On 07/31/2015 10:23 AM, Steve Ankeny wrote:

In '/var/log/auth.log' there are a series of authentication errors --

Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): check pass; user 
unknown
Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): authentication 
failure; logname= uid=0 euid=0 tty=dovecot ruser=michael rhost=127.0.0.1
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): getting password 
(0x0388)
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): pam_get_item 
returned a password


These were logged during an attempt to login to Samba AD

It appears there's an issue with Dovecot authentication (or pam) but 
it may be elsewhere.


This is the instance where dcerpc calls from 'smb.conf' --

 ### Configuration required by OpenChange server ###
 dsb:schema update allowed = true
 dcerpc endpoint servers = +mapiproxy
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

 ### Configuration required by OpenChange server ###

When I uncomment those dcerpc calls, Samba AD allows the first few 
users to login then gives Access denied to the next users. Curiously 
enough, even in that instance, Samba services are STILL running.


*Looking further in '/var/log/samba/log.samba'* --

[2015/07/27 10:17:14.598525,  0] 
../source4/smbd/server.c:370(binary_smbd_main)

  samba version 4.1.18-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2013
[2015/07/27 10:17:17.689989,  0] 
../source4/smbd/server.c:488(binary_smbd_main)

  samba: using 'standard' process model
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call 
setproctitle_init() or link against libbsd-ctor.
[2015/07/27 10:17:18.257922,  0] 
../lib/util/become_daemon.c:136(daemon_ready)

[2015/07/27 10:17:19.731517,  0] libmapi/oc_log.c:52(oc_logv)
*MAPIPROXY server mode enabled*
[2015/07/27 10:17:19.735772,  0] libmapi/oc_log.c:54(oc_logv)
  Using MySQL backend for openchangedb: 
mysql://openchange-user:$passwd@localhost/openchange
[2015/07/27 10:17:19.849272,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

  ===
[2015/07/27 10:17:19.849708,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

*OPENCHANGE INTERNAL ERROR: pid 1486*
[2015/07/27 10:17:19.850012,  0] 
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)

*[exchange_emsmdb] Unable to initialize openchangedb*
[2015/07/27 10:17:19.955017,  0] 
mapiproxy/libmapiproxy/fault_util.c:53(debug_print_backtrace)

  BACKTRACE: 14 stack frames:
   #00 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(debug_print_backtrace+0x96) 
[0x7f6634c36368]
   #01 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(openchange_abort+0x75) 
[0x7f6634c364d6]
   #02 
/usr/lib/x86_64-linux-gnu/openchange/dcerpc_mapiproxy_server/exchange_emsmdb.so(+0x1087f) 
[0x7f66333fe87f]
   #03 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(+0x9aca) 
[0x7f6634c1caca]
   #04 
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(mapiproxy_server_init+0x89) 
[0x7f6634c1cb7c]
   #05 
/usr/lib/x86_64-linux-gnu/samba/dcerpc_server/dcesrv_mapiproxy.so(+0x162ce) 
[0x7f6634e6c2ce]
   #06 
/usr/lib/x86_64-linux-gnu/libdcerpc-server.so.0(dcesrv_init_context+0x79) [0x7f6640052069]
   #07 /usr/lib/x86_64-linux-gnu/samba/service/dcerpc.so(+0xc99) 
[0x7f66402c7c99]
   #08 
/usr/lib/x86_64-linux-gnu/samba/process_model/standard.so(+0x1656) 
[0x7f6645046656]
   #09 
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(task_server_startup+0x4a) [0x7f6652c28eda]
   #10 
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(server_service_startup+0x93

Re: [SOGo] Calendar name changed to non-readable

[Steve Ankeny]

On 07/31/2015 07:36 AM, Khapare Joshi wrote:
My SOGo version is 2.2.16 (root@shiva.inverse 201502121141). Something 
has changed in this version, some reason in my calendar names are not 
recognizable, instead it prints as : 147F-4Dcc 


But if I create a new calendar i.e test it is normal.

I have attached the screen-shot. anybody has an opinion on this ?

K


Are the alpha-numeric-named calendars shared calendars from other users?

If so, that would seem to indicate the issue has to do with the 
authentication of users -- a scrambling of usernames -- i.e., LDAP, SQL, 
Samba-AD, Microsoft-AD, etc.  How are you authenticating users?


Where is user data stored?  It may also simply require a fresh sharing 
from the original user.


It might also be helpful to know your OS, etc.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Calendar name changed to non-readable

[Steve Ankeny]

On 07/31/2015 09:08 AM, Chris Coleman wrote:



On 7/31/2015 8:08 AM, Steve Ankeny wrote:

On 07/31/2015 07:36 AM, Khapare Joshi wrote:
My SOGo version is 2.2.16 (root@shiva.inverse 201502121141). 
Something has changed in this version, some reason in my calendar 
names are not recognizable, instead it prints as : 147F-4Dcc 


But if I create a new calendar i.e test it is normal.

I have attached the screen-shot. anybody has an opinion on this ?

K


Are the alpha-numeric-named calendars shared calendars from other 
users?


If so, that would seem to indicate the issue has to do with the 
authentication of users -- a scrambling of usernames -- i.e., LDAP, 
SQL, Samba-AD, Microsoft-AD, etc.  How are you authenticating users?


Where is user data stored?  It may also simply require a fresh 
sharing from the original user.


It might also be helpful to know your OS, etc.


Shouldn't the sogo web user interface display a sensible, detailed 
error message to the user, if it's indeed encountered a problem when 
attempting to authenticate/authorize the user's access to some shared 
calendars.  Because displaying 64 digit GUID numbers to the user 
instead of calendar names, with no explanation, doesn't work.




Have you checked the relevant log file?


--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Failed logins with DCERPC calls in 'smb.conf'

[Steve Ankeny]

In '/var/log/auth.log' there are a series of authentication errors --

Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): check pass; user unknown
Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): authentication 
failure; logname= uid=0 euid=0 tty=dovecot ruser=michael rhost=127.0.0.1
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): getting password 
(0x0388)
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): pam_get_item 
returned a password


These were logged during an attempt to login to Samba AD

It appears there's an issue with Dovecot authentication (or pam) but 
it may be elsewhere.


This is the instance where dcerpc calls from 'smb.conf' --

 ### Configuration required by OpenChange server ###
 dsb:schema update allowed = true
 dcerpc endpoint servers = +mapiproxy
 dcerpc_mapiproxy:server = true
 dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

 ### Configuration required by OpenChange server ###

When I uncomment those dcerpc calls, Samba AD allows the first few 
users to login then gives Access denied to the next users. Curiously 
enough, even in that instance, Samba services are STILL running.


adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 6644
adam@sogo:~$

However, I am unsure whether any of the OpenChange services are running 
in that instance.


