from:"\"Chris\""


Fernando,
You found a bug, very good!
The Vacation Notifications are missing 1) DKIM signature, 2) 
Return-Path, and also, 3) DMARC fails, all of which forces gmail server 
to deliver the message to the Spam folder.

1 and 2 are fixable by SOGo team.
3 is probably fixable by iRedMail developer, or by you, since DMARC 
settings should better match your mail server, this is an administrative 
setting.



On 7/26/2016 5:26 PM, Fernando Salas [Novanet] (fsalas@novanet.network) 
wrote:


Dear Chris,

Thanks for your answer.

I have SPF, DKIM and also the PTR record implemented, the mail goes 
normally to the INBOX folder, the only issue is with the “vacation 
auto response mail", I send again the full headers so yo can see the 
SPF and DKIM, I have replace with A.B.C.D the IP of the server.


This is the full header of the "spam" mail, in this header there is no 
“DKIM-Signature” and also there is no “Return-Path” value, I don´t 
understang why there is no “DKIM-Signature” when the email goes from 
the “vacation” system.


Delivered-To: mygmailu...@gmail.com

Received: by 10.103.122.141 with SMTP id v135csp893887vsc;

Wed, 13 Jul 2016 04:17:28 -0700 (PDT)

X-Received: by 10.66.117.105 with SMTP id 
kd9mr12589484pab.40.1468408648637;


   Wed, 13 Jul 2016 04:17:28 -0700 (PDT)

Return-Path: <>

Received: from my.sogo.server (my.sogo.server. [A.B.C.D])

by mx.google.com with ESMTPS id 
o6si4948924pac.39.2016.07.13.04.17.28


for <mygmailu...@gmail.com>

(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);

Wed, 13 Jul 2016 04:17:28 -0700 (PDT)

Received-SPF: pass (google.com: best guess record for domain of 
postmas...@my.sogo.server designates A.B.C.D as permitted sender) 
client-ip=A.B.C.D;


Authentication-Results: mx.google.com;

*spf=pass* (google.com: best guess record for domain of 
postmas...@my.sogo.server designates A.B.C.D as permitted sender) 
smtp.helo=my.sogo.server;


*dmarc=fail* (p=QUARANTINE dis=QUARANTINE) header.from=novanet.network

Received: from my.sogo.server (my.sogo.server [127.0.0.1])

  by my.sogo.server (Postfix) with ESMTP id 1C329103157

  for <mygmailu...@gmail.com>; Wed, 13 Jul 2016 06:17:28 -0500 (ECT)

X-Virus-Scanned: Debian amavisd-new at my.sogo.server

Received: from my.sogo.server ([127.0.0.1])

  by my.sogo.server (my.sogo.server [127.0.0.1]) (amavisd-new, port 10024)

  with ESMTP id 2tf9QE8MhRw6 for <mygmailu...@gmail.com>;

  Wed, 13 Jul 2016 06:17:27 -0500 (ECT)

Received: by my.sogo.server (Postfix, from userid 2000)

  id EB50D10311B; Wed, 13 Jul 2016 06:17:27 -0500 (ECT)

X-Sieve: Pigeonhole Sieve 0.4.2

Message-ID: <dovecot-sieve-1468408647-95315...@my.sogo.server>

Date: Wed, 13 Jul 2016 06:17:27 -0500

From: <user@sogo.server>

To: <mygmailu...@gmail.com>

Subject: Respuesta =?utf-8?q?autom=C3=A1tica?= - Fuera de la oficina

In-Reply-To: 
<cafq5sh6d4apdpnzvnq-sqk8hurp6uzuah4s-y5sa_53kz_u...@mail.gmail.com>


References: 
<cafq5sh6d4apdpnzvnq-sqk8hurp6uzuah4s-y5sa_53kz_u...@mail.gmail.com>


Auto-Submitted: auto-replied (vacation)

Precedence: bulk

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 8bit

And this is the header that goes to the Inbox folder, you can see the 
validation of the “DKIM-Signature” and also the value for the 
“Return-PAth” variable as well as the SPF record:


Delivered-To: mygmailu...@gmail.com

Received: by 10.103.122.130 with SMTP id v124csp1814641vsc;

Tue, 26 Jul 2016 12:27:20 -0700 (PDT)

X-Received: by 10.66.138.74 with SMTP id 
qo10mr42243733pab.135.1469561240400;


Tue, 26 Jul 2016 12:27:20 -0700 (PDT)

Return-Path: <user@sogo.server>

Received: from my.sogo.server (my.sogo.server. [A.B.C.D])

by mx.google.com with ESMTPS id 
x184si1983910pfb.210.2016.07.26.12.27.19


for <mygmailu...@gmail.com>

(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);

Tue, 26 Jul 2016 12:27:20 -0700 (PDT)

Received-SPF: pass (google.com: domain of user@sogo.server designates 
A.B.C.D as permitted sender) client-ip=A.B.C.D;


Authentication-Results: mx.google.com;

*dkim=pass* header.i=@novanet.network;

*spf=pass* (google.com: domain of user@sogo.server designates A.B.C.D 
as permitted sender) smtp.mailfrom=user@sogo.server;


*dmarc=pass* (p=QUARANTINE dis=NONE) header.from=novanet.network

Received: from my.sogo.server (my.sogo.server [127.0.0.1])

  by my.sogo.server (Postfix) with ESMTP id BB94B10311B

  for <mygmailu...@gmail.com>; Tue, 26 Jul 2016 14:27:18 -0500 (ECT)

Authentication-Results: my.sogo.server (amavisd-new);

  dkim=pass (2048-bit key) reason="pass (just generated, assumed good)"

header.d=novanet.network

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=novanet.network;

h=content-language:x-mailer:content-type:content-type

:mime-version:message-id:date:date:subject:subject:to:from:

Re: [SOGo] vacation message goes to spam


Fernando,
Details on exactly how to add these SPF, DKIM, Reverse-PTR, DNS records :
*http://www.iredmail.org/docs/setup.dns.html

*
--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Feature request: Precedence header for Notification emails

This is a feature request (maybe a bug fix depending on how you look at 
it), to improve the Notifications.


In Google's Bulk Senders Guidelines, they mention:

"Messages should indicate that they are bulk mail, using the 'Precedence: bulk' 
header field."

https://support.google.com/mail/answer/81126?hl=en

This triggers Google's Smart Labels feature to label the messages as 
bulk. Because SOGo currently fails to label bulk emails with this 
header, it's more likely that Google will send SOGo's Notification 
messages to the recipient's Spam folder.


The solution: You need to add a new field in the Notification messages 
headers:


Precedence: bulk

Reference: RFC3834, http://tools.ietf.org/search/rfc3834


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] vacation message goes to spam


Fernando,

To help your Vacation message to be delivered into the user's Inbox, you 
should add the following to your domain's DNS: 1) an SPF record, 2) DKIM 
records, and 3) a Reverse-PTR record.


SOGo should also add "Precedence: Bulk" to the message header for 
Notification messages, so that Gmail will not sort the message into "Junk".


Reference: RFC3834, https://tools.ietf.org/search/rfc3834



On 7/26/2016 3:46 PM, Fernando Salas [Novanet] (fsalas@novanet.network) 
wrote:


Dear Friends,

After enabling the vacation message on the webmail and testing it, I 
receive on Gmail the auto response on the "spam folder".


