Re: [SOGo] 2FA for sogo

2019-02-13 Thread Stefan Klatt
Hi Christian,

Am 12.02.2019 um 16:53 schrieb Christian Mack
(christian.m...@uni-konstanz.de):
> Hello
>
> Am 12.02.19 um 14:53 schrieb Daniel Mülheims (dan...@muelheims.com):
>> is there an option to activate or enable 2FA for sogo? Thank you.
>>
> Not directly, but you can use SAML2 Authentication, which provides 2FA.
What about  a direct implementation? Like Guatamole
https://guacamole.apache.org/ has it? Probably you can use the same or
similar module?

Greetings

Stefan
-- 
*CaC, Computer and Communication*
Inhaber Stefan Klatt
End-2-End Senior Security Consultant
CISSP / CISM / ISO27001 Lead Implementer / TOGAF9 /
VdS-anerkannter Berater für Cyber-Security
Badges: https://www.youracclaim.com/users/stefan-klatt
Triftstrasse 9
60528 Frankfurt
Germany
USt-IdNr.: DE260461592

Tel.: +49-(0)172-6807809
Tel.: +49-(0)69-67808-900
Fax: +49-(0)69-67808-837
Email: stefan.kl...@cac-netzwerk.de
Profil: http://www.cac-netzwerk.de/profil


0xF8091E0A0E143EBE.asc
Description: application/pgp-keys


smime.p7s
Description: S/MIME Cryptographic Signature


Re: [SOGo] Installation of SOGo 4 on Debian Buster

2019-02-13 Thread Markus Winkler
Hello Christian,

On 13.02.19 17:29, Christian Mack (christian.m...@uni-konstanz.de) wrote:
>> 1) Does anybody know if this separate package 'sogo-activesync' is necessary 
>> on Debian
>>Buster? In the Debian Buster repo there's no such package.
> 
> Yes it is, if you want ActiveSync support.

OK, as expected - thank you for the information.

> But even Ubuntu 18.04 got a repo after being multiple months stable.

Good to know. So Buster together with SOGo will still be take some time.

> As far as I know that 'sogo-activesync' package can be compiled from the
> normal SOGo sources.
> I never did that ;-)

Me too ;-). To build this package should not be a big problem, I think. But
luckily I'm not in a hurry and so I can wait until Buster will become
stable and the official SOGo repositories are available. And in between
I'll follow the development (like the linked bug within mantis).

Thanks again for your help and kind regards,
Markus
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Two instances of SOGo on same machine

2019-02-13 Thread Riccardo Bicelli
Hi Miguel, my issue is with Activesync and Outlook 2016, not in webmail

Il giorno mer 13 feb 2019 alle ore 16:22 "Miguel Mucio Santos Moreira"
 ha scritto:
>
> Hello Folks!
>
> Ricardo,
>
> I think probably your problem is related to the ticket on SOGo Mantis which 
> follows below and was already fixed.
> https://sogo.nu/bugs/view.php?id=4642
>
> Best wishes
>
> --
>
> Miguel Moreira
> Gerente
> DPR/SRE/GSR - Gerência de Serviços de Rede
> +55(31)3339-1401
> PRODEMGE - Companhia de Tecnologia da Informação do Estado de Minas Gerais
>
>
> Aviso: Esta mensagem é destinada exclusivamente para a(s) pessoa(s) a quem é 
> dirigida, podendo conter informação sigilosa e legalmente protegida. O uso 
> impróprio será tratado conforme as normas da empresa e a legislação em vigor. 
> Caso não seja o destinatário, favor notificar o remetente, ficando proibidas 
> a utilização, divulgação, cópia e distribuição. Em Quarta, Fevereiro 13, 2019 
> 12:45 -02, "Riccardo Bicelli" (r.bice...@gmail.com)  escreveu:
>
> I'm already on a multidomain setup and i have both internal and
> external user in same domain.
> So I'll stick with two sogo VMs.
>
> Thanks
>
> Il giorno mar 12 feb 2019 alle ore 17:32 Christian Mack
>  ha scritto:
> >
> > Hello
> >
> > Am 12.02.19 um 15:31 schrieb Riccardo Bicelli (r.bice...@gmail.com):
> > > Hello!
> > > In my setup I have 2 sogo machines, one for clients in LAN and one for
> > > clients outside LAN.
> > > The only change in configuration in LDAP filter on user source of the
> > > "External" machine.
> > >
> > > Following this guide could I achieve my goal?
> > > https://sogo.nu/support/faq/dedicated-separate-sogo-instance-for-activesync.html
> > >
> > > Is it possible to use an alternative config file like
> > > /etc/sogo/sogo-external.conf or have I to stick in XML Gnustep in the
> > > home of newly created user?
> > >
> >
> > No.
> > ActiveSync in that guide uses a different path
> > /Microsoft-Server-ActiveSync/ which is redirected on the proxy to
> > another instance of sogod using the same configuration as the normal one
> > using /SOGo/.
> >
> > But you want web interfaces for different users both using /SOGo/ with
> > different configurations.
> > In order to use another sogo-external.conf instead of sogo.conf you
> > would need to change the sogod sources and recompile it.
> > Also you would need a way of distinguishing those two on the proxy, in
> > order to be able to send them to different instances of SOGo.
> >
> > What you could do is using a multi domain setup in one SOGo instance.
> > One domain for the external users and one for the internal users.
> >
> >
> > Kind regards,
> > Christian Mack
> >
> > --
> > Christian Mack
> > Universität Konstanz
> > Kommunikations-, Informations-, Medienzentrum (KIM)
> > Abteilung Basisdienste
> > 78457 Konstanz
> > +49 7531 88-4416
> >
> --
> users@sogo.nu
> https://inverse.ca/sogo/lists
>
> --
> users@sogo.nu
> https://inverse.ca/sogo/lists
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Installation of SOGo 4 on Debian Buster