Without the dcerpc calls, none of the OpenChange services appear to be 
running --


adam@sogo:~$ sudo service --status-all | egrep 'openchange|ocsmanager|rpc'
 [ ? ]  apport
 [ ? ]  console-setup
 [ ? ]  dns-clean
 [ ? ]  irqbalance
 [ ? ]  killprocs
 [ ? ]  kmod
 [ ? ]  mysql
 [ ? ]  networking
 [ ? ]  ondemand
 [ - ]  openchange-ocsmanager
 [ ? ]  pppd-dns
 [ ? ]  rc.local
 [ ? ]  screen-cleanup
 [ ? ]  sendsigs
 [ ? ]  umountfs
 [ ? ]  umountnfs.sh
 [ ? ]  umountroot
adam@sogo:~$

'initctl list' returns NO OpenChange services.  I followed the 
instructions on provisioning OpenChange initially.  However, that was 
BEFORE upgrade to Samba 4.1.18  SOGo/OpenChange 2.3  Do I need to 
reprovision?


*Is there a separate tool to test OpenChange provision?**
*
Any suggestions would be appreciated.  Thx.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Calendar name changed to non-readable

[Steve Ankeny]

On 07/31/2015 10:03 AM, Chris Coleman wrote:



On 7/31/2015 9:27 AM, Steve Ankeny wrote:

On 07/31/2015 09:08 AM, Chris Coleman wrote:



On 7/31/2015 8:08 AM, Steve Ankeny wrote:

On 07/31/2015 07:36 AM, Khapare Joshi wrote:
My SOGo version is 2.2.16 (root@shiva.inverse 201502121141). 
Something has changed in this version, some reason in my calendar 
names are not recognizable, instead it prints as : 147F-4Dcc 


But if I create a new calendar i.e test it is normal.

I have attached the screen-shot. anybody has an opinion on this ?

K


Are the alpha-numeric-named calendars shared calendars from other 
users?


If so, that would seem to indicate the issue has to do with the 
authentication of users -- a scrambling of usernames -- i.e., LDAP, 
SQL, Samba-AD, Microsoft-AD, etc.  How are you authenticating users?


Where is user data stored?  It may also simply require a fresh 
sharing from the original user.


It might also be helpful to know your OS, etc.


Shouldn't the sogo web user interface display a sensible, detailed 
error message to the user, if it's indeed encountered a problem when 
attempting to authenticate/authorize the user's access to some 
shared calendars.  Because displaying 64 digit GUID numbers to the 
user instead of calendar names, with no explanation, doesn't work.




Have you checked the relevant log file?




Good idea, but normal users don't have access to global system log files!
Users still need to know what when wrong (for example, unable to 
display certain shared calendars) and why (authorization failure on 
server xxx with username yyy) and how to fix it by themselves (go to 
whatever settings page on some menu and try entering correct 
username/password), or who to contact for help (sogo mail sys admin).




That's a different issue than fixing the problem.

Sorry!  I was under the impression the OP wanted to fix his calendars.  
What you're suggesting may be a feature request but may have little to 
do with actually fixing the problem.  The questions I asked may help.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Calendar name changed to non-readable

[Steve Ankeny]

On 07/31/2015 12:21 PM, Chris Coleman wrote:
Right!  My point is, the app should contain informative error messages 
for every foreseeable error condition, that guide the user to fix 
their own error most of the time, get help from their sogo mail sys 
admin some of the time, and finally resort to the mailing list in very 
rare situations when an unforeseen error occurs and the app doesn't 
have a built-in informative error message to guide the user to fix it 
themselves. Without this, basic level 1 help requests flood the 
mailing list...


Sounds like a feature request to me.  Write the code to implement it, 
and I'm sure Inverse will take a look.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Calendar name changed to non-readable

[Steve Ankeny]

On 07/31/2015 12:34 PM, Anil Thapa wrote:



On 07/31/2015 12:08 PM, Steve Ankeny wrote:

On 07/31/2015 07:36 AM, Khapare Joshi wrote:
My SOGo version is 2.2.16 (root@shiva.inverse 201502121141). 
Something has changed in this version, some reason in my calendar 
names are not recognizable, instead it prints as : 147F-4Dcc 


But if I create a new calendar i.e test it is normal.

I have attached the screen-shot. anybody has an opinion on this ?

K


Are the alpha-numeric-named calendars shared calendars from other 
users?


If so, that would seem to indicate the issue has to do with the 
authentication of users -- a scrambling of usernames -- i.e., LDAP, 
SQL, Samba-AD, Microsoft-AD, etc.  How are you authenticating users?


Where is user data stored?  It may also simply require a fresh 
sharing from the original user.


It might also be helpful to know your OS, etc.



Thanks,

1. users are from ldap
2. calendars, events are stored in postgresql
3. this is my own account.
4. I do not think this is something to do with authentication because
  a) this particular calendar is not shared
   b) if i create new calendar - for example TEST it does create 
exactly what I write
5. only those two calendar I created long ago had these 147F-4Dcc  
kind of names.
6. I had already took a look into the logs, when I click on these i 
see no error, warning message
7. This might be somewhere in the database or the sogo could not 
translate those to readable format - which I don't know where to fix


Khapare


Your conclusions sound logical!  Now maybe someone can help you fix it.

(1) since it seems not to involve users, looking in LDAP is probably not 
the solution


(2) it sounds like a formatting error (UTF-8 etc.) in the database

If I read your e-mail correctly, this started when you recently upgraded 
SOGo?  I'm a little confused about your version number 2.2.16, as I 
don't remember that version.  Can you not upgrade to the latest version, 
2.3.1?


Perhaps someone can help (I'm not an expert)  It sounds like your 
database needs a bit of a cleanup.


Do you have access to the database from a gui interface or command 
line?  Can you query these calendars?  Are these the only calendars 
effected?  Is it possible to rename the calendars (i.e., correct them)?




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v2.3.1

[Steve Ankeny]

On 07/30/2015 09:14 AM, Christian Mack wrote:

Am 30.07.2015 um 15:05 schrieb Chris Coleman:


On 7/30/2015 8:57 AM, Christian Mack wrote:

Hello

Am 30.07.2015 um 14:24 schrieb Márcio Merlone:

On 24-07-2015 08:07, Steve Ankeny wrote:

The only issues I remember with the running of the script were --

(1) users fail to run it
(2) or, they run the wrong script

Instructions are *always* at the back pages of the Installation
Guide --

http://www.sogo.nu/files/docs/SOGo%20Installation%20Guide.pdf (pg 58)

Since I run Ubuntu, I assume the install/upgrade procedure from apt
already does that, is this correct?