This is the header of the auto response that I get in Gmail:

Delivered-To: mygmailu...@gmail.com

Received: by 10.103.122.141 with SMTP id v135csp893887vsc;

Wed, 13 Jul 2016 04:17:28 -0700 (PDT)

X-Received: by 10.66.117.105 with SMTP id 
kd9mr12589484pab.40.1468408648637;


Wed, 13 Jul 2016 04:17:28 -0700 (PDT)

Return-Path: <>

Received: from my.sogo.server (my.sogo.server. [A.B.C.D])

by mx.google.com with ESMTPS id 
o6si4948924pac.39.2016.07.13.04.17.28


for <mygmailu...@gmail.com>

(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);

Wed, 13 Jul 2016 04:17:28 -0700 (PDT)

As you can see the variable "Return-Path" is empty and I think this is 
the reason why Gmail send it to spam folder.


This is the header of a mail that goes normally to the "Inbox Folder" 
in Gmail:


Delivered-To: mygmailu...@gmail.com

Received: by 10.103.122.130 with SMTP id v124csp1814641vsc;

Tue, 26 Jul 2016 12:27:20 -0700 (PDT)

X-Received: by 10.66.138.74 with SMTP id 
qo10mr42243733pab.135.1469561240400;


Tue, 26 Jul 2016 12:27:20 -0700 (PDT)

Return-Path: <user@sogo.server>

Received: from my.sogo.server (my.sogo.server. [A.B.C.D])

by mx.google.com with ESMTPS id 
x184si1983910pfb.210.2016.07.26.12.27.19


for <mygmailu...@gmail.com>

(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);

Tue, 26 Jul 2016 12:27:20 -0700 (PDT)

I’m running SOgo 3.1.3 and iRedMail 0.9.4 with MySQL

Any idea about this issue?

Kind regards,

Fernando Salas

--
users@sogo.nu
https://inverse.ca/sogo/lists


--
Chris Coleman
Espace LLC
860-576-9526

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] AD avatar

2016-07-13 Thread Chris Coleman




On 7/13/2016 3:26 PM, Alexandre Zuotoski Neto (t...@csmcalderaria.com.br) 
wrote:

Do you mean from jpegPhoto and/or thumbnailPhoto attribute?
I'm interested in this method too :)

If isn't any way for set it, then it should be a fancy feature request (like 
the LDAP Attributes Mapping method).


Yes, that's what I mean. It works for Roundcube, Openfire, GLPI, etc.



Similar to a feature request I made, which was added to sogo, to show 
the public gravatar.com thumbnail photo, associated with any email 
address found in the header of any email message...


As I said, there's open source code for getting and displaying the 
jpegPhoto and thumbnailPhoto from the AD / LDAP attributes.  This should 
be easily added to sogo.  Every email address should show the small 
picture of the person next to it, it's a great way to make messaging 
more user-friendly today.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ZEG ActiveSync

2016-06-11 Thread Chris Clemson


> This is good to know. Is it a simple step or two to configure SSL?

It's not too difficult, esp if you have done SSL certs before.

> Should I just search sogo support or is it something you could explain
> in 50 words?  Thanks. This gives me hope.

Well, there is some documentation for sogo itself, but not ZEG, so I did
write a page on the wiki about reconfiguration:

http://wiki.sogo.nu/ZEGReconfiguration

Right at the bottom I there's a bit about security and SSL.
If you need encrypted IMAP as well, then it might be worth trying to
find some dovecot documentation.
I didn't but it was quite easy to configure.
Look in /etc/dovecot/dovecot.conf and there are some links to SSL keys.
I didn't change the port number, so I'm running SSL (STARTTLS) on the
unencrypted port as I was having problems with doing that.

Note I've only been running sogo for about 2 weeks or so, so I'm still a
noob (although the nice folks at sogo managed to fix a bug for me within
a couple of days, which was cool)!

Chris
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ZEG ActiveSync

2016-06-11 Thread Chris Clemson

That is fixable - I've configured SSL on my ZEG install.
I've not tried activesync, but https and starttls for IMAP works fine.

On 10 June 2016 23:27:32 BST, Peter R  wrote:
>You may have struck on the key fact.  SSL is not enabled on ZEG
>appliance.  Without SSL, I guess I can't test ActiveSync and Outlook
>2013.
>
>From the Support Tab, it reads: The configuration of this virtual
>appliance has various limitations:
>
>No SSLNone of the local servers provide a SSL layer
>(HTTP/IMAP/POP3/SMTP/LDAP).
>


-- 

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo with Virtualmin

2016-06-08 Thread Chris Coleman


On 6/8/2016 7:56 AM, Jan Runhart (j...@runhart.it) wrote:

Hello,

Does anyone have experience with installing Sogo combined with 
Virtualmin?


Regards,

Jan

Hello Jan,

I've begun work on looking at what it'd take to get SOGo working great 
on virtualmin virtual servers.
I suppose you want SOGo to take over and run as the web mail groupware 
for the entire virtualmin machine?  Which would make sense, as users 
continue to have access through their mail client apps eg thunderbird 
via smtp and imap.
Obviously you should disable pop3 in virtualmin as pop3 defaults to 
remove mail from the server, which defeats the entire purpose of webmail 
groupware which is to leave the mail on the server for others to read, 
comment on, and reply to etc.


The trick obviously is to have a virutalmin module configure settings 
which achieve automatic seamless configuration while respecting the 
multi tenant nature of virtualmin, so that users can...

1. autocomplete from the LDAP directories present on their virtual server,
2. share calendars as specified by admins of their virtual server,
3. share contacts as specified by admins and users,
4. share inboxes as specified by admins,
5. bar users from seeing outside their virtual server (other virtual 
server LDAP directories, calendars, contacts, etc).


Feel free also to share your experiences

---
Chris Coleman
Espace LLC
860-576-9526

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SSL issues SOGo web access and ActiveSync

2016-05-26 Thread Chris Burke

Hi- Thanks so much for the response.
I made the changes to the x-webobjects headers according to the documentation, 
restarted apache and sogo, but the issue is still happening.
In happens in both Chrome and IE. Even though Apache should be redirecting 
everything to https, after logging in it is still makes calls to http. 
The SOGo web access loads but the fonts & layout are messed up. Using Chrome 
developer tools I can see the fonts are requested via http and therefore not 
loading:
"Font from origin 'https://mail.mydomain.com' has been blocked from loading by 
Cross-Origin Resource Sharing policy: No 'Access-Control-Allow-Origin' header 
is present on the requested resource. Origin 'http://mail.mydomain.com' is 
therefore not allowed access."

If I go up to the URL bar and make it "https" and reload the page, all is fine 
again.
I'm just not sure what is happening on authentication, why the user gets 
redirected to http.
Below is a snip from my Apache SOGo.conf which shows the values for 
RequestHeader.
I'm going to experiment with moving the ProxyPass statements to my 
default-ssl.conf instead of leaving them in SOGo.conf to see if that makes a 
difference.
 http://127.0.0.1:2/SOGo>## adjust the following to your 
configuration## and do not forget to enable the headers module  RequestHeader set "x-webobjects-server-port" "443"  
RequestHeader set "x-webobjects-server-name" "mail.mydomain.com"  RequestHeader 
set "x-webobjects-server-url" "https://mail.mydomain.com;
## When using proxy-side autentication, you need to uncomment and## adjust the 
following line:  RequestHeader unset "x-webobjects-remote-user"#  RequestHeader 
set "x-webobjects-remote-user" "%{REMOTE_USER}e" env=REMOTE_USER  RequestHeader 
set "x-webobjects-server-protocol" "HTTP/1.0" 
  AddDefaultCharset UTF-8  Order allow,deny  Allow from all

-Chris

  From: Francis Lachapelle <users@sogo.nu>
 To: users@sogo.nu 
 Sent: Wednesday, May 25, 2016 8:19 AM
 Subject: Re: [SOGo] SSL issues SOGo web access and ActiveSync

