[SOGo] BTS activities for Saturday, October 08 2022
Title: BTS activities for Saturday, October 08 2022 BTS Activities Home page: https://bugs.sogo.nu Project: SOGo For the period covering: Saturday, October 08 2022 idlast updatestatus (resolution)categorysummary 5622 2022-10-08 11:58:31 updated (open) Backend Mail Sogo hangs after try open a shared folder if modify acl of this folder enabled 5623 2022-10-08 14:53:12 updated (open) Web Calendar No message to attendee is triggered when invitation is in the past
[SOGo] MS Outlook 2021 EAS downloads ONLY 1 Month of emails
Hello, I have a problem where MS Outlook 2021 (as well as 365) on EAS downloads messages ONLY from the past month. I couldn't figure out a way to download all messages. At the same time Contacts, Calendar, Tasks synchronize fine. My setup is: SOGo 3.2.7 - working fine. On Outlook 2016 all messages download fine. MS Outlook 2021 (also tested with 365) Windows 11 (tried also on Windows 10, but same result) Account setup in Outlook as Exchange ActiveSync Login passes, mailbox structure is visible immediately. WORKING: When slider in Outlook 2021 Account Settings is set Mail To Keep Offline = 1 Month everything works. Messages (one month old) are downloaded, as well as Contacts, Calendar, etc. NOT WORKING: When slider in Outlook 2021 Account Settings is set Mail To Keep Offline = All nothing happens. In Outlook the status bar displays "Connected; Waiting for server response.." but nothing happens. Nothing is downloaded - no messages, no contacts, nothing. When left for several hours finally shows "Disconnected". If the slider is first set to "1 Months" and everything is synchronized and then the slider is changed to "All" everything keeps working, but however mails, older than a month never appear. The same email is working perfectly fine on MS Outlook 2016 on EAS, so the problem seems to be in MS Outlook 2021/365. Even the Windows 11 built-in Mail app downloads everything... I'll be grateful if anyone has suggestions how to make this work and get all my emails in Outlook.
Re: [SOGo] SOGO reusing Dovecot db password issue
The passwords are not being stored in plain text in the db but they can be visible in the logs. Disabling the logs won't help in my case as an attacker can reenable logging if the system gets compromised and grab all passwords from there. Dovecot docs describe it like this: DO NOT use password directly. It can contain % which is interpreted as variable expansion and can cause errors. Also, it might be visible in debug logging. Suggested approaches are base64 encoding, hex encoding or hashing the password. With hashing, you get the extra benefit that password won’t be directly visible in logs. So, how to perform this hashing? At which point it has to be done? On 2022-10-08 11:05, Odhiambo Washington wrote: On Fri, Oct 7, 2022 at 10:31 PM Serveria Support wrote: Hi, Yes, you're totally right my friend! I was just desperate because I needed help and the other thread was getting replies while mine wasn't. Sorry about that. Anyway, you're my savior as I have double checked everything as you have suggested and indeed the encryption algo was different in dovecot config. Dovecot had sha512-crypt while SOGO tried to use ssha512. I'm not sure how this is possible as I have checked everything billions of times and I was 100% sure the same algo is in both configs. I have changed ssha512 to sha512-crypt in dovecot config and voila: I'm able to login into SOGO. Thanks again! P.S. By any chance you know how to prevent plain text passwords from appearing in the logs? It kinda makes all my efforts useless and defeats the whole encrypted storage concept... If you are storing passwords in plaintext in your DB, that's one thing you should think about. As regards your question, just disable all debugging from 10-logging.conf (dovecot). -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
Re: [SOGo] SOGO reusing Dovecot db password issue
On Fri, Oct 7, 2022 at 10:31 PM Serveria Support wrote: > Hi, > > Yes, you're totally right my friend! I was just desperate because I > needed help and the other thread was getting replies while mine wasn't. > Sorry about that. > > Anyway, you're my savior as I have double checked everything as you have > suggested and indeed the encryption algo was different in dovecot > config. Dovecot had sha512-crypt while SOGO tried to use ssha512. I'm > not sure how this is possible as I have checked everything billions of > times and I was 100% sure the same algo is in both configs. I have > changed ssha512 to sha512-crypt in dovecot config and voila: I'm able to > login into SOGO. Thanks again! > > P.S. By any chance you know how to prevent plain text passwords from > appearing in the logs? It kinda makes all my efforts useless and defeats > the whole encrypted storage concept... If you are storing passwords in plaintext in your DB, that's one thing you should think about. As regards your question, just disable all debugging from 10-logging.conf (dovecot). -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
[SOGo] SOGo connector sync break from Seamonkey 2.53.13
Hi Friends, using GNU-Linux, and Seamonkey (now 2.53.14) I've verified that SOGo connector is no longer able to synchronize my DAV address book (on Nextcloud). I'm using Inverse SOGo Connector 24.0.5-ojkastl, do you know if exist a compatible version? Many thanks! david
[SOGo] When creating a second user
Hello I am doing an integration test with DirectAdmin, and for the moment it works well. However, when I create email accounts from the administration of SOGo via the users created from DirectAdmin, I do not see them in my database. How to identify with the email address? Thank you very much Michel
