[SOGo] BTS activities for Friday, November 02 2018
Title: BTS activities for Friday, November 02 2018 BTS Activities Home page: http://www.sogo.nu/bugs Project: SOGo For the period covering: Friday, November 02 2018 idlast updatestatus (resolution)categorysummary 4588 2018-11-02 08:34:51 updated (open) Web General Wrong urls in HTML-sourcecode 4579 2018-11-02 11:29:36 updated (open) Web Mail Can't distinguish between Domain Addresses and Personal Addresses -- users@sogo.nuhttps://inverse.ca/sogo/lists
Re: [SOGo] SOGo Calendar Resources | Free/Busy Times
Hi Irma, in SOGo you can set a superuser in sogo.conf then under that user you can set rights to any calendar in SOGo Web GUI. Alternatively set a password to your resource and login into its SOGo Web GUI. Kind Regards, Michal Dne 02.11.2018 v 17:14 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, the question was, how are you able to set the ACL, if you cannot login with your resource's account into SOGo Web GUI in order to manipulate the "Sharing" settings. BR Irma ___ Am 02.11.2018 um 16:05 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, use the email attribute with your resource and use any email address. For me "View Time and Date" for "All Authenticated Users" was sufficient. You can set higher rights for certain users so they can see event details. Regards, Michal Dne 02.11.2018 v 12:06 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, > It's not important whether you have mailGroup objectClass or not I know. Any oC providing the mail attribute is required. >Just > review the objectClasses you mentioned for the email attribute and > choose one. My LDIF has objectClass mailUser and inetOrgPerson. Both of them provide the mail attribute. How do you set the ACL for the resource's calendar in order to make it readable for the other users? BR Irma ___ Am 02.11.2018 um 09:38 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, It's not important whether you have mailGroup objectClass or not. You need to add any objectClass that contains an email attribute. Just review the objectClasses you mentioned for the email attribute and choose one. Then check all attributes of the objectClasses, some attributes can be mandatory and some are optional. Choose an objectClass ideally with no mandatory attributes or mandatory attributes that already exist in your resource definition (sn, uid, ...) then just add the email attribute. Regards Michal Dne 01.11.2018 v 20:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, thank you very much for your reply. Great to know, that generally LDAP calendar resources in SOGo work without restriction. I guess that you do not use the iRedMail OpenLDAP server, because I do and there's no objectClass mailGroup available. My iRedMail OpenLDAP installation provides these mail-related objectClasses: - mailAdmin - mailAlias - mailDomain - mailExternalUser - mailList - mailUser BTW: If you use mailGroup, how do you login with the resource's account into SOGo in order to set the ACL? Are group accounts capable to login to SOGo in your environment? BR Irma ___ Am 31.10.2018 um 13:16 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, we use LDAP for users and resources. Just to comment some entries, Multiplebookings attribute works as expected the resource can be booked only once if set to 1, free/busy is shown correctly. We use mailgroup class so that our resource can have its own email address, the email address is fictitious. With mailgroup class comes email attribute. Additionally our resource is located in the same tree (ou=People,dc=example,dc=com) as the other users. As a result when creating a new event with the resource as a participant we get a hint (name of the resource) after writing first three letters (Mee...). It's given by the fact that SOGo offers hints only from the first configured LDAP resource in sogo.conf. It works in SOGo web interface and in Thunderbird with SOGo Integrator. The calendar has set the following right "View Time and Date" for "All Authenticated Users". Here is our LDAP entry - LDIF: dn: cn=Meeting Room,ou=People,dc=example,dc=com Multiplebookings: 1 Kind: location cn: Meeting Room objectClass: top objectClass: person objectClass: organizationalPerson objectClass: calendarresource objectClass: calEntry objectClass: account objectClass: mailgroup mail: meetingro...