Hi Chris

> On May 24, 2016, at 3:31 PM, Chris Burke (burkech...@yahoo.com) 
> <users@sogo.nu> wrote:
> 
> I'm having a problem getting SSL to work with SOGo web access and ActiveSync.
> 
> 
> In Apache I redirect everything to SSL in 000-default.conf:
> 
> 
> ServerName mail.mydomain.com
> Redirect permanent / https://mail.mydomain.com/
> 
> 
> This works great for everything, except when accessing SOGo.
> 
> When I go to https://[mail.mydomain.com]/SOGo the  login page loads https 
> correctly, but as soon as I click "connect", I get redirected to http and the 
> page doesn't load properly because of mixed http and https calls.
> 
> After getting redirected to http I can I can force "https:" in the URL bar, 
> then it will load correctly.
> 
> I think the problem may be the http ProxyPass statements in the Apache 
> SOGo.conf file:
> 
> ProxyPass /Microsoft-Server-ActiveSync \
>  http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync \
>  retry=60 connectiontimeout=5 timeout=3540
> 
> ProxyPass /SOGo http://127.0.0.1:2/SOGo retry=0
> 
> I have tried changing these ProxyPass statements to https (and turning on 
> SSLProxyEngine).
> This failed.
> I have also changed 127.0.0.1 to mail.mydomain.com (which resolves locally to 
> 127.0.0.1) and this still fails with "internal server error".
> 
> Any ideas how I can stop SOGo from redirecting to http?
> 
> Also is there a way to force ActiveSync to use SSL?

You must set the x-webobjects headers. See the documentation:

http://sogo.nu/files/docs/SOGoInstallationGuide.html#_apache_configuration

Francis
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SSL issues SOGo web access and ActiveSync - FIXED

2016-05-26 Thread Chris Burke

Just wanted to update that I fixed this issue.
I moved the two ProxyPass statements below to the default-ssl.conf inside my 
 container for the server, and everything is always forced 
to https now and loads properly.
Thanks

ProxyPass /Microsoft-Server-ActiveSync \
 http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync \
 retry=60 connectiontimeout=5 timeout=3540

ProxyPass /SOGo http://127.0.0.1:2/SOGo retry=0

  From: Chris Burke <burkech...@yahoo.com>
 To: "users@sogo.nu" <users@sogo.nu> 
 Sent: Wednesday, May 25, 2016 3:23 PM
 Subject: Re: [SOGo] SSL issues SOGo web access and ActiveSync

Hi- Thanks so much for the response.
I made the changes to the x-webobjects headers according to the documentation, 
restarted apache and sogo, but the issue is still happening.
In happens in both Chrome and IE. Even though Apache should be redirecting 
everything to https, after logging in it is still makes calls to http. 
The SOGo web access loads but the fonts & layout are messed up. Using Chrome 
developer tools I can see the fonts are requested via http and therefore not 
loading:
"Font from origin 'https://mail.mydomain.com' has been blocked from loading by 
Cross-Origin Resource Sharing policy: No 'Access-Control-Allow-Origin' header 
is present on the requested resource. Origin 'http://mail.mydomain.com' is 
therefore not allowed access."

If I go up to the URL bar and make it "https" and reload the page, all is fine 
again.
I'm just not sure what is happening on authentication, why the user gets 
redirected to http.
Below is a snip from my Apache SOGo.conf which shows the values for 
RequestHeader.
I'm going to experiment with moving the ProxyPass statements to my 
default-ssl.conf instead of leaving them in SOGo.conf to see if that makes a 
difference.
 http://127.0.0.1:2/SOGo>## adjust the following to your 
configuration## and do not forget to enable the headers module  RequestHeader set "x-webobjects-server-port" "443"  
RequestHeader set "x-webobjects-server-name" "mail.mydomain.com"  RequestHeader 
set "x-webobjects-server-url" "https://mail.mydomain.com;
## When using proxy-side autentication, you need to uncomment and## adjust the 
following line:  RequestHeader unset "x-webobjects-remote-user"#  RequestHeader 
set "x-webobjects-remote-user" "%{REMOTE_USER}e" env=REMOTE_USER  RequestHeader 
set "x-webobjects-server-protocol" "HTTP/1.0" 
  AddDefaultCharset UTF-8  Order allow,deny  Allow from all

-Chris

  From: Francis Lachapelle <users@sogo.nu>
 To: users@sogo.nu 
 Sent: Wednesday, May 25, 2016 8:19 AM
 Subject: Re: [SOGo] SSL issues SOGo web access and ActiveSync

Hi Chris

> On May 24, 2016, at 3:31 PM, Chris Burke (burkech...@yahoo.com) 
> <users@sogo.nu> wrote:
> 
> I'm having a problem getting SSL to work with SOGo web access and ActiveSync.
> 
> 
> In Apache I redirect everything to SSL in 000-default.conf:
> 
> 
> ServerName mail.mydomain.com
> Redirect permanent / https://mail.mydomain.com/
> 
> 
> This works great for everything, except when accessing SOGo.
> 
> When I go to https://[mail.mydomain.com]/SOGo the  login page loads https 
> correctly, but as soon as I click "connect", I get redirected to http and the 
> page doesn't load properly because of mixed http and https calls.
> 
> After getting redirected to http I can I can force "https:" in the URL bar, 
> then it will load correctly.
> 
> I think the problem may be the http ProxyPass statements in the Apache 
> SOGo.conf file:
> 
> ProxyPass /Microsoft-Server-ActiveSync \
>  http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync \
>  retry=60 connectiontimeout=5 timeout=3540
> 
> ProxyPass /SOGo http://127.0.0.1:2/SOGo retry=0
> 
> I have tried changing these ProxyPass statements to https (and turning on 
> SSLProxyEngine).
> This failed.
> I have also changed 127.0.0.1 to mail.mydomain.com (which resolves locally to 
> 127.0.0.1) and this still fails with "internal server error".
> 
> Any ideas how I can stop SOGo from redirecting to http?
> 
> Also is there a way to force ActiveSync to use SSL?

You must set the x-webobjects headers. See the documentation:

http://sogo.nu/files/docs/SOGoInstallationGuide.html#_apache_configuration

Francis
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] SSL issues SOGo web access and ActiveSync

2016-05-24 Thread Chris Burke

I'm having a problem getting SSL to work with SOGo web access and ActiveSync.

In Apache I redirect everything to SSL in 000-default.conf:
ServerName mail.mydomain.comRedirect permanent / 
https://mail.mydomain.com/
This works great for everything, except when accessing SOGo.
When I go to https://[mail.mydomain.com]/SOGo the  login page loads https 
correctly, but as soon as I click "connect", I get redirected to http and the 
page doesn't load properly because of mixed http and https calls.
After getting redirected to http I can I can force "https:" in the URL bar, 
then it will load correctly.
I think the problem may be the http ProxyPass statements in the Apache 
SOGo.conf file:
ProxyPass /Microsoft-Server-ActiveSync \ 
http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync \ retry=60 
connectiontimeout=5 timeout=3540
ProxyPass /SOGo http://127.0.0.1:2/SOGo retry=0
I have tried changing these ProxyPass statements to https (and turning on 
SSLProxyEngine).This failed.I have also changed 127.0.0.1 to mail.mydomain.com 
(which resolves locally to 127.0.0.1) and this still fails with "internal 
server error".
Any ideas how I can stop SOGo from redirecting to http?
Also is there a way to force ActiveSync to use SSL?
Thank you for any help!

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] feature request sogo

2016-05-19 Thread Chris




On 5/19/2016 9:35 PM, Tamer Higazi (th9...@googlemail.com) wrote:

Hi people,
Sogo is getting to be better, and better and better. Cool stuff you are
doing.

What I see at sogo is that it checks via gravatar the images which I
think is pretty cool.