No!
You have to do that manually.


Kind regards,
Christian Mack


I nominate adding the database schema upgrade script to the deb and rpm
install/upgrade scripts. It would need to detect the current db schema
version and apply the appropriate db updates. Which it surely does
already...
That automation alone would probably reduce friction by 5%.


It is not that easy.
It first would have to scan your config, in order to find which DBMS you
use.
Some are even using multiple DBs.


Kind regards,
Christian Mack



I nominate a having a warning PLEASE READ INSTRUCTIONS before upgrading!

It's very clearly spelled out in the instructions (as well as in various 
places on this mailing list)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange 'dcerpc' calls stop Samba domain services

[Steve Ankeny]

On 07/28/2015 11:44 AM, Steve Ankeny wrote:

On 07/28/2015 07:25 AM, Steve Ankeny wrote:

On 07/28/2015 03:49 AM, Rowland Penny wrote:


*update* --

I made the corrections to 'ocsmanager.ini' noted above to no avail.

IMO the 'dcerpc' calls in 'smb.conf' are shutting down Samba services.

### Configuration required by OpenChange server ###
#dsb:shema update allowed = true


You have a typo, it should be 'dsb:schema update allowed = true'


#dcerpc endpoint servers = +epmapper, +mapiproxy


Not sure you need '+epmapper' , I think if you run:

samba-tool testparm -v | grep 'dcerpc endpoint servers'

You will need to press enter twice, the result should show just what 
servers are running now (of course you need to run the test with the 
openchange lines commented out)


Rowland


thx, I'll give that a try



Rowland is *right* about not needing '+epmapper' when running 
'samba-ad-dc'


It's already part of Samba Active Directory and not required in the 
'smb.conf'


I've made the other change and will test the fix after hours. Thx.



*Apparently, I reported too soon!*

While several users were able to log into the domain, after about six 
hours, it stopped allowing login.


Curiously, the 'samba-ad-dc' service was STILL running --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 875
adam@sogo:~$

However, when users tried to login, they received Access denied!

*Question*: How do I troubleshoot from this point forward?

Is there a log of failed logins?  And, if not, is there a logging level 
I can use to try to find the problem?


Thanks for any suggestions.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOLVED OpenChange 'dcerpc' calls stop Samba domain services

[Steve Ankeny]

On 07/28/2015 11:44 AM, Steve Ankeny wrote:

On 07/28/2015 07:25 AM, Steve Ankeny wrote:

On 07/28/2015 03:49 AM, Rowland Penny wrote:


*update* --

I made the corrections to 'ocsmanager.ini' noted above to no avail.

IMO the 'dcerpc' calls in 'smb.conf' are shutting down Samba services.

### Configuration required by OpenChange server ###
#dsb:shema update allowed = true


You have a typo, it should be 'dsb:schema update allowed = true'


#dcerpc endpoint servers = +epmapper, +mapiproxy


Not sure you need '+epmapper' , I think if you run:

samba-tool testparm -v | grep 'dcerpc endpoint servers'

You will need to press enter twice, the result should show just what 
servers are running now (of course you need to run the test with the 
openchange lines commented out)


Rowland


thx, I'll give that a try



Rowland is *right* about not needing '+epmapper' when running 
'samba-ad-dc'


It's already part of Samba Active Directory and not required in the 
'smb.conf'


I've made the other change and will test the fix after hours. Thx.


Bingo!  That was the issue.

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange 'dcerpc' calls stop Samba domain services

[Steve Ankeny]

On 07/28/2015 07:25 AM, Steve Ankeny wrote:

On 07/28/2015 03:49 AM, Rowland Penny wrote:


*update* --

I made the corrections to 'ocsmanager.ini' noted above to no avail.

IMO the 'dcerpc' calls in 'smb.conf' are shutting down Samba services.

### Configuration required by OpenChange server ###
#dsb:shema update allowed = true


You have a typo, it should be 'dsb:schema update allowed = true'


#dcerpc endpoint servers = +epmapper, +mapiproxy


Not sure you need '+epmapper' , I think if you run:

samba-tool testparm -v | grep 'dcerpc endpoint servers'

You will need to press enter twice, the result should show just what 
servers are running now (of course you need to run the test with the 
openchange lines commented out)


Rowland


thx, I'll give that a try



Rowland is *right* about not needing '+epmapper' when running 'samba-ad-dc'

It's already part of Samba Active Directory and not required in the 
'smb.conf'


I've made the other change and will test the fix after hours.  Thx.

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange 'dcerpc' calls stop Samba domain services

[Steve Ankeny]

On 07/28/2015 03:49 AM, Rowland Penny wrote:


*update* --

I made the corrections to 'ocsmanager.ini' noted above to no avail.

IMO the 'dcerpc' calls in 'smb.conf' are shutting down Samba services.

### Configuration required by OpenChange server ###
#dsb:shema update allowed = true


You have a typo, it should be 'dsb:schema update allowed = true'


#dcerpc endpoint servers = +epmapper, +mapiproxy


Not sure you need '+epmapper' , I think if you run:

samba-tool testparm -v | grep 'dcerpc endpoint servers'

You will need to press enter twice, the result should show just what 
servers are running now (of course you need to run the test with the 
openchange lines commented out)


Rowland


thx, I'll give that a try

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Choose login domain based on DNS domain used to access the server.

[Steve Ankeny]

On 07/27/2015 05:42 AM, Nils Fredrik Gjerull wrote:

Hi,

Any thoughts please. Would appreciate at least an acknowledgement that 
the e-mail was read, so I know I am not sending e-mails into the void :)


I also had a proposal/question about using a http header to set the 
login domain. I guess that it is not supported so I should create a 
proposal for it?



Den 22. juli 2015 15:32, skrev Nils Fredrik Gjerull:

Hi,

I have a use case were I want to make the SOGo webmail client 
accessible through different DNS domains, and based on which DNS 
domain is used a login domain is automatically chosen. I want to use 
SOGo as a multi-tenant system without users having to choose a login 
domain.


Let say that SOGo is available on mail.domain1.com and 
mail.domain2.com, and in SOGo I have domain1 and domain2 as separate 
login domains. If a user access the SOGo webmail client through 
mail.domain1.com, domain1 will be used as the login domain. That way 
the user do not have to select the domain or append it to the username.


I am primarily thinking about the SOGo webmail client and not CardDAV 
and CalDAV, but I would not mind if it were possible to do it for 
them as well. I understand that there is some kind of template 
overriding system for the .wox templates. Would I be able to get the 
current URL/domain and be able to set a login domain within such a 
template?