@example.com sn: meetingrooom uid: meetingrooom userPassword: parentid: 4 creatorsname: cn=directory manager nsuniqueid: 741f2031-e1b221e6-81e6eeab-baae8424 entryid: 106 hassubordinates: FALSE entrydn: cn=Meeting Room,ou=People,dc=example,dc=com numsubordinates: 0 subschemasubentry: cn=schema modifiersname: cn=directory manager Kind Regards, Michal Dne 30.10.2018 v 14:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Approved that it is an LDAP issue: - Removed objectClasses calEntry and CalendarResource from Meetingroom's LDAP set. - Result: Free/Busy times are being displayed during event creation! Again the question: Is there anybody with a working LDAP resources setup who could provide a sample LDIF of a resource? Thank you! BR Irma My resources' Free/Busy times still won't work. For
Re: [SOGo] strange log entries
Hi Christian, Thanks for taking the time to repy. Inverse is suggesting that they might perhaps be timed-out SAML sessions. (we have been trying sogo with SAML auth in a test setup) Are you by any chance also using saml auth? (or have you been using it?) Reassuring that you see them as well, though. Again: thanks. MJ On 11/2/18 4:50 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hi We also get those several dozen times a day. They are normal. A friend of mine hinted, that these are access checks from the great chinese firewall. Kind regards, Christian Mack -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo Calendar Resources | Free/Busy Times
Hi Michal, the question was, how are you able to set the ACL, if you cannot login with your resource's account into SOGo Web GUI in order to manipulate the "Sharing" settings. BR Irma ___ Am 02.11.2018 um 16:05 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, use the email attribute with your resource and use any email address. For me "View Time and Date" for "All Authenticated Users" was sufficient. You can set higher rights for certain users so they can see event details. Regards, Michal Dne 02.11.2018 v 12:06 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, > It's not important whether you have mailGroup objectClass or not I know. Any oC providing the mail attribute is required. >Just > review the objectClasses you mentioned for the email attribute and > choose one. My LDIF has objectClass mailUser and inetOrgPerson. Both of them provide the mail attribute. How do you set the ACL for the resource's calendar in order to make it readable for the other users? BR Irma ___ Am 02.11.2018 um 09:38 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, It's not important whether you have mailGroup objectClass or not. You need to add any objectClass that contains an email attribute. Just review the objectClasses you mentioned for the email attribute and choose one. Then check all attributes of the objectClasses, some attributes can be mandatory and some are optional. Choose an objectClass ideally with no mandatory attributes or mandatory attributes that already exist in your resource definition (sn, uid, ...) then just add the email attribute. Regards Michal Dne 01.11.2018 v 20:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, thank you very much for your reply. Great to know, that generally LDAP calendar resources in SOGo work without restriction. I guess that you do not use the iRedMail OpenLDAP server, because I do and there's no objectClass mailGroup available. My iRedMail OpenLDAP installation provides these mail-related objectClasses: - mailAdmin - mailAlias - mailDomain - mailExternalUser - mailList - mailUser BTW: If you use mailGroup, how do you login with the resource's account into SOGo in order to set the ACL? Are group accounts capable to login to SOGo in your environment? BR Irma ___ Am 31.10.2018 um 13:16 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, we use LDAP for users and resources. Just to comment some entries, Multiplebookings attribute works as expected the resource can be booked only once if set to 1, free/busy is shown correctly. We use mailgroup class so that our resource can have its own email address, the email address is fictitious. With mailgroup class comes email attribute. Additionally our resource is located in the same tree (ou=People,dc=example,dc=com) as the other users. As a result when creating a new event with