What I figured out, that sogo checks only the primary address if a
gravatar is set. Would be also wonderfull if it would check the
secondary Email if the primary mailaddress has no picture (gravatar) set

What to be wonderful would be, that there is an option somewhere to
check/add, if all the pictures (or computer generated ones) would be
stored permanently in the vcards, so that if somebody makes a sync those
are being transfered as well to the clients (tablets, smartphone.)




best, Tamer


+1 to save the gravatar contact profile pic into the vcard + carddav 
sync those vcards to phone = phone contacts effortlessly get the contact 
pics.


Other public user profile sources should be used as fallback in case the 
attempt to retrieve the gravatar contact profile pics fails or doesn't 
exist.


Only some of my contacts have gravatar profile pics.

When you query multiple contact pic sources, probably 90-99% contacts 
have at least one social network profile pic.


With free code and contact email address it's possible to get

LinkedIn public pic of your linkedin contacts http://pastebin.com/xb81YdL7
google plus profile pic,
facebook profile pic,
RFC image embedded in the "face" header field of the email,
RFC image embedded in the AD/OpenLDAP directory.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v3.1 released!

2016-05-19 Thread Chris


On 5/19/2016 4:12 PM, Patrice Levesque (pleves...@inverse.ca) wrote:

This is probably a silly question... but why would we rather have a
9-tables-total database? Just that it makes mysql look less crowded,
or are there also actual benefits?

Two things on top of my head:

1) MySQL table metadata operations get sluggish when the server hits
a couple of thousands tables.  All table metadata is stored in a
non-transactional engine (MyISAM) so full-table locks cannot be
avoided;

2) Control of schema creation; if you currently want to use table
compression, partitions or get complete Unicode coverage with SOGo,
you need to pre-create the schema; letting SOGo automatically create
a random number of tables defeats that.





It'd be cool to run a performance benchmark, SOGo Before and After the 
SQL upgrade to 9 tables total!  I suspect the speed gains will score 
very impressively!



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v3.1 released!

2016-05-19 Thread Chris


On 5/18/2016 11:55 PM, Zhang Huangbin (z...@iredmail.org) wrote:

On May 19, 2016, at 7:49 AM, Ludovic Marcotte (lmarco...@inverse.ca) 
<users@sogo.nu> wrote:

The Inverse team is pleased to announce the immediate availability of SOGo 
v3.1.0. This is a major release of SOGo which focuses on important new features 
and improved stability over previous versions.


Zhang Huangbin, founder of iRedMail project: http://www.iredmail.org/
Time zone: GMT+8 (China/Beijing).



Ludovic wrote:
> If you want the latest Samba/OpenChange code, wait a few days. We'll 
release a new ZEG based on Ubuntu [Xenial] with support for Samba 4.3 
(the one included in Trusty) and updated OpenChange packages which bring 
a lot of improvements.


Zhang,
Any possibility of iRedMail for Ubuntu 16.04 Xenial, to match SOGo ZEG, 
in other words, to support Samba 4.3 (included in Ubuntu Xenial) and 
updated OpenChange packages?  OpenChange+Samba would increase 
collaboration in groups containing users with Outlook 2003, 2007... Yes, 
those Outlook versions are ancient, yet, it's best to support them, 
since the software is available and it does the job.

-Chris

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Problem with subfolder

2016-04-24 Thread &quot;Chris"

Hi,

Albert Shih wrote:
> I've got a user with lot of subfolder (~1400, yes you read correct, one
> thousand and four hundred).

how long does it take until all subfolders are shown in the folder tree on
the left? Are you using version 2 or 3?

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Thunderbird calendar 'momentarily not available'

2016-04-18 Thread Chris Hastie


On 17/04/2016 12:36, Christian Mack (christian.m...@uni-konstanz.de) wrote:


When Lightnig shows that yellow triangle, it has disabled this calendar
in most cases.


Hi

Not in this case. The calendar seems to function, and is listed as 
switched on. What's more, the setting doesn't seem to persist. On 
restarting TB the triangle is initially not there, but reappears as soon 
as a sync is attempted.


Deactivating and reactivating the calendar does not solve the issue. Nor 
does unsubscribing and resubscribing. As soon as a sync is attempted, 
the triangle reappears.



--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Thunderbird calendar 'momentarily not available'

2016-04-15 Thread Chris Hastie

I have a problem with one user's calendar. Although he seems to see it 
without problem, all those he has shared it with see it displayed in the 
Thunderbird list with a small yellow triangle and the tool tip "The 
calendar Dom is momentarily not available". An initial look at the SOGo 
logs suggested that the child process was running out of memory. I've 
bumped up SxVMemLimit which seems to have stopped such messages 
appearing, but the yellow triangle persists. At first only a subset of 
the user's events appeared to others, but most, if not all of them seem 
to have appeared now. The Thunderbird error log reports several things 
including a 'multiget error' and '[calCachedCalendar] replay action 
failed'. There doesn't appear to be much of interest in the sogo logs 
now the memory has been increased. The user in question is keen to keep 
all his historic appointments should he ever need to look back at 
things, so we kicked off by importing over 2000 events.


Any ideas where I should look, or how best to debug this?

Here's what turns up in the SOGo log
Apr 15 16:27:56 sogod [29268]: 192.168.7.34 "REPORT 
/SOGo/dav/raggedstaff/Calendar/doms_personal/ HTTP/1.1" 207 66383/166 
0.276 804701 91% 0
Apr 15 16:27:57 sogod [29268]: 192.168.7.34 "REPORT 
/SOGo/dav/raggedstaff/Calendar/doms_personal/ HTTP/1.1" 207 10252/17505 
0.473 84071 87% 0


and this is what turns up in TB's error console

Timestamp: 15/04/2016 11:54:47
Warning: CalDAV: Unexpected response, status: undefined, href: 
/SOGo/dav/raggedstaff/Calendar/doms_personal/F32755CF8F0F44B68E008D5764933E100 
calendar-data:


Source File: 
file:///C:/Users/raggedstaff/AppData/Roaming/Thunderbird/Profiles/toln8gbb.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/calendar-js/calDavRequestHandlers.js

Line: 935
Timestamp: 15/04/2016 11:54:50
Warning: CalDAV: Get failed: multiget error
Source File: 
file:///C:/Users/raggedstaff/AppData/Roaming/Thunderbird/Profiles/toln8gbb.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/components/calDavCalendar.js

Line: 1213
Timestamp: 15/04/2016 11:54:50
Error: [calCachedCalendar] replay action failed: null, 
uri=https://munged.example.com/SOGo/dav/raggedstaff/Calendar/doms_personal/, 
result=2147500037, op=[xpconnect wrapped calIOperation]
Source File: 
file:///C:/Users/raggedstaff/AppData/Roaming/Thunderbird/Profiles/toln8gbb.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/calendar-js/calCachedCalendar.js

Line: 322
Timestamp: 15/04/2016 11:54:50
Warning: There has been an error reading data for calendar: Dom. 
However, this error is believed to be minor, so the program will attempt 
to continue. Error code: 0x80004005. Description: multiget error
Source File: 
file:///C:/Users/raggedstaff/AppData/Roaming/Thunderbird/Profiles/toln8gbb.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/calendar-js/calCalendarManager.js

Line: 960
Timestamp: 15/04/2016 11:54:50
Warning: There has been an error reading data for calendar: Dom. 
However, this error is believed to be minor, so the program will attempt 
to continue. Error code: READ_FAILED. Description:
Source File: 
file:///C:/Users/raggedstaff/AppData/Roaming/Thunderbird/Profiles/toln8gbb.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/calendar-js/calCalendarManager.js

Line: 960


Thanks

Chris
--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Mailing groups

2016-04-11 Thread &quot;Chris"

Mike Mueller wrote:
> I think this can be done by Postfix without the need of SOGo. At least
> for explicit groups.