2019-02-13 Thread Christian Mack
Hello

Am 11.02.19 um 20:41 schrieb Markus Winkler (m...@irmawi.de):
> Hi,
> 
> I'm currently building a test environment for our next standard OS platform 
> Debian Buster.
> Among other packages I want to install SOGo (and one of the main features we 
> need is
> Exchange ActiveSync - EAS).
> 
> The Debian Buster repository provides these two packages for SOGo:
> 
> - sogo-common_4.0.5-2_all.deb
> - sogo_4.0.5-2_amd64.deb
> 
> In the latter one there's an installation document 
> (SOGoInstallationGuide.asciidoc.gz)
> which says the following (it refers to an RPM-based OS, so I assume no 
> specific Debian
> document, it seems that this is the original SOGo documentation):
> 
> --- snip ---
> To enable Microsoft ActiveSync support in SOGo, you must install the
> required packages.
> 
>  yum install sogo-activesync libwbxml
> --- snip ---
> 
> And indeed: if I'm looking into the Debian Buster packages I cannot find an 
> 'ActiveSync'
> under /usr/lib/GNUstep/SOGo/... like in the mentioned package 
> 'sogo-activesync'
> (sogo-activesync_4.0.5.20190211-1_amd64.deb) from the SOGo.nu nightly 
> repository.
> 
> So my problems/questions are:
> 
> 1) Does anybody know if this separate package 'sogo-activesync' is necessary 
> on Debian
>Buster? In the Debian Buster repo there's no such package.
> 

Yes it is, if you want ActiveSync support.


> 2) If yes to 1): Where could I get it?
>I checked if I could find a Buster repository on sogo.nu, but there are 
> "only" repos
>for Squeeze, Wheezy, Jessie and Stretch. Maybe there's another place 
> anywhere with
>packages made by SOGo.nu for Buster too?
> 

No, Invers only supports stable OS versions.
You could open a Feature Request on https://sogo.nu/bugs/
But even Ubuntu 18.04 got a repo after being multiple months stable.

As far as I know that 'sogo-activesync' package can be compiled from the
normal SOGo sources.
I never did that ;-)


> Or is this a combination (Debian Buster together with SOGo and EAS) which is 
> impossible at
> the moment?
> 

To my knowledge there is only one problem with buster.
See https://sogo.nu/bugs/view.php?id=4659
Which seems to be related to gnustep-base 1.26.0


> I'm a little bit confused so it would be very nice if somebody could help me.
> 
> Thanks and regards,
> Markus
> 


Kind regards,
Christian Mack

-- 
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung Basisdienste
78457 Konstanz
+49 7531 88-4416



smime.p7s
Description: S/MIME Cryptographic Signature


Re: [SOGo] Two instances of SOGo on same machine

2019-02-13 Thread "Miguel Mucio Santos Moreira"

Hello Folks!

Ricardo,

I think probably your problem is related to the ticket on SOGo Mantis which 
follows below and was already fixed.
https://sogo.nu/bugs/view.php?id=4642

Best wishes

--

Miguel Moreira
Gerente
DPR/SRE/GSR - Gerência de Serviços de Rede
+55(31)3339-1401
PRODEMGE - Companhia de Tecnologia da Informação do Estado de Minas Gerais


Aviso: Esta mensagem é destinada exclusivamente para a(s) pessoa(s) a quem é 
dirigida, podendo conter informação sigilosa e legalmente protegida. O uso 
impróprio será tratado conforme as normas da empresa e a legislação em vigor. 
Caso não seja o destinatário, favor notificar o remetente, ficando proibidas a 
utilização, divulgação, cópia e distribuição. Em Quarta, Fevereiro 13, 2019 
12:45 -02, "Riccardo Bicelli" (r.bice...@gmail.com)  
escreveu:I'm already on a multidomain setup and i have both internal and
external user in same domain.
So I'll stick with two sogo VMs.

Thanks

Il giorno mar 12 feb 2019 alle ore 17:32 Christian Mack
 ha scritto:
>
> Hello
>
> Am 12.02.19 um 15:31 schrieb Riccardo Bicelli (r.bice...@gmail.com):
> > Hello!
> > In my setup I have 2 sogo machines, one for clients in LAN and one for
> > clients outside LAN.
> > The only change in configuration in LDAP filter on user source of the
> > "External" machine.
> >
> > Following this guide could I achieve my goal?
> > https://sogo.nu/support/faq/dedicated-separate-sogo-instance-for-activesync.html
> >
> > Is it possible to use an alternative config file like
> > /etc/sogo/sogo-external.conf or have I to stick in XML Gnustep in the
> > home of newly created user?
> >
>
> No.
> ActiveSync in that guide uses a different path
> /Microsoft-Server-ActiveSync/ which is redirected on the proxy to
> another instance of sogod using the same configuration as the normal one
> using /SOGo/.
>
> But you want web interfaces for different users both using /SOGo/ with
> different configurations.
> In order to use another sogo-external.conf instead of sogo.conf you
> would need to change the sogod sources and recompile it.
> Also you would need a way of distinguishing those two on the proxy, in
> order to be able to send them to different instances of SOGo.
>
> What you could do is using a multi domain setup in one SOGo instance.
> One domain for the external users and one for the internal users.
>
>
> Kind regards,
> Christian Mack
>
> --
> Christian Mack
> Universität Konstanz
> Kommunikations-, Informations-, Medienzentrum (KIM)
> Abteilung Basisdienste
> 78457 Konstanz
> +49 7531 88-4416
>
--
users@sogo.nu
https://inverse.ca/sogo/lists
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Two instances of SOGo on same machine

2019-02-13 Thread Riccardo Bicelli
I'm already on a multidomain setup and i have both  internal and
external user in same domain.
So I'll stick with two sogo VMs.

Thanks

Il giorno mar 12 feb 2019 alle ore 17:32 Christian Mack
 ha scritto:
>
> Hello
>
> Am 12.02.19 um 15:31 schrieb Riccardo Bicelli (r.bice...@gmail.com):
> > Hello!
> > In my setup I have 2 sogo machines, one for clients in LAN and one for
> > clients outside LAN.
> > The only change in configuration in LDAP filter on user source of the
> > "External" machine.
> >
> > Following this guide could I achieve my goal?
> > https://sogo.nu/support/faq/dedicated-separate-sogo-instance-for-activesync.html
> >
> > Is it possible to use an alternative config file like
> > /etc/sogo/sogo-external.conf or have I to stick in XML Gnustep in the
> > home of newly created user?
> >
>
> No.
> ActiveSync in that guide uses a different path
> /Microsoft-Server-ActiveSync/ which is redirected on the proxy to
> another instance of sogod using the same configuration as the normal one
> using /SOGo/.
>
> But you want web interfaces for different users both using /SOGo/ with
> different configurations.
> In order to use another sogo-external.conf instead of sogo.conf you
> would need to change the sogod sources and recompile it.
> Also you would need a way of distinguishing those two on the proxy, in
> order to be able to send them to different instances of SOGo.
>
> What you could do is using a multi domain setup in one SOGo instance.
> One domain for the external users and one for the internal users.
>
>
> Kind regards,
> Christian Mack
>
> --
> Christian Mack
> Universität Konstanz
> Kommunikations-, Informations-, Medienzentrum (KIM)
> Abteilung Basisdienste
> 78457 Konstanz
> +49 7531 88-4416
>
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] BCC not saved in message with Outlook 2016 Activesync

2019-02-13 Thread Riccardo Bicelli
Hello, I have a strange issue with outlook 2016 (Activesync) and SOGo:
when a recipient is specified in BCC the message is correctly
delivered but if I look into Sent Items folder the message doesn't
have anything in BCC field.
In SOGO web UI recipient doesn't appear, even in source of message.
Tried the same with gmail app and it works like a charm.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] SOGo 2 supporting combined tables

2019-02-13 Thread Laz Peterson
Hey there everyone,

We have been trying for days to get SOGo 2 to support the combined tables.
Changing source, recompiling, etc. and nothing is working.

Our goal is to support all non-Internet Explorer users on SOGo 4, while
also supporting Internet Explorer users on SOGo 2.  This worked wonderfully
a few years ago, with only SOGo 2 and SOGo 3.

In the debug logs, all we're getting is SOGo 2 continually trying to look
for the user's c_location in the MySQL query.  Seems simple enough to get
SOGo 2 to stop trying to go for the >1000 table solution.

What would it take to get this to work?  We know nothing about the language
that SOGo uses, so we're just chasing ghosts for the most part.

Our goal is to allow our Internet Explorer users (which we do have quite a
few) to continue having access to SOGo without getting totally hosed by the
SOGo 3 and SOGo 4 Angular.js environment.

What can we do?  We are totally ok with doing all the leg work ... But I'm
now fighting my peers at considering SOGo as a solution.

Any suggestions would be greatly appreciated.

~Laz
-- 
users@sogo.nu
https://inverse.ca/sogo/lists