the resource as a participant we get a hint (name of the resource) after writing first three letters (Mee...). It's given by the fact that SOGo offers hints only from the first configured LDAP resource in sogo.conf. It works in SOGo web interface and in Thunderbird with SOGo Integrator. The calendar has set the following right "View Time and Date" for "All Authenticated Users". Here is our LDAP entry - LDIF: dn: cn=Meeting Room,ou=People,dc=example,dc=com Multiplebookings: 1 Kind: location cn: Meeting Room objectClass: top objectClass: person objectClass: organizationalPerson objectClass: calendarresource objectClass: calEntry objectClass: account objectClass: mailgroup mail: meetingro...@example.com sn: meetingrooom uid: meetingrooom userPassword: parentid: 4 creatorsname: cn=directory manager nsuniqueid: 741f2031-e1b221e6-81e6eeab-baae8424 entryid: 106 hassubordinates: FALSE entrydn: cn=Meeting Room,ou=People,dc=example,dc=com numsubordinates: 0 subschemasubentry: cn=schema modifiersname: cn=directory manager Kind Regards, Michal Dne 30.10.2018 v 14:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Approved that it is an LDAP issue: - Removed objectClasses calEntry and CalendarResource from Meetingroom's LDAP set. - Result: Free/Busy times are being displayed during event creation! Again the question: Is there anybody with a working LDAP resources setup who could provide a sample LDIF of a resource? Thank you! BR Irma My resources' Free/Busy times still won't work. For normal users, Free/Busy times work fine! Here's more detail about the configurations. (1) Resource 'meetingroom' created in LDAP, resides in the same OU as the normal users. Has same objectClasses and attributes as normal user accounts PLUS objectClasses 'calEntry' and 'CalendarResource' with their attributes
Re: [SOGo] SOGo Calendar Resources | Free/Busy Times
Hi Irma, use the email attribute with your resource and use any email address. For me "View Time and Date" for "All Authenticated Users" was sufficient. You can set higher rights for certain users so they can see event details. Regards, Michal Dne 02.11.2018 v 12:06 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, > It's not important whether you have mailGroup objectClass or not I know. Any oC providing the mail attribute is required. >Just > review the objectClasses you mentioned for the email attribute and > choose one. My LDIF has objectClass mailUser and inetOrgPerson. Both of them provide the mail attribute. How do you set the ACL for the resource's calendar in order to make it readable for the other users? BR Irma ___ Am 02.11.2018 um 09:38 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, It's not important whether you have mailGroup objectClass or not. You need to add any objectClass that contains an email attribute. Just review the objectClasses you mentioned for the email attribute and choose one. Then check all attributes of the objectClasses, some attributes can be mandatory and some are optional. Choose an objectClass ideally with no mandatory attributes or mandatory attributes that already exist in your resource definition (sn, uid, ...) then just add the email attribute. Regards Michal Dne 01.11.2018 v 20:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, thank you very much for your reply. Great to know, that generally LDAP calendar resources in SOGo work without restriction. I guess that you do not use the iRedMail OpenLDAP server, because I do and there's no objectClass mailGroup available. My iRedMail OpenLDAP installation provides these mail-related objectClasses: - mailAdmin - mailAlias - mailDomain - mailExternalUser - mailList - mailUser BTW: If you use mailGroup, how do you login with the resource's account into SOGo in order to set the ACL? Are group accounts capable to login to SOGo in your environment? BR Irma ___ Am 31.10.2018 um 13:16 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, we use LDAP for users and resources. Just to comment some entries, Multiplebookings attribute works as expected the resource can be booked only once if set to 1, free/busy is shown correctly. We use mailgroup class so that our resource can have its own email address, the email address is fictitious. With mailgroup class comes email attribute. Additionally our resource is located in the same tree (ou=People,dc=example,dc=com) as the other users. As a result when creating a new event with the resource as a participant we get a hint (name of the resource) after writing first three letters (Mee...). It's given by the fact that SOGo offers hints only from the first configured LDAP resource in sogo.conf. It works in SOGo web interface and in Thunderbird with SOGo Integrator. The calendar has set the following right "View Time and Date" for "All Authenticated Users". Here is our LDAP entry - LDIF: dn: cn=Meeting Room,ou=People,dc=example,dc=com Multiplebookings: 1 Kind: location cn: Meeting Room objectClass: top objectClass: person objectClass: organizationalPerson objectClass: calendarresource objectClass: calEntry objectClass: account objectClass: mailgroup mail: meetingro...@example.com sn: meetingrooom uid: meetingrooom userPassword: parentid: 4 creatorsname: cn=directory manager nsuniqueid: 741f2031-e1b221e6-81e6eeab-baae8424 entryid: 106 hassubordinates: FALSE entrydn: cn=Meeting Room,ou=People,dc=example,dc=com numsubordinates: 0 subschemasubentry: cn=schema modifiersname: cn=directory manager Kind Regards, Michal Dne 30.10.2018 v 14:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Approved that it is an LDAP issue: - Removed objectClasses calEntry and CalendarResource from Meetingroom's LDAP set. - Result: Free/Busy times are being displayed during event creation! Again the question: Is there anybody with a working LDAP resources setup who could provide a sample LDIF of a resource? Thank you! BR Irma My resources' Free/Busy times still won't work. For normal users, Free/Busy times work fine! Here's more detail about the configurations. (1) Resource 'meetingroom' created in LDAP, resides in the same OU as the normal users. Has same objectClasses and attributes as normal user accounts PLUS objectClasses 'calEntry' and 'CalendarResource' with their attributes [values] 'Kind' [location] and 'Multiplebookings' [1]. Meetingroom's full LDAP set: # dn: mail=meetingr...@mycompany.com,ou=Users,domainName=mycompany.com,o=domains,dc=mycompany,dc=com mail: meetingr...@mycompany.com mailQuota: 1048576
Re: [SOGo] Can't add Email-signature (Imap, SQL)
Am 01.11.18 um 22:42 schrieb Holger Biber (holger.bi...@teleos-web.de): > > after upgrading from Sogo2 over Sogo3 to Sogo 4.0.4 users can't add or > edit their email-signatures. > I'm using Dovecot-Imap and SQL-Auth for Sogo. > > The user is able to change the placement of the signature (below) and of > the reply-text (above) , > but not the signature itself and other imap-prefs (like "Never send a > return receipt") > When adding a signature-text and clicking the OK-button the "Save"-Icon > at the top right side of the > web-window doesn't change to "green" (save is enabled). > > At "demo.sogo.nu" (using sogo1/sogo1) it works and there is a simple > texteditor widget for editing the > signature. > > How can I enable the user to add a signature and how to enable the > simple editor? > This has nothing to do with IMAP. Did you apply the database scripts while upgrading? Kind regards, Christian Mack -- Christian Mack Universität Konstanz Kommunikations-, Informations-, Medienzentrum (KIM) Abteilung Basisdienste 78457 Konstanz +49 7531 88-4416 smime.p7s Description: S/MIME Cryptographic Signature
Re: [SOGo] strange log entries
Hi We also get those several dozen times a day. They are normal. A friend of mine hinted, that these are access checks from the great chinese firewall. Kind regards, Christian Mack Am 01.11.18 um 13:43 schrieb mj (li...@merit.unu.edu): > Hi Marcus, > > Thanks very much for your reply. We have apache in front of sogo, and as > fas as I can see, apache is logging nothing special at the time of these > authentication attempts. > > We had 5 of these auth attempts this morning at 06:01. Here are some > more (probably too many) logs from sogo, and further down the same same > period apache logs. > > Hopefully someone here can spot something that I am missing. > > Sogo this morning: >> Nov 01 06:01:35 sogod [26091]: |SOGo| starting method 'POST' on uri >> '/SOGo/Microsoft-Server-ActiveSync?Cmd=Sync=user_av=C1EFA48B85=SAMSUNGSMT805' >> >> Nov 01 06:01:37 sogod [25952]: [WARN] >> <0x0x55e5d00d6ff0[WOWatchDogChild]> pid 25975 has been hanging in the >> same request for 3 minutes >> Nov 01 06:01:38 sogod [26098]: >> <0x0x55e5d9a5b710[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_heu in Ping... >> Nov 01 06:01:38 sogod [26058]: |SOGo| starting method 'POST' on uri >> '/SOGo/Microsoft-Server-ActiveSync?Cmd=Ping=user_ta=androidc1214775124=Android' >> >> Nov 01 06:01:38 sogod [25975]: >> <0x0x55e5d6bc06f0[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_bie in Ping... >> Nov 01 06:01:40 sogod [26091]: |SOGo| request took 4.681785 seconds to >> execute >> Nov 01 06:01:40 sogod [26091]: 198.54.173.196 "POST >> /SOGo/Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16FB85=SAMSUNGSMT805 >> HTTP/1.1" 503 0/144 4.683 - - 0 >> Nov 01 06:01:40 sogod [25978]: |SOGo| request took 36.488380 seconds >> to execute >> Nov 01 06:01:40 sogod [25978]: 198.54.173.196 "POST >> /SOGo/Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16F5=SAMSUNGSMT805 >> HTTP/1.1" 200 0/144 36.489 - - 0 >> Nov 01 06:01:40 sogod [25992]: |SOGo| request took 24.210513 seconds >> to execute >> Nov 01 06:01:40 sogod [25992]: 198.54.173.196 "POST >> /SOGo/Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC1EFA48B85=SAMSUNGSMT805 >> HTTP/1.1" 503 0/144 24.212 - - 0 >> Nov 01 06:01:40 sogod [26065]: >> <0x0x55e5d6bc43a0[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_pi in Ping... >> Nov 01 06:01:40 sogod [26058]: >> <0x0x55e5d93c02a0[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_ta in Ping... >> Nov 01 06:01:40 sogod [25974]: >> <0x0x55e5d4680b20[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_sa in Ping... >> Nov 01 06:01:41 sogod [25990]: >> <0x0x55e5d3da6ed0[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_vi in Ping... >> Nov 01 06:01:41 sogod [25980]: >> <0x0x55e5d278e3d0[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_sa in Ping... >> Nov 01 06:01:42 sogod [25992]: |SOGo| starting method 'POST' on uri >> '/SOGo/Microsoft-Server-ActiveSync?Cmd=Sync=user_av=S6FC1EFA48B85=SAMSUNGSMT805' >> >> Nov 01 06:01:42 sogod [25992]: |SOGo| request took 0.417357 seconds to >> execute >> Nov 01 06:01:42 sogod [25992]: 198.54.173.196 "POST >> /SOGo/Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16FC1EB85=SAMSUNGSMT805 >> HTTP/1.1" 200 0/144 0.419 - - 0 >> Nov 01 06:01:43 sogod [25984]: >> <0x0x55e5d919e0b0[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_fo in Ping... >> Nov 01 06:01:44 sogod [25979]: >> <0x0x55e5d84d9e50[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_to in Ping... >> Nov 01 06:01:45 sogod [25952]: [WARN] >> <0x0x55e5d017b990[WOWatchDogChild]> pid 26071 has been hanging in the >> same request for 3 minutes >> Nov 01 06:01:45 sogod [25981]: |SOGo| request took 332.461077 seconds >> to execute >> Nov 01 06:01:45 sogod [25981]: [ERROR] >> <0x0x55e5d4e0f3e0[WOHttpTransaction]> client disconnected during >> delivery of response for > uri=/SOGo/Microsoft-Server-ActiveSync?User=user_sa%40merit.unu.edu=7B687EA44DD55=Outlook=Ping >> app=SOGo rqKey=Microsoft-Server-ActiveSync rqPath=(null)> (len=13): >> the socket was shutd >> Nov 01 06:01:45 sogod [25981]: 52.125.140.40 "POST >> /SOGo/Microsoft-Server-ActiveSync?User=user_sa%40merit.unu.edu=7C3DEA44DD55=Outlook=Ping >> HTTP/1.1" 200 13/246 332.463 - - 0 >> Nov 01 06:01:46 sogod [26071]: >> <0x0x55e5d7556c00[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_kro in Ping... >> Nov 01 06:01:46 sogod [26075]: >> <0x0x55e5d65ae130[SOGoActiveSyncDispatcher]> Sleeping 30 seconds while >> detecting changes for user user_sa in Ping... >> Nov 01 06:01:46 sogod [25981]: |SOGo| starting method 'POST' on uri >> '/SOGo/Microsoft-Server-ActiveSync?Cmd=FolderSync=user_av=SEC16FC48B85=SAMSUNGSMT805' >> >> Nov 01 06:01:46 sogod [26084]:
Re: [SOGo] SOGo Calendar Resources | Free/Busy Times
Hi Michal, > It's not important whether you have mailGroup objectClass or not I know. Any oC providing the mail attribute is required. >Just > review the objectClasses you mentioned for the email attribute and > choose one. My LDIF has objectClass mailUser and inetOrgPerson. Both of them provide the mail attribute. How do you set the ACL for the resource's calendar in order to make it readable for the other users? BR Irma ___ Am 02.11.2018 um 09:38 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, It's not important whether you have mailGroup objectClass or not. You need to add any objectClass that contains an email attribute. Just review the objectClasses you mentioned for the email attribute and choose one. Then check all attributes of the objectClasses, some attributes can be mandatory and some are optional. Choose an objectClass ideally with no mandatory attributes or mandatory attributes that already exist in your resource definition (sn, uid, ...) then just add the email attribute. Regards Michal Dne 01.11.2018 v 20:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, thank you very much for your reply. Great to know, that generally LDAP calendar resources in SOGo work without restriction. I guess that you do not use the iRedMail OpenLDAP server, because I do and there's no objectClass mailGroup available. My iRedMail OpenLDAP installation provides these mail-related objectClasses: - mailAdmin - mailAlias - mailDomain - mailExternalUser - mailList - mailUser BTW: If you use mailGroup, how do you login with the resource's account into SOGo in order to set the ACL? Are group accounts capable to login to SOGo in your environment? BR Irma ___ Am 31.10.2018 um 13:16 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, we use LDAP for users and resources. Just to comment some entries, Multiplebookings attribute works as expected the resource can be booked only once if set to 1, free/busy is shown correctly. We use mailgroup class so that our resource can have its own email address, the email address is fictitious. With mailgroup class comes email attribute. Additionally our resource is located in the same tree (ou=People,dc=example,dc=com) as the other users. As a result when creating a new event with the resource as a participant we get a hint (name of the resource) after writing first three letters (Mee...). It's given by the fact that SOGo offers hints only from the first configured LDAP resource in sogo.conf. It works in SOGo web interface and in Thunderbird with SOGo Integrator. The calendar has set the following right "View Time and Date" for "All Authenticated Users". Here is our LDAP entry - LDIF: dn: cn=Meeting Room,ou=People,dc=example,dc=com Multiplebookings: 1 Kind: location cn: Meeting Room objectClass: top objectClass: person objectClass: organizationalPerson objectClass: calendarresource objectClass: calEntry objectClass: account objectClass: mailgroup mail: meetingro...@example.com sn: meetingrooom uid: meetingrooom userPassword: parentid: 4 creatorsname: cn=directory manager nsuniqueid: 741f2031-e1b221e6-81e6eeab-baae8424 entryid: 106 hassubordinates: FALSE entrydn: cn=Meeting Room,ou=People,dc=example,dc=com numsubordinates: 0 subschemasubentry: cn=schema modifiersname: cn=directory manager Kind Regards, Michal Dne 30.10.2018 v 14:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Approved that it is an LDAP issue: - Removed objectClasses calEntry and CalendarResource from Meetingroom's LDAP set. - Result: Free/Busy times are being displayed during event creation! Again the question: Is there anybody with a working LDAP resources setup who could provide a sample LDIF of a resource? Thank you! BR Irma My resources' Free/Busy times still won't work. For normal users, Free/Busy times work fine! Here's more detail about the configurations. (1) Resource 'meetingroom' created in LDAP, resides in the same OU as the normal users. Has same objectClasses and attributes as normal user accounts PLUS objectClasses 'calEntry' and 'CalendarResource' with their attributes [values] 'Kind' [location] and 'Multiplebookings' [1]. Meetingroom's full LDAP set: # dn: mail=meetingr...@mycompany.com,ou=Users,domainName=mycompany.com,o=domains,dc=mycompany,dc=com mail: meetingr...@mycompany.com mailQuota: 1048576 objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: mailUser objectClass: shadowAccount objectClass: amavisAccount objectClass: person objectClass: posixAccount objectClass: top objectClass: calEntry objectClass: CalendarResource storageBaseDirectory: /data/mboxes enabledService: indexer-worker
Re: [SOGo] SOGo Calendar Resources | Free/Busy Times
Hi Irma, It's not important whether you have mailGroup objectClass or not. You need to add any objectClass that contains an email attribute. Just review the objectClasses you mentioned for the email attribute and choose one. Then check all attributes of the objectClasses, some attributes can be mandatory and some are optional. Choose an objectClass ideally with no mandatory attributes or mandatory attributes that already exist in your resource definition (sn, uid, ...) then just add the email attribute. Regards Michal Dne 01.11.2018 v 20:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Hi Michal, thank you very much for your reply. Great to know, that generally LDAP calendar resources in SOGo work without restriction. I guess that you do not use the iRedMail OpenLDAP server, because I do and there's no objectClass mailGroup available. My iRedMail OpenLDAP installation provides these mail-related objectClasses: - mailAdmin - mailAlias - mailDomain - mailExternalUser - mailList - mailUser BTW: If you use mailGroup, how do you login with the resource's account into SOGo in order to set the ACL? Are group accounts capable to login to SOGo in your environment? BR Irma ___ Am 31.10.2018 um 13:16 schrieb Michal Kminek (mkmi...@getnet.cz): Hi Irma, we use LDAP for users and resources. Just to comment some entries, Multiplebookings attribute works as expected the resource can be booked only once if set to 1, free/busy is shown correctly. We use mailgroup class so that our resource can have its own email address, the email address is fictitious. With mailgroup class comes email attribute. Additionally our resource is located in the same tree (ou=People,dc=example,dc=com) as the other users. As a result when creating a new event with the resource as a participant we get a hint (name of the resource) after writing first three letters (Mee...). It's given by the fact that SOGo offers hints only from the first configured LDAP resource in sogo.conf. It works in SOGo web interface and in Thunderbird with SOGo Integrator. The calendar has set the following right "View Time and Date" for "All Authenticated Users". Here is our LDAP entry - LDIF: dn: cn=Meeting Room,ou=People,dc=example,dc=com Multiplebookings: 1 Kind: location cn: Meeting Room objectClass: top objectClass: person objectClass: organizationalPerson objectClass: calendarresource objectClass: calEntry objectClass: account objectClass: mailgroup mail: meetingro...@example.com sn: meetingrooom uid: meetingrooom userPassword: parentid: 4 creatorsname: cn=directory manager nsuniqueid: 741f2031-e1b221e6-81e6eeab-baae8424 entryid: 106 hassubordinates: FALSE entrydn: cn=Meeting Room,ou=People,dc=example,dc=com numsubordinates: 0 subschemasubentry: cn=schema modifiersname: cn=directory manager Kind Regards, Michal Dne 30.10.2018 v 14:37 Rene Schroth (rene.schr...@mmlab.de) napsal(a): Approved that it is an LDAP issue: - Removed objectClasses calEntry and CalendarResource from Meetingroom's LDAP set. - Result: Free/Busy times are being displayed during event creation! Again the question: Is there anybody with a working LDAP resources setup who could provide a sample LDIF of a resource? Thank you! BR Irma My resources' Free/Busy times still won't work. For normal users, Free/Busy times work fine! Here's more detail about the configurations. (1) Resource 'meetingroom' created in LDAP, resides in the same OU as the normal users. Has same objectClasses and attributes as normal user accounts PLUS objectClasses 'calEntry' and 'CalendarResource' with their attributes [values] 'Kind' [location] and 'Multiplebookings' [1]. Meetingroom's full LDAP set: # dn: mail=meetingr...@mycompany.com,ou=Users,domainName=mycompany.com,o=domains,dc=mycompany,dc=com mail: meetingr...@mycompany.com mailQuota: 1048576 objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: mailUser objectClass: shadowAccount objectClass: amavisAccount objectClass: person objectClass: posixAccount objectClass: top objectClass: calEntry objectClass: CalendarResource storageBaseDirectory: /data/mboxes enabledService: indexer-worker enabledService: doveadm enabledService: dsync enabledService: shadowaddress enabledService: displayedInGlobalAddressBook enabledService: mail enabledService: forwarding enabledService: deliver enabledService: lda enabledService: lmtp enabledService: smtp enabledService: smtpsecured enabledService: imap enabledService: imapsecured enabledService: imaptls enabledService: managesieve enabledService: managesievesecured enabledService: sogo enabledService: sieve enabledService: sievesecured enabledService: forward enabledService: senderbcc enabledService: recipientbcc