But SOGo also supports LDAP groups, if you want to invite multiple people
for example.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Android Contact Import duplicates

2016-04-10 Thread &quot;Chris"

qm...@top-consulting.net wrote:

> Anyone else experienced a similar issue ?

Have you tried CardDav? In my experience it works better with Android
devices.

BTW: it's also possible to import contacts directly in the web interface.

- Chris



-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Import multiple calendars and address books

2016-04-05 Thread &quot;Chris"

Ludovic Marcotte wrote:
> On 2016-04-05 01:31, "Chris" (chris2...@postbox.xyz) wrote:
>> is it possible to import calendars and address books for all users?
> Not really - but what you can do is use a SOGoSuperUsernames together
> with the DAV layer of SOGo and "PUT" the content you want in user's
> calendars/address books.
>

That's a good idea. Thank you.

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Import multiple calendars and address books

2016-04-05 Thread &quot;Chris"

All,

is it possible to import calendars and address books for all users?

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] List resources

2016-04-04 Thread &quot;Chris"

Hello Sergey,

Sergey Gladkov wrote:
> Hello Chris,
> what LDAP implementation do you use ? do you use the exchange ?

OpenLDAP. It's working with LDAP, but is there such a parameter for mySQL
user sources too? I use mySQL for resources.

What do you mean by exchange?

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] List resources

2016-04-02 Thread &quot;Chris"

Hello Francis,

Francis Lachapelle wrote:
>> On Mar 30, 2016, at 4:24 PM, Chris (chris2...@postbox.xyz)
>> <users@sogo.nu> wrote:
>>
>> I've shared addresses in LDAP and resources. Both address books are
>> shown,
>> but no addresses are listed, until I enter the beginning of a name. Is
>> this expected behavior? Is it possible to list all entries?
>
> Set the parameter listRequiresDot to NO for your LDAP users source.

Thank you, that's working with LDAP.

Is there such a parameter for mySQL too?

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Exchange 2003 -> Sogo

2016-03-30 Thread Chris


On 3/30/2016 11:46 AM, lists (li...@merit.unu.edu) wrote:



On 30-3-2016 15:00, Jesús García Sáez (blax...@gmail.com) wrote:

Financial issues.
All developers (and almost all employees) quit.

Highly unlikely further development. I've not tried myself but sogo 3 is
mostly UI changes, it doesn't affect sogo-openchange layer.

What sad news.

MJ


I suggest starting a crowdfunding campaign, this just might raise the 
cash needed...


Other crowd funding campaigns have raised a lot of money to develop some 
rather useless things!



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Thunderbird: CalDAV Fatal Error doing multiget for Personal Calendar [PARTIAL SOLUTION]

2016-03-29 Thread Chris




On 3/29/2016 3:10 PM, Dave Fullerton 
(dfullertaster...@shorelinecontainer.com) wrote:


I figured out what was causing thunderbird's sync to fail. It appears 
this particular user was putting emoji (unicode) in some of his 
events. Thunderbird appears to download the calendar in blocks and 
whenever it would come across these emoji in a block the remaining (or 
even all, I didn't actually check) of the events in that block would 
be missing.


The interesting bit was that some of these events that caused 
thunderbird to fail on the download also did not appear in SOGo's own 
web interface. I had to use a PHP caldav class to remove the offending 
entries via href.


Here is what I had to do to find and correct the entries in case it is 
of any help to any one else:


1) In thunderbird's config editor, set the calendar.debug.log and 
calendar.debug.log.verbose to true.

2) Open Thunderbird's error console (CTRL-SHIFT-J)
3) Clear the error console but leave it open.
4) Reset the calendar cache and force thunderbird to re-download the 
entire calendar.
5) Check the error console for the "CalDAV: Fatal Error doing..." 
warning message.
6) Look at the message just below it that contains the ical raw data. 
You will see BEGIN:VCALENDAR, BEGIN:VEVENT, etc data. Scroll so you 
can see the bottom of this message (it could take several screens 
worth to get to the bottom) and look at the last line. In my case the 
last line was a SUMMARY: line. This is the event that Thunderbird 
choked on. Using the SUMMARY, DTSTART or any other information you can 
find use it to locate that event in the web interface, edit it and 
remove anything that is not a regular printed character. In some cases 
I had to query the sogo database for more information, like an href so 
I could delete it with a php caldav class.
7) Go to step 3 and repeat until there are no more warning messages in 
step 5.
8) Send an email to the user and tell them to stop using emoji in 
their calendar events.


-Dave

Good work!
Inverse should fix this bug in the CalDAV calendar sync so that it is 
able to encounter unicode/emoji without crashing the sync.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] META: Mailing list configuration change

2016-03-27 Thread &quot;Chris"

DJ Lucas wrote:
>
>
> I haven't found anything from Google directly, but here...
>
> https://dmarc.org/2015/10/global-mailbox-providers-deploying-dmarc-to-protect-users/

Thank you. If I got this right, @gmail.com mails have to be signed and
can't be faked by someone else. For the moment I'm not required to sign my
own mails (although they maybe get higher spam score then).

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] META: Mailing list configuration change

2016-03-27 Thread &quot;Chris"

Francis,

Francis Lachapelle wrote:
> Yahoo has already adopted a strict DMARC policy and Google has announced
> to do the same in June 2016. We chose to *not* penalize our list
> subscribers hosting their mailbox on those systems.

that's interesting. Do you have a reference to the new Google DMARC
policy? I've only found some notes concerning Google Apps.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Sogo Frontend Connector Firefox 38.7.

2016-03-27 Thread &quot;Chris"

Hello Gerald,

i...@ibdrigo.com wrote:
> Hello,
>
> the currently offered Sogo Connector (31.0.2) is claimed to work with
Firefox
> 38.X. However, Fiorefox refuses to install the package. This is because
in the
> xpi file install.rdf contains

can you approve invitations in most recent Thunderbird?

- Chris



-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] resource calendar

2016-03-25 Thread &quot;Chris"

Hello Ralf,

Ralf Cirksena wrote:
> we are testing SOGo to replace our oraganisation's calendar.
> Starting with the demo appliance we tried to add resource calendars
> (meeting rooms etc).
>
> We did not find a way to a add such calendars. Where should we start
> to search?

have a look at the SOGo Installation Guide.

You can add an additional user source. It doesn't have to be LDAP. Add an
KindFieldName and MultipleBookingsFieldName. Then, you can book resources,
e.g. conference rooms.

I haven't found a possiblity to list resources, but when entering the
beginning of the name, they're completed.

Which calendar are you using now? When using IMAP mailboxes with many
subfolders SOGo 3 is too slow. I assume it's because of the JavaScript
displaying the folder tree. The SOGo 2 user interface is better.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Recipients Invalid

2016-03-24 Thread Chris


On 3/24/2016 1:35 PM, Ludovic Marcotte (lmarco...@inverse.ca) wrote:

On 2016-03-24 13:26, Bob Wooldridge (bob.wooldri...@edm-inc.com) wrote:
Mar 24 12:24:40 sogod [23984]: <0x0x7fc2f2ad7650[SOGoMailer]> error 
with recipient 'kc0...@yahoo.com' 

Your SMTP server is refusing SOGo's RCPT TO command for that recipient.

Figure this out and it'll work.

It would be nice if SOGo would automate this error cause discovery by 
showing the lines from SMTP error log, corresponding to the time of its 
own error log lines, for viewing only by the admin users.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Photo from LDAP

2016-03-24 Thread Chris


On 3/24/2016 8:03 AM, Andreas Gebetsroither wrote:

Hi @ all,

Is it possible to view in the Contacts a photo from LDAP?
If yes what attributes i need for the mapping?