I appreciate any suggestions.

Regards



It sounds to me like you're mixing technologies --

domain login (whether Windows or Samba AD) and SOGo webmail

Perhaps no one has responded simply because they are unsure what you're 
trying to do.


IF you already have SOGo webmail available via two domains, are you 
running two instances of SOGo and two instances of your mail server 
(Dovecot/Postfix, etc.) or have you configured one instance to work for 
both?


And, IF you have two domain logins are you running two AD servers?

Does domain login come before webmail login, etc?  I may be totally 
off-base (sorry)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Choose login domain based on DNS domain used to access the server.

[Steve Ankeny]

On 07/27/2015 09:29 AM, Nils Fredrik Gjerull wrote:

Den 27. juli 2015 15:02, skrev Tanstaafl:

It sounds to me like he is running a single SOGo instance hosting
multiple email domains, and has unique URLs (ie, his reference to 'DNS')
for each email domain, and wants SOGo to be able to append a fqdn to the
end of the username based on the URL of the login page?

If I understand this correctly, I'd love to see this ability as well.

So, depending on if a user goes to:

https://sogo.example1.com/SOGo/so/
or
https://sogo.example2.com/SOGo/so/

and entered a username of user1

SOGo would pass us...@example1.com or us...@example2.com as the
login username to whatever the backend auth mechanism is using.


This is exactly what I have in mind :)

Regards



Does the other suggestion work?

https://lists.inverse.ca/sogo/arc/users/2015-07/msg00247.html

What you want to do is possible (auto select from a set of Sogo login 
domains, on a multi tenant multi DNS domain Sogo webmail server, based 
on http host header). The .WOX template file is a template based on 
Objective-C and with Objective-C you should be able to do anything, such 
as, in this case, get the http headers from the http request. Look for 
the http header called Host. Verify that it's a valid dns domain that 
you're hosting the Sogo webmail for, and then set the login domain to 
that Host value.


Have a look here:
http://sope.opengroupware.org/en/docs/snippets/wox.html



--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] OpenChange 'dcerpc' calls stop Samba domain services

[Steve Ankeny]

This was initially sent to the wrong mailing list.  Updated at bottom.
--

Over the weekend, I configured OpenChange, OCS Manager  RPC Proxy in 
the manner described in the Outlook Configuration Guide to work with 
Samba in anticipation of setting up my first Outlook 2010 profile.


Specifically, I followed the instructions on pg. 10-17 with reference to 
'smb.conf'  'ocsmanager.ini'


When I initially configured Samba AD DC, I inserted the language on pg. 
10  13 in 'smb.conf' but commented it out so Samba-AD-DC would work 
correctly.  That was prior to the upgrade to SOGo  OpenChange 2.3


I also initially provisioned OpenChange  created the 'openchange' DB in 
MySQL


When I completed my configuration of OpenChange  OCS Manager, my Samba 
services stopped running.


The only working solution is to comment out the OpenChange lines in 
'smb.conf'


Here's my 'smb.conf' --

[global]
workgroup = SMBDOMAIN
realm = smbdomain.com
netbios name = SOGO
server role = active directory domain controller
dns forwarder = 192.168.121.1
idmap_ldb:use rfc2307 = yes
passdb backend = samba
allow dns updates = nonsecure

### Configuration required by OpenChange server ###
#dsb:shema update allowed = true
#dcerpc endpoint servers = +epmapper, +mapiproxy
#dcerpc_mapiproxy:server = true
#dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, 
exchange_ds_rfr

### Configuration required by OpenChange server ###

#mapistore:namedproperties = mysql
#namedproperties:mysql_user = openchange-user
#namedproperties:mysql_pass = $passwd
#namedproperties:mysql_host = localhost
#namedproperties:mysql_db = openchange
#mapistore:indexing_backend = 
mysql://openchange-user:$passwd@localhost/openchange
#mapiproxy:openchangedb = 
mysql://openchange-user:$passwd@localhost/openchange


[netlogon]
path = /var/lib/samba/sysvol/smbdomain.com/scripts
read only = No

[sysvol]
path = /var/lib/samba/sysvol
read only = No

And, my 'ocsmanager.ini' --

[DEFAULT]
debug = true
email_to = valid.u...@smbdomain.com
smtp_server = localhost
error_email_from = paste@localhost

[main]
auth = ldap
mapistore_root = /var/lib/samba/private
mapistore_data = /var/lib/samba/private/mapistore
debug = yes

[auth:file]

[auth:ldap]
host = ldap://127.0.0.1
port = 389
bind_dn = cn=Administrator,cn=Users,dc=smbdomain,dc=com
bind_pw = $passwd
basedn = cn=Users,dc=smbdomain,dc=com

[auth:single]
username = openchange
# password is test
*#password = {SSHA}I6Hy5Wv0wuxyXvMBFWFQDVVN12_CLaX9* *(Is this a problem?)*
password = $passwd

[server:main]
use = egg:Paste#http
host = 127.0.0.1
port = 5000
protocol_version = HTTP/1.1

[app:main]
use = egg:ocsmanager
full_stack = true
static_files = true
cache_dir = %(here)s/data
beaker.session.key = ocsmanager
beaker.session.secret = SDyKK3dKyDgW0mlpqttTMGU1f
app_instance_uuid = {ee533ebc-f266-49d1-ae10-d017ee6aa98c}
NTLMAUTHHANDLER_WORKDIR = /var/cache/ntlmauthhandler
SAMBA_HOST = 127.0.0.1

[rpcproxy:ldap]
host = localhost
port = 389
*basedn = CN=Users,DC=example,DC=com   (Is this a problem?)*
set debug = true

[autodiscover]

[autodiscover:rpcproxy]
enabled = true

[outofoffice]

[outofoffice:file]
sieve_script_path = /var/vmail/$domain/$user/sieve-script
sieve_script_path_mkdir = false

[outofoffice:managesieve]
secret = secret

[loggers]
keys = root

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = INFO
handlers = console

[handler_console]
class = StreamHandler
secret = secret

# Logging configuration
[loggers]
keys = root

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = INFO
handlers = console

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[formatter_generic]
format = %(asctime)s %(levelname)-5.5s [%(name)s] [%(threadName)s] 
%(message)s



Notice the *em**boldened* lines in 'ocsmanager.ini'

*Could those errors turn off my Samba services?*


With the OpenChange lines uncommented in 'smb.conf,' I see the following --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc stop/running
adam@sogo:~$

With those same lines commented out, I see the following --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 875
adam@sogo:~$

Here's my package selections --

adam@sogo:~$ sudo dpkg --get-selections | egrep 'samba|smb|nmb|winbind'
libnss-winbind:amd64install
libpam-winbind:amd64install
libsmbclient:amd64  install
python-samba

Re: [SOGo] Adding users via Windows Admin Tools doesn't work

[Steve Ankeny]

yes, it does --

That was the issue with my SOGo upgrade.  It would not upgrade the 
'samba' package from Inverse.


I had originally installed 'samba-ad-dc' from the Samba Wiki

https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO

Then I setup Dovecot/Postfix and lastly SOGo (trying to follow the 
Instruction Manual)


I have just recently completed the Samba upgrade (and all the SOGo, 
OpenChange upgrades, etc.)


I had a problem with webmail which turned out to be an older 
'sogo.conf' and I was missing a couple of packages for Outlook -- 
'openchange-ocsmanager' 'openchange-rpcproxy'  That was my 
'rpcproxy.dll' issue.


So, anyway, I am interested in how we might add new uses to the 
completed server, and right now, I believe the proper way to do so is to 
run 'samba-tool' and 'openchange_newuser' as you have then login to 'sogo'


I'd like to see the Windows AD tools work properly.  I used the tools to 
create a domain login account, but it does not use our mail or calendar 
services, so I haven't actually tested that function with new domain users.


We're using Samba domain users to segregate who has access to certain 
applications.


On 07/24/2015 06:04 PM, Gerald Brandt wrote:


I haven't had a chance to try SOGo 2.3.1, but I believe it uses the 
same Samba.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Adding users via Windows Admin Tools doesn't work

[Steve Ankeny]

just a comment before Rowland responds --

When I first created Samba users, I used 'samba-tool' and 
'openchange_newuser' just as you did here.  Then I was instructed that 
by logging into the SOGo web interface, it would create the tables, 
fields, etc. in MariaDB


(I think that was the correct procedure, as it was a bit ago)

I used the instructions in the Outlook Configuration PDF (like below) 
then logged into SOGo as each user.


I do not recall doing anything for Dovecot/Postfix other than setup the 
initial admin account.


On 07/24/2015 06:03 PM, Gerald Brandt wrote:

Hi,

samba-tool user add test
openchange_newuser --create test

The above commands give me a user that has great access via Outlook, 
IMAP, and web.


Gerald



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v2.3.1

[Steve Ankeny]

The only issues I remember with the running of the script were --

(1) users fail to run it
(2) or, they run the wrong script

Instructions are *always* at the back pages of the Installation Guide --

http://www.sogo.nu/files/docs/SOGo%20Installation%20Guide.pdf (pg 58)

On 07/24/2015 01:08 AM, Thomas Trepper wrote:
It’s the same for me, I would also like to upgrade from 2.2.16. Where 
do I find the information about the database upgrade script procedure? 
There seemed to be a lot of issues with it - will it run smoothly?

Thanks a lot in advance.

Thomas



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Using SOGo

[Steve Ankeny]

(1) any user wishing the share a calendar must do so through the 
webmail Preferences


(2) and, any user wishing to read a shared calendar must subscribe 
to the calendar


On 07/24/2015 03:12 AM, Marc Patermann wrote:

Ana,

Am 23.07.2015 um 14:33 Uhr schrieb Ana Sustič:

I am testing the shared Address Book in Sogo demo from Thunderbird. It
syncronises fine for Address books with  public access.

OK.


How do you
configure Thunderbird to connect to a shared Address book in Sogo with
access rights for Authenticated users. Currently Thunderbird always
reverts to the first configured account in Thunderbird when I
synchronise the remote Address Book.

I'm not really sure, what you're talking about.
Yes, in TB SOGo always uses the user of the fist account to connect to 
the server. You can only log in once with TB, so this should be your 
personal account.
If you want to access other one's address books, you need rights on 
these. In question log in with the web GUI (as the other user) give 
rights to your personal user und add the other one's address book to 
your profile (this functionality is added by the SOGo integrator 
add-on to TB).

Does this help you?


Marc



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] rpcproxy.dll gives me a 403

[Steve Ankeny]

ok, I wasn't sure of that (thx)

On 07/24/2015 09:28 AM, Gerald Brandt wrote:



On 2015-07-23 05:29 PM, stev...@cinergymetro.net wrote:
I've made the changes with the recently updated 2.3.1 packages 
installed.


I get unsupported method when accessing
https://FQDNservername/rpc/rpcproxy.dll

I'm unsure which user/password to use ('sogo' 'openchange' 'samba-
administrator' etc)

thx
If the webpage asks for a password, it's working.  It's not meant to 
actually display a web page.


Gerald



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/18/2015 05:34 PM, Christian M. Jensen wrote:

hi.

this is just a suggestion, if the problem really just is the postinst 
script


download the package using wget or other local tool
then unpack it and extract the DEBIAN folder from it like this

*NOTE* foo.deb is the package you modify
*NOTE* tmpdir is the folder you extract the deb archive to.
*NOTE* hacked.deb is the package you install!

dpkg-deb -x foo.deb tmpdir
dpkg-deb --control foo.deb tmpdir/DEBIAN

now edit the postinst script

 nano tmpdir/DEBIAN/control

now pack the deb file and install it

dpkg -b tmpdir hacked.deb
dpkg -i hacked.deb

I've done this my self a few times, and might just be what you need if 
you don't want to compile it

just a suggestion.

Regards
Christian Jensen



just a followup --

*Christian's suggestion was the ONLY suggestion that worked.*

(1) 'update-rc.d -f samba remove'  'apt-get -f install' didn't work

No matter the order in which I performed the procedures, it never 
completed the installation.


(2) neither did 'mv /etc/init.d/samba /etc/init.d/samba_old' work

That appeared to me simply a different way of removing the 'samba' link 
in '/etc/init.d/'


As it turns out --

(3) *There is an error in the Inverse 'samba' package 
'/tmpdir/DEBIAN/postinst' script*


line 51 reads 'update-rc.d samba remove' but SHOULD read 'update-rc.d -f 
samba remove'


The first DOES NOT WORK but the second does.

(4) removing 'samba' before installing the hacked deb package is a mistake

The deb package requires other Samba packages, such as 'samba-common' 
'samba-common-bin' etc., so those MUST be installed before installing 
the hacked deb package ('samba' will fail at that point)


THEN the hacked deb package will install properly over the failed 
'samba' package.


After completing the installation --

(5) domain login worked properly (most likely because I had not removed 
or disturbed 'samba')


The domain user DB was intact, and it allowed login to the domain 
(machines were properly joined)


(6) HOWEVER, I had issues with logging into the SOGo web interface (not 
recognizing user/password)


I will have to troubleshoot why I could not log into SOGo and/or why 
the web interface would not load.  Actually, although Apache was 
running, I could not access the SOGo web page itself (so, there's an issue)


I have rolled back (restored) the snapshot of my server so users can 
work uninterrupted today.


Any suggestions on how to troubleshoot my e-mail/calendar server will be 
appreciated.  I successfully ran the 'sql-update' script, but I was 
never able to test it because SOGo would not recognize user/password.


I would appreciate Inverse correcting the issue with the 'postinst' 
script (it would save time)



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/18/2015 05:34 PM, Christian M. Jensen wrote:

hi.

this is just a suggestion, if the problem really just is the postinst 
script


download the package using wget or other local tool
then unpack it and extract the DEBIAN folder from it like this

*NOTE* foo.deb is the package you modify
*NOTE* tmpdir is the folder you extract the deb archive to.
*NOTE* hacked.deb is the package you install!

dpkg-deb -x foo.deb tmpdir
dpkg-deb --control foo.deb tmpdir/DEBIAN

now edit the postinst script

 nano tmpdir/DEBIAN/control

now pack the deb file and install it

dpkg -b tmpdir hacked.deb
dpkg -i hacked.deb

I've done this my self a few times, and might just be what you need if 
you don't want to compile it

just a suggestion.

Regards
Christian Jensen


thx, Christian

I tried Rowland's suggestion last evening ('sudo apt-get -f install'), 
and it didn't resolve the issue.


It certainly seems to me that I need a CORRECT 'samba' package, and if 
it's strictly the postinst script, as the error notes, and as Rowland 
suggested, then your methodology just might get me over the hump.


here were the latest steps I took --

adam@sogo:~$ sudo apt-get remove samba  (no errors)

adam@sogo:~$ sudo apt-get update  sudo apt-get upgrade (installed 
remaining packages)


adam@sogo:~$ sudo apt-get install python-ocsmanager (package withheld above)

('python-ocsmanager' requires 'samba' which generates the following error)

Setting up samba (2:4.1.18+dfsg-3~inverse1) ...
Installing new version of config file /etc/logrotate.d/samba ...
Installing new version of config file /etc/init/smbd.conf ...
Installing new version of config file /etc/init.d/samba ...
update-rc.d: /etc/init.d/samba exists during rc.d purge (use -f to force)
dpkg: error processing package samba (--configure):
 subprocess installed post-installation script returned error exit status 1

(edit /var/lib/dpkg/status to read install ok installed then)

adam@sogo:~$ sudo apt-get -f install
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
dpkg: error: parsing file '/var/lib/dpkg/status' near line 645 package 
'samba':

 Config-Version for package with inappropriate Status
E: Sub-process /usr/bin/dpkg returned an error code (2)
adam@sogo:~$

So, it appears to me that SOMEONE needs to edit the post-installation 
script.


I will try one more time using the 'sudo update-rc.d -f samba remove' 
command (as I did before)


Then I'll try your suggestion (probably this evening EDT -- NY time)

thx for the suggestion



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/20/2015 10:24 AM, Sven Nielsen wrote:


Setting up samba (2:4.1.18+dfsg-3~inverse1) ...
Installing new version of config file /etc/logrotate.d/samba ...
Installing new version of config file /etc/init/smbd.conf ...
Installing new version of config file /etc/init.d/samba ...
update-rc.d: /etc/init.d/samba exists during rc.d purge (use -f to 
force)

dpkg: error processing package samba (--configure):
  subprocess installed post-installation script returned error exit 
status 1


As a workaround, have you tred simply to remove or rename 
/etc/init.d/samba to something else before running 'apt-get install 
-f ? This should get you around this error and one step further..


Sven


Processing triggers for ureadahead (0.100.0-16) ...
E: Sub-process /usr/bin/dpkg returned an error code (1)
adam@sogo:~$




that was Rowland Penney's original suggestion --

(1) edit '/var/lib/dpkg/status'
(2) run 'sudo update-rd.d samba remove'
(3) and 'sudo apt-get -f install'

I've run all three but the last time I didn't run (2) because there 
wasn't an error before the attempt (only after)  What you cite here is 
the error AFTER I ran 'sudo apt-get -f install' which admittedly is the 
clue.


And, as others have suggested, it shows the problem with the script in 
the Inverse 'samba' package.


I'll do these tonight before attempting to download and edit myself.

I think Inverse should fix their 'samba' package.  Maybe a bug report 
should be filed?




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/20/2015 11:51 AM, Sven Nielsen wrote:

Am 20.07.2015 um 17:18 schrieb Steve Ankeny:

On 07/20/2015 10:24 AM, Sven Nielsen wrote:


Setting up samba (2:4.1.18+dfsg-3~inverse1) ...
Installing new version of config file /etc/logrotate.d/samba ...
Installing new version of config file /etc/init/smbd.conf ...
Installing new version of config file /etc/init.d/samba ...
update-rc.d: /etc/init.d/samba exists during rc.d purge (use -f to
force)
dpkg: error processing package samba (--configure):
  subprocess installed post-installation script returned error exit
status 1


As a workaround, have you tred simply to remove or rename
/etc/init.d/samba to something else before running 'apt-get install
-f ? This should get you around this error and one step further..

Sven


Processing triggers for ureadahead (0.100.0-16) ...
E: Sub-process /usr/bin/dpkg returned an error code (1)
adam@sogo:~$




that was Rowland Penney's original suggestion --

(1) edit '/var/lib/dpkg/status'
(2) run 'sudo update-rd.d samba remove'


No ;), I mean, just _manually_ rename the file with:

# mv /etc/init.d/samba /etc/init.d/samba_old

Sven



noted . . . I'll try your suggestion first (then Rowland's)


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/01/2015 02:39 PM, Steve Ankeny wrote:

thx, I'll look at it when I'm back off my downtime

On 07/01/2015 12:21 PM, Achim Gottinger wrote:

Hello Steve,

You used purge and not remove so all configs got removed as well.
Take an look in /var/lib/samba you may find backup's there done by 
apt/dpkg durcing upgrades.
I have an bunch of  backed-up-by-dpkg-on-2015-03-10T16.56.tar.gz 
files there.
Seems these include all the necessary ldb's but they all have an 
suffix like backed-up-by-dpkg-on-2015-03-10T16.56 here which must be 
removed.


achim~





ok, finally gave this a try

However, there are STILL errors --

(here are the steps I used in order)

adam@sogo:~$ sudo apt-get remove samba
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libgnutls28 libhogweed2 libldb-dev libldb1 libnettle4 libsmbclient
  python-ldb python-samba samba-common samba-common-bin samba-dev
  samba-dsdb-modules samba-libs samba-vfs-modules smbclient
Suggested packages:
  gnutls-bin heimdal-clients
The following packages will be REMOVED:
  libnss-winbind libpam-winbind openchangeproxy openchangeserver samba 
winbind

The following NEW packages will be installed:
  libgnutls28 libhogweed2 libnettle4
The following packages will be upgraded:
  libldb-dev libldb1 libsmbclient python-ldb python-samba samba-common
  samba-common-bin samba-dev samba-dsdb-modules samba-libs 
samba-vfs-modules

  smbclient
12 upgraded, 3 newly installed, 6 to remove and 8 not upgraded.
Need to get 8,559 kB of archives.
After this operation, 16.1 MB disk space will be freed.
Do you want to continue? [Y/n]Y

(completes without error)

(edit 'dns-nameservers' and restart network)

(reinstall packages that were REMOVED -- using -f yields same results)

adam@sogo:~$ sudo apt-get install samba openchangeproxy openchangeserver 
winbind libnss-winbind libpam-winbind python-ocsmanager

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  python-mapistore python-rpclib python-sievelib python-spyne 
python-support

  python-tz
Suggested packages:
  bind9 bind9utils ctdb ntp smbldap-tools
The following NEW packages will be installed:
  libnss-winbind libpam-winbind openchangeproxy openchangeserver
  python-mapistore python-rpclib python-sievelib python-spyne 
python-support

  python-tz samba winbind
The following packages will be upgraded:
  python-ocsmanager
1 upgraded, 12 newly installed, 0 to remove and 0 not upgraded.
Need to get 2,833 kB of archives.
After this operation, 21.7 MB of additional disk space will be used.
Do you want to continue? [Y/n] Y

(errors follow -- highlighted)

Setting up samba (2:4.1.18+dfsg-3~inverse1) ...
Installing new version of config file /etc/logrotate.d/samba ...
Installing new version of config file /etc/init/smbd.conf ...
Installing new version of config file /etc/init.d/samba ...
*update-rc.d: /etc/init.d/samba exists during rc.d purge (use -f to force)**
**dpkg: error processing package samba (--configure):**
** subprocess installed post-installation script returned error exit 
status 1**

*dpkg: dependency problems prevent configuration of winbind:
 winbind depends on samba (= 2:4.1.18+dfsg-3~inverse1); however:
  Package samba is not configured yet.

dpkg: error processing package winbind (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libnss-winbind:amd64:
 libnss-winbind:amd64 depends on winbind (= 2:4.1.18+dfsg-3~inverse1); 
however:

  Package winbind is not configured yet.

dpkg: error processing package libnss-winbind:amd64 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libpam-winbind:amd64:
 libpam-winbind:amd64 depends on winbind (= 2:4.1.18+dfsg-3~inverse1); 
however:

  Package winbind is not configured yet.

dpkg: error processing package libpam-winbind:amd64 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of openchangeproxy:
 openchangeproxy depends on samba (= 4.1.3); however:
  PackNo apport report written because the error message indicates its 
a *followup error from a previous failure.*
   No apport report written because the error message indicates its a 
followup error from a previous failure.

   No apport report written because MaxReports is reached already
   No apport report written because MaxReports is reached already
   No apport report written because MaxReports is reached already
   Package samba is not configured yet.

dpkg: error processing package openchangeproxy (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of openchangeserver:
 openchangeserver depends on openchangeproxy; however:
  Package openchangeproxy is not configured yet.
 openchangeserver depends on samba (= 2:4.1.3

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/18/2015 02:56 PM, Rowland Penny wrote:

On 18/07/15 19:26, Steve Ankeny wrote:

On 07/18/2015 12:53 PM, Rowland Penny wrote:

On 18/07/15 15:27, Steve Ankeny wrote:

On 07/01/2015 02:39 PM, Steve Ankeny wrote:

thx, I'll look at it when I'm back off my downtime

On 07/01/2015 12:21 PM, Achim Gottinger wrote:

Hello Steve,

You used purge and not remove so all configs got removed as well.
Take an look in /var/lib/samba you may find backup's there done 
by apt/dpkg durcing upgrades.
I have an bunch of backed-up-by-dpkg-on-2015-03-10T16.56.tar.gz 
files there.
Seems these include all the necessary ldb's but they all have an 
suffix like backed-up-by-dpkg-on-2015-03-10T16.56 here which must 
be removed.


achim~





ok, finally gave this a try

However, there are STILL errors --

(here are the steps I used in order)

adam@sogo:~$ sudo apt-get remove samba
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libgnutls28 libhogweed2 libldb-dev libldb1 libnettle4 libsmbclient
  python-ldb python-samba samba-common samba-common-bin samba-dev
  samba-dsdb-modules samba-libs samba-vfs-modules smbclient
Suggested packages:
  gnutls-bin heimdal-clients
The following packages will be REMOVED:
  libnss-winbind libpam-winbind openchangeproxy openchangeserver 
samba winbind

The following NEW packages will be installed:
  libgnutls28 libhogweed2 libnettle4
The following packages will be upgraded:
  libldb-dev libldb1 libsmbclient python-ldb python-samba samba-common
  samba-common-bin samba-dev samba-dsdb-modules samba-libs 
samba-vfs-modules

  smbclient
12 upgraded, 3 newly installed, 6 to remove and 8 not upgraded.
Need to get 8,559 kB of archives.
After this operation, 16.1 MB disk space will be freed.
Do you want to continue? [Y/n]Y

(completes without error)

(edit 'dns-nameservers' and restart network)

(reinstall packages that were REMOVED -- using -f yields same 
results)


adam@sogo:~$ sudo apt-get install samba openchangeproxy 
openchangeserver winbind libnss-winbind libpam-winbind 
python-ocsmanager

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  python-mapistore python-rpclib python-sievelib python-spyne 
python-support

  python-tz
Suggested packages:
  bind9 bind9utils ctdb ntp smbldap-tools
The following NEW packages will be installed:
  libnss-winbind libpam-winbind openchangeproxy openchangeserver
  python-mapistore python-rpclib python-sievelib python-spyne 
python-support

  python-tz samba winbind
The following packages will be upgraded:
  python-ocsmanager
1 upgraded, 12 newly installed, 0 to remove and 0 not upgraded.
Need to get 2,833 kB of archives.
After this operation, 21.7 MB of additional disk space will be used.
Do you want to continue? [Y/n] Y

(errors follow -- highlighted)

Setting up samba (2:4.1.18+dfsg-3~inverse1) ...
Installing new version of config file /etc/logrotate.d/samba ...
Installing new version of config file /etc/init/smbd.conf ...
Installing new version of config file /etc/init.d/samba ...
*update-rc.d: /etc/init.d/samba exists during rc.d purge (use -f to 
force)**

**dpkg: error processing package samba (--configure):**
** subprocess installed post-installation script returned error 
exit status 1**

*


OK, This error seems to be coming from the debian postinst script:

if dpkg --compare-versions $2 lt-nl 2:4.1.13+dfsg-2~; then
# on upgrades from wheezy to jessie, the samba init script 
should not stay

# active, see #766690
update-rc.d samba remove
fi

This is from 'man update-rc.d' :

REMOVING SCRIPTS
   When  invoked  with the remove option, update-rc.d removes 
any links in
   the /etc/rcrunlevel.d directories to the script 
/etc/init.d/name.   The
   script  must have been deleted already.  If the script is 
still present

   then update-rc.d aborts with an error message.

So, 'Installing new version of config file /etc/init.d/samba ...' 
installs the script
The debian postinst script tries to remove the links from 
'/etc/rcrunlevel.d' but fails because the script exists (see line above)


There is a way around this, it doesn't matter if the script exists 
if the links don't, so, in my opinion, whoever wrote the script 
should have added '-f', this would remove the links even if the 
script exists.


Of course, this is really an artifact of using systemd.

Rowland



Thanks, Rowland!  I knew you'd take notice (and reply)  You've been a 
big help to me.


*Is there any way for me to work around this or must I wait for 
Inverse?*


I was hoping there might still be a way to use 'dpkg' to force 
reconfiguration/installation.


Even downloading packages individually and using 'dpkg' is acceptable 
(until Inverse edits the script)





There may be a way to fix this, open /var/lib/dpkg/status in your 
favourite editor and search for the 'samba' package

Re: [SOGo] Re: SOGo upgrade issue

[Steve Ankeny]

On 07/18/2015 02:56 PM, Rowland Penny wrote:

On 18/07/15 19:26, Steve Ankeny wrote:

On 07/18/2015 12:53 PM, Rowland Penny wrote:

On 18/07/15 15:27, Steve Ankeny wrote:

On 07/01/2015 02:39 PM, Steve Ankeny wrote:

thx, I'll look at it when I'm back off my downtime

On 07/01/2015 12:21 PM, Achim Gottinger wrote:

Hello Steve,

You used purge and not remove so all configs got removed as well.
Take an look in /var/lib/samba you may find backup's there done 
by apt/dpkg durcing upgrades.
I have an bunch of backed-up-by-dpkg-on-2015-03-10T16.56.tar.gz 
files there.
Seems these include all the necessary ldb's but they all have an 
suffix like backed-up-by-dpkg-on-2015-03-10T16.56 here which must 
be removed.


achim~





ok, finally gave this a try

However, there are STILL errors --

(here are the steps I used in order)

adam@sogo:~$ sudo apt-get remove samba
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libgnutls28 libhogweed2 libldb-dev libldb1 libnettle4 libsmbclient
  python-ldb python-samba samba-common samba-common-bin samba-dev
  samba-dsdb-modules samba-libs samba-vfs-modules smbclient
Suggested packages:
  gnutls-bin heimdal-clients
The following packages will be REMOVED:
  libnss-winbind libpam-winbind openchangeproxy openchangeserver 
samba winbind

The following NEW packages will be installed:
  libgnutls28 libhogweed2 libnettle4
The following packages will be upgraded:
  libldb-dev libldb1 libsmbclient python-ldb python-samba samba-common
  samba-common-bin samba-dev samba-dsdb-modules samba-libs 
samba-vfs-modules

  smbclient
12 upgraded, 3 newly installed, 6 to remove and 8 not upgraded.
Need to get 8,559 kB of archives.
After this operation, 16.1 MB disk space will be freed.
Do you want to continue? [Y/n]Y

(completes without error)

(edit 'dns-nameservers' and restart network)

(reinstall packages that were REMOVED -- using -f yields same 
results)


adam@sogo:~$ sudo apt-get install samba openchangeproxy 
openchangeserver winbind libnss-winbind libpam-winbind 
python-ocsmanager

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  python-mapistore python-rpclib python-sievelib python-spyne 
python-support

  python-tz
Suggested packages:
  bind9 bind9utils ctdb ntp smbldap-tools
The following NEW packages will be installed:
  libnss-winbind libpam-winbind openchangeproxy openchangeserver
  python-mapistore python-rpclib python-sievelib python-spyne 
python-support

  python-tz samba winbind
The following packages will be upgraded:
  python-ocsmanager
1 upgraded, 12 newly installed, 0 to remove and 0 not upgraded.
Need to get 2,833 kB of archives.
After this operation, 21.7 MB of additional disk space will be used.
Do you want to continue? [Y/n] Y

(errors follow -- highlighted)

Setting up samba (2:4.1.18+dfsg-3~inverse1) ...
Installing new version of config file /etc/logrotate.d/samba ...
Installing new version of config file /etc/init/smbd.conf ...
Installing new version of config file /etc/init.d/samba ...
*update-rc.d: /etc/init.d/samba exists during rc.d purge (use -f to 
force)**

**dpkg: error processing package samba (--configure):**
** subprocess installed post-installation script returned error 
exit status 1**

*


OK, This error seems to be coming from the debian postinst script:

if dpkg --compare-versions $2 lt-nl 2:4.1.13+dfsg-2~; then
# on upgrades from wheezy to jessie, the samba init script 
should not stay

# active, see #766690
update-rc.d samba remove
fi

This is from 'man update-rc.d' :

REMOVING SCRIPTS
   When  invoked  with the remove option, update-rc.d removes 
any links in
   the /etc/rcrunlevel.d directories to the script 
/etc/init.d/name.   The
   script  must have been deleted already.  If the script is 
still present

   then update-rc.d aborts with an error message.

So, 'Installing new version of config file /etc/init.d/samba ...' 
installs the script
The debian postinst script tries to remove the links from 
'/etc/rcrunlevel.d' but fails because the script exists (see line above)


There is a way around this, it doesn't matter if the script exists 
if the links don't, so, in my opinion, whoever wrote the script 
should have added '-f', this would remove the links even if the 
script exists.


Of course, this is really an artifact of using systemd.

Rowland



Thanks, Rowland!  I knew you'd take notice (and reply)  You've been a 
big help to me.


*Is there any way for me to work around this or must I wait for 
Inverse?*


I was hoping there might still be a way to use 'dpkg' to force 
reconfiguration/installation.


Even downloading packages individually and using 'dpkg' is acceptable 
(until Inverse edits the script)





There may be a way to fix this, open /var/lib/dpkg/status in your 
favourite editor and search for the 'samba' package