Best regards

Andreas,

There is a great Thunderbird extension, Awesome ldapInfoShow, that 
displays the user photo stored in LDAP, Addressbook,  Facebook, 
LinkedIn, Flickr, Gravatar public email/photo directory.  Code is GPL 
v3, released on github.  Just need to request this feature to the 
inverse team, and surely they'll add it to SOGo user interface. 
https://github.com/wangvisual/ldapinfo/tree/master/releases


Another extension which displays the profile photo embedded in the email 
header, in base64 encoding (yes this is real IETF standard!). It would 
be nice for SOGo to support this type of profile photo also.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Accept Appointment In Lightning

2016-03-21 Thread Chris

Chris wrote:

> Accepting in the webinterface and CalDAV works fine.

I meant CalDAV Sync on Android works fine.


-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Exchange 2003 -> Sogo

2016-03-20 Thread Chris


On 3/15/2016 1:52 PM, Ludovic Marcotte wrote:

On 2016-03-15 12:19, EFEKT PAWKI wrote:
Now Exchange 2003 is running on multihomed SBS without a problem on a 
wooden server - AMD 2x2,2Ghz, 3,5GB RAM (32bit os) with AD, DNS, 
DHCP, VPN without a problem and performance problems.
All users files take abut 60GB on server. Archives are out of server 
on PST files - so outside server.
You think I have to test it before I will switch whole company? 32+GB 
RAM will need sogo to run same amount of data? 


You should consider 25-45 MB of memory per EAS user. This should even 
goes a bit down in the upcoming release.



That's good news.
The algorithm which Microsoft is using to perform EAS is probably 10x 
more efficient with memory and time.
Is there a way to look at the MS EAS algorithm with fresh eyes, analyze 
it until we can deduce how it must be implement, and use these findings 
to improve the compatible EAS algorithm, so it can run in the same, or 
better, memory and time, as the Microsoft EAS algorithm.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] how to install the SOGo

2016-03-19 Thread Chris


On 3/15/2016 10:08 PM, ?? Lijun Fan wrote:
hi i am the new for SOGo, but don't know how to install that. i check 
the official guide?? but not sure the detail. can you provide the 
detail steps to me? thank you very much!

Lijun,
To install SOGo one very easy way for the first time user, just download 
and install iRedMail, or ClearOS, or Zentyal Community, these are 
installer scripts and control panels for SOGo groupware.
More difficult way, is follow installation guide on sogo.nu, it's many 
steps, and takes several hours time, higher probability of errors and 
facing problems.

[SOGo] Group Meeting Requests

2016-03-14 Thread Chris

Dear All,

when inviting a LDAP group to a meeting, names are resolved when saving
the event. It is not shown, if any member is occupied. When opening the
appointment again, all are busy!

Did I made any mistake when installing it or is free / busy not working
with groups? Isn't that an essential feature of a groupware?

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Restrict EAS usage?

2016-03-13 Thread Chris

Ludovic Marcotte wrote:
> On 2016-03-13 15:10, Chris wrote:
>> Well there's an error. It isn't working like expected. Changing the LDAP
>> attribute has no influence.
> You cannot use filter = ... inside ModulesConstraints - which is limited
> to a single key/value pair.
>
> But you can combine ModulesConstraints and filter = ... within your
> SOGoUserSources.
>

Now, I've added an additional user source, but it isn't working:

...
baseDN = "dc=myorganization,dc=org";
hostname = ...
canAuthenticate = YES
...
 id = eas;
  isAddressBook = NO;
   filter = "(objectClass='inetOrgPerson') AND active-sync='enabled'";
  ModulesConstraints = {
   ActiveSync = {
ou = people;
};
   };
...

Users are all in the same LDAP branch, but some have the active-sync
attribute enabled.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Restrict EAS usage?

2016-03-13 Thread Chris

Ludovic Marcotte wrote:
> On 2016-03-13 06:10, Chris wrote:
>> is it possible to allow Exchange Active Sync for some users only?
> Yes - have a look at ModulesConstraints in the documentation.
>

Thank you! Haven't found that.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] is v3 now default ?

2016-03-08 Thread Chris

Peter Beck wrote:
> Hi there,
>
> Running Debian Stable with SOGo 2.3.8
>
> ii  sogo:amd64   2.3.8-1
> amd64a modern and scalable groupware
>
> just made an apt-get update / apt-get upgrade and it seems that SOGo v3
> is ready to install, but I've never changed my sources to v3. Is that
> intended or a "bug" ?

Good question. On the download page is still version 2, but documentation
section is already for version 3. Since I've installed SOGo on a new
machine, I chose version 3.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Free / Busy in Thunderbird

2016-03-07 Thread Chris

Dear All,

I've installed Sogo Connector in most recent Thunderbird / Lightning. It's
working fine, but free / busy times are displayed only when closing the
appointment and opening it again. In Webinterface, they're immediately
shown. Is this a known issue?

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Show LDAP address book members

2016-03-07 Thread Chris

Dear all,

is it possible to list all ldap address book members? Or all of a LDAP-group?

Right now, they're shown only, when you enter a part of their names.

- Chris

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Sogo, CentOS 7 & Openchange

2016-03-04 Thread Chris


Stefan,

According to this thread:

https://lists.inverse.ca/sogo/arc/users/2014-12/msg00196.html

Samba4 not existing for CentOS 7/RHEL 7, has been an issue for SOGO 
users, since December 2014!


Anyway, here is a step by step guide on how to install Samba4 on CentOS 7:

http://wiki.eri.ucsb.edu/stadm/AD_Samba4_Centos_7

Once you complete installing Samba4, you should then install the newest 
Openchange stable from centos 7 or EPEL repo (assuming the package 
exists!), and achieve outlook compatibility.





On 3/4/2016 4:08 AM, Stefan Klatt wrote:

Hello Christian,

thats right, but what about REHL7? I think REHL5 ist for Centos/Redhat 5?

Stefan

Am 04.03.2016 um 01:33 schrieb Christian Jensen:

Hi.

looking at http://inverse.ca/downloads/SOGo/RHEL5/x86_64/RPMS/ it
looks like all the files are there
have a look at
http://sogo.nu/support/faq/article/how-to-install-sogo-and-sope-through-yum.html
maybe you missed something?

-- Christian

Den 03-03-2016 kl. 21:55 skrev Stefan Klatt:

Hi,

did I miss something or is it possible to install this combination?
I didn't found the needed openchange rpms at the repository.

Where is my fault?

Stefan



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Webcal

2016-03-04 Thread Chris


On 3/4/2016 4:49 AM, Schrödel Robert wrote:

Hello,

is it possible to use webcal for access to a public calendar?
We would implement a calendar to Wordpress.

Thank’s
Robert

Robert-
Sogo is a caldav server so as long as you provide the URI of the public 
calendar ics file on Sogo to your wordpress plugin, the plugin should 
find the public calendar hosted on Sogo and subscribe to it.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ActiveSync on Android

2016-02-23 Thread Chris

Possibly these bugs, if you're running android 5.0 lollipop on your Moto 
G.  Something having to do with TLS 1.2 - the latest version.


https://code.google.com/p/android/issues/detail?id=79389

https://code.google.com/p/android/issues/detail?id=36025



On 2/23/2016 3:26 PM, Adrian Figueroa wrote:

I tested the certificates with a cert chain checker and it worked fine. Also, 
when I called mail.domain.tld in a browser, the correct certificate was served. 
Something might be wrong with the Android client.. Maybe it does not use the 
name based configuration?

I have no idea, I am no expert in this.


Am 23.02.2016 um 18:21 schrieb Chris <ch...@espacenetworks.com>:

Very cool.  Inverse should add this issue to public FAQ or Knowledgebase on 
sogo.nu

SOGo should be made to detect TLS certificate issues with a wget command to 
self-test verify the web interface and if it isn't setup properly, provide the 
admin with a human language worded error message, if not also propose the fix 
and/or apply the fix.  Saving many admins running TLS secure web mail, many, 
many hours of hunting this issue down.




On 2/23/2016 5:42 AM, Adrian Figueroa wrote:

I solved the problem!

It is stock android 5 (Moto G, GPE) with stock mail, by the way. It happens on 
multiple devices.

It is like this:
The mail client connects to my mail server. The mail server is called 
"mail.domain.tld".

Now, another domain name on the same server (other.domain.tld) is supplied to 
the mail client by apache, while the certificate itself is served by the mail 
server (dovecot, postfix, ..). Obviously, the name of the domain now does not 
match the certificate.

What I had to do was to add mail.domain.tld to the apache vhosts and make it 
the first to be served by appending 000_ at the beginning of the name of the 
vserver config. Now, name and certificate do match.

I wonder why apache serves the mail client in the first place...

Adrian


Am 22.02.2016 um 21:07 schrieb André Schild <an...@schild.ws>:

Am 22.02.2016 um 17:42 schrieb Adrian Figueroa:

Actually, I did provide the analyzer with valid login information. Maybe I 
should not pay too much attention to that 401 error.
ActiveSync does work on any other device, also on Android with other clients (such as 
"nine").

Could it be, that Let's Encrypt certificates do not work on Android with the 
standard mail client? They do work in browsers.

Are you using Stock Android, or some other branded Android device?
Some manufacturers make modifications to such services...

Does it happen on different devices?

What Android Version?

André
--
users@sogo.nu
https://inverse.ca/sogo/lists

--
users@sogo.nu
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ActiveSync on Android

2016-02-23 Thread Chris

Very cool.  Inverse should add this issue to public FAQ or Knowledgebase 
on sogo.nu


SOGo should be made to detect TLS certificate issues with a wget command 
to self-test verify the web interface and if it isn't setup properly, 
provide the admin with a human language worded error message, if not 
also propose the fix and/or apply the fix.  Saving many admins running 
TLS secure web mail, many, many hours of hunting this issue down.





On 2/23/2016 5:42 AM, Adrian Figueroa wrote:

I solved the problem!

It is stock android 5 (Moto G, GPE) with stock mail, by the way. It happens on 
multiple devices.

It is like this:
The mail client connects to my mail server. The mail server is called 
"mail.domain.tld".

Now, another domain name on the same server (other.domain.tld) is supplied to 
the mail client by apache, while the certificate itself is served by the mail 
server (dovecot, postfix, ..). Obviously, the name of the domain now does not 
match the certificate.

What I had to do was to add mail.domain.tld to the apache vhosts and make it 
the first to be served by appending 000_ at the beginning of the name of the 
vserver config. Now, name and certificate do match.

I wonder why apache serves the mail client in the first place...

Adrian


Am 22.02.2016 um 21:07 schrieb André Schild :

Am 22.02.2016 um 17:42 schrieb Adrian Figueroa:

Actually, I did provide the analyzer with valid login information. Maybe I 
should not pay too much attention to that 401 error.
ActiveSync does work on any other device, also on Android with other clients (such as 
"nine").

Could it be, that Let's Encrypt certificates do not work on Android with the 
standard mail client? They do work in browsers.

Are you using Stock Android, or some other branded Android device?
Some manufacturers make modifications to such services...

Does it happen on different devices?

What Android Version?

André
--
users@sogo.nu
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] EAS and IMAP sync conflicting?

2016-02-18 Thread Chris


It's probably one of three things:

1. Your android phone is defaulting to pull down only new unread mails, or

2. Sogo is defaulting to activesync only new unread mails to your 
android phone, or


3. Dovecot is defaulting to take whatever commands SOGo is giving it 
during the activesync protocol conversation and interpret those commands 
to mean only to serve up only the new unread mails.




On 2/18/2016 5:36 PM, John Underwood wrote:
Thanks for the information. Looking at a Imap dump from Sogo it's 
clear that the X-GUID extension is alive and well, just not 
advertising itself).


So it looks like the strange synchronisation behaviour is due to some 
other aspect of the setup. Does anyone have any other ideas? I haven't 
seen any other similar posts on this list for similar problems so I'm 
rather baffled.


On 18/02/2016 22:04, Chris wrote:


On Dovecot imap server 2.2.8 and newer, X-GUID should be used by SOGo 
2.2.11 and newer.  ANNOTATE is the old outdated standard still used 
by Cyrus imap server.


See this resolved bug from Dec 2014: http://sogo.nu/bugs/view.php?id=3018

Also see more about dovecot and x-guid: 
http://www.dovecot.org/list/dovecot/2014-September/097907.html




On 2/18/2016 4:11 PM, John Underwood wrote:
I have a small server setup which is working very well with the 
exception of EAS on android devices (I haven't tried iOS devices).


The setup is as follows:
- Centos 7
- dovecot 2.2.10
- samba authentication using Sernet samba 4.2
- apache 2.4.6
- SOGo 3.0.1 (previously on 2.3.x with the same symptoms).

Thunderbird clients work fine
The web front end works fine (version 2 and now version 3).

When I first sync an android phone with the server using ActiveSync, 
it flashes up "Syncing x/5500" emails. It then syncs about 10-15 and 
no more. Contacts and calendars sync fine.


Subsequently the phone will collect e-mail automatically as it 
arrives providing it hasn't already been read using Thunderbird. If 
an e-mail /has/ already been read using Thunderbird it doesn't sync 
to the phone at all.


Looking through the installation guide (p5), I note that the IMAP 
server needs the ACL, UIDPLUS, QRESYNC, ANNOTATE (or X-GUID) 
extensions. I have the first three but I can't find any reference to 
the ANNOTATE or X-GUID extensions in the dovecot documentation. 
Could this be the problem?


Any help would be much appreciated!

Thanks

John
--
users@sogo.nu
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] event categories are not synchronized

2016-02-17 Thread Chris




On 2/16/2016 8:37 AM, Tanstaafl wrote:

On 2/16/2016 8:12 AM, Christian Mack  wrote:

Am 15.02.2016 um 14:31 schrieb Laurent Wargon:

Hi all,

With Thunderbird Lightning, event categories are not synchronized with the 
categories defined in the web interface. Yet contact categories defined in the 
web interface are synchronized.

Is this normal ?


Yes, that is normal, as calendar categories are managed in Lightning,
which does know nothing about SOGo.
But remote Adressbooks are managed via SOGo Connector Add-On, which was
created specifically for SOGo, therefore knowing how to get those
categories.

So, is it possible, with some coding/enhancement to SOGo Integrator that
SOGo could become are of/manage Calendar Categories? Or would this
require some change/enhancement to Lightning?



Yes there's a javascript API which would let SOGo integrator obtain the 
calendar categories of calendar events.


See the code in this add-on, the Provider for Google Calendar, allows 
bidirectional sync of google calendar events with thunderbird lightning 
calendar:

https://addons.mozilla.org/en-us/thunderbird/addon/provider-for-google-calendar/
https://addons.mozilla.org/thunderbird/downloads/latest/4631/addon-4631-latest.xpi?src=dp-btn-primary
File: chrome/gdata-provider/content/gdata-calendar-event-dialog.js
File: module/gdataUtils.jsm

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Invite Dates Wrong

2016-02-11 Thread Chris


Hello,


On 2/11/2016 3:04 PM, Bob Wooldridge wrote:
I recently had to delete and recreate the Thunderbird profile of one 
of my users.  Afterwards, several invite acknowledgments showed in the 
wrong order when sorted by date.  There were many messages with dates 
way off (from 2009 and 2010) showing as current.  I tried rebuilding 
the folder but this did not change anything.  I noticed that the 
headers of these messages were sparse and did not contain much 
information.  Never the less, when viewing the folder in the SOGo web 
interface, they appeared in correct order.  Any ideas on what is 
causing this?




A guess : there's a difference between the header "Date" and 
"Received".  Date means whenever the sender server claims it sent the 
email message. Received is when your mail server claims it received the 
email message.  Maybe your recreating the Thunderbird profile caused new 
Date or Received header dates to be created. Maybe Sogo is sorting on 
"Date", and your Thunderbird app is sorting on "Received."  Or vice versa.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Auto update status of Invitees when an invitation is accepted?

2016-02-03 Thread Chris Coleman

It's unfortunate Microsoft didn't make these external meeting and 
appointment requests and responses, sent to a unified inbox with a name 
that SOGo would auto-generate, for example, meetings-0bf8cd1@ (your 
domain . com), appointments-d9fvjke2@ ... and then simply let SOGo 
have the IMAP passwords to those inboxes, and check them every 1-2 
minutes for external requests and responses.


A filter expression for procmail and maildrop to intercept those 
incoming external requests and responses would probably be acceptable in 
most instances.




On 2/3/2016 7:44 PM, Johnny Sketcho wrote:
Thanks for the responses. The gist of this I'm getting is, for 
invitees outside of SOGo responding to event invitations, this would 
require SOGo acting as a sieve for incoming mail to parse the messages 
and determine if one was an Accepted notification. I can see how that 
might be a bit intrusive.



On Wed, Feb 3, 2016 at 4:14 PM, Ludovic Marcotte <lmarco...@inverse.ca 
<mailto:lmarco...@inverse.ca>> wrote:


On 2016-02-03 19:04, Chris Coleman wrote:

This feature should be added to SOGo, because it already
exists in Exchange, called "Process external meeting requests
and responses."

It won't work. SOGo would need to have all user's passwords in
clear text (or an IMAP trust) to log in and access user's
messages. Not to mention that users could have filters moving
messages around in other mailboxes. It would be wiser to have this
integrated at the LDA level.

-- 
Ludovic Marcotte

lmarco...@inverse.ca <mailto:lmarco...@inverse.ca> ::
+1.514.755.3630 <tel:%2B1.514.755.3630>  :: http://inverse.ca
Inverse inc. :: Leaders behind SOGo (http://sogo.nu) and
PacketFence (http://packetfence.org)

-- 
users@sogo.nu <mailto:users@sogo.nu>

https://inverse.ca/sogo/lists




--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Inverse/SOGo collaboration with Zentyal on OpenChange

2016-01-29 Thread Chris Coleman


A couple of questions about Inverse, SOGo, Zentyl, and OpenChange

1. How active is the collaboration between Inverse and Zentyal to fix 
bugs, add features, and improve performance of OpenChange and its 
implementation of Microsoft's Exchange ActiveSync (EAS) and Exchange Web 
Services (EWS) ?


I ask because there are some bugs in OpenChange having to do with EAS, 
which prevent SOGo's OpenChange ActiveSync features from working as a 
full replacement for Exchange server.   Outlook users see some missing 
features, some performance problems and some bugs.


2. Also, what's the roadmap or status on implementing Exchange Web 
Services as discussed on the zentyal openchange github repo?

https://github.com/openchange/openchange/issues/314

Many say EWS is a better bet than EAS and much less trouble to debug 
than the popular yet arcane and overly complicated EAS.


Also Outlook 2013 and newer use EWS to talk to exchange server so 
this EWS code would be a smart addition to OpenChange and SOGo.



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] creating event on mouse drag

2016-01-26 Thread Chris Coleman

I have tried it and get success, when dragging the mouse to create a new 
event, the time is correct, and the form pops up and is automatically 
filled in (start and end time and days).

Browser is Firefox 44.0 on windows 7.


On 1/26/2016 3:00 PM, Hugo wrote:

nope, sorry, still no joy on linux and firefox 43.0.4, same behaviour

On 26.01.2016 15:36, Francis Lachapelle wrote:
On Jan 26, 2016, at 6:00 AM, VILLEMUR Jacques 
 wrote:


Hi,
I have same bug with v3, safari 9.0.3
Jacques


Le Vendredi 22 Janvier 2016 11:56 CET, Hugo  a écrit:

sorry, forgot to mention, it happens on firefox 43.0.4 on ubuntu 
15.10,

sogo 3 interface

On 22.01.2016 09:38, Christian Mack wrote:

Am 21.01.2016 um 14:01 schrieb Hugo:
.. is not possible. I get NaN/NaN/NaN as date and NaN:NaN as time 
field.

if I try to set a date, first it shows me the year 1932 (!) and if I
scroll down aaall the way to the current year and pick a date, 
the field

still stays the same and the save button is greyed out.
if created with the green button, it's all ok, even if I change the
date. (see attached screenshots)

sogo version is latest from git (master branch), pulled today and
compiled on an ARM (Odroid-XU)



Android Version?


I just pushed a fix: 
https://github.com/inverse-inc/sogo/commit/8a177bea47925108ad8495da387abd355a840ca0


I also updated the online demo (http://demo.sogo.nu/SOGo) so you can 
quickly confirm that the problem is really resolve.


Thanks!

Francis



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Addressbook

2016-01-13 Thread Chris Coleman


On 12/15/2015 9:37 AM, sti wrote:

looking for a groupware solution I looked at SOGO

I could not find any functions  for filtering address books before exporting.

How does a postprocessing of an exported addressbook look like, for example
create serial letters with a wordprocessing software ?

Is it possible to add own fields ?

best regards
sti


Hello sti,

You should try SuiteCRM, a highly rated open source software, for 
filtering an address book, and creating serial letters.


Best to you

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Mini Admin Panel Survey

2015-12-11 Thread Chris Coleman


You should also try iRedMail for administration of Sogo users.

Post your findings back to the list for others to read!




On 12/11/2015 12:15 PM, Michel Memeteau - EKIMIA wrote:

Hi,

this might be slightly off-topic 

We are in the process of selecting a panel for the administration of
the Sogo users, so far we've tested :

- Sogxmail
- Zentyal


I was wondering what people usually use and I'm open for suggestion
with a preference for simplicity over features.

Best regards

Michel Memeteau
Directeur, Ekimia SAS
+33 (0)9 72 30 83 34 | m...@ekimia.fr | Notre WebBoutique :
http://shop.ekimia.fr | 49 chemin union 13720 La bouilladisse
  FRANCE


Contactez nous directement par Tchat sur http://bit.ly/ekichat


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Mini Admin Panel Survey

2015-12-11 Thread Chris Coleman

Also try out ClearOS 7 this is another admin panel which supports web 
based administering of your Sogo users




On 12/11/2015 12:48 PM, Chris Coleman wrote:

You should also try iRedMail for administration of Sogo users.

Post your findings back to the list for others to read!




On 12/11/2015 12:15 PM, Michel Memeteau - EKIMIA wrote:

Hi,

this might be slightly off-topic 

We are in the process of selecting a panel for the administration of
the Sogo users, so far we've tested :

- Sogxmail
- Zentyal


I was wondering what people usually use and I'm open for suggestion
with a preference for simplicity over features.

Best regards

Michel Memeteau
Directeur, Ekimia SAS
+33 (0)9 72 30 83 34 | m...@ekimia.fr | Notre WebBoutique :
http://shop.ekimia.fr | 49 chemin union 13720 La bouilladisse
  FRANCE


Contactez nous directement par Tchat sur http://bit.ly/ekichat




--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo 2.3.3 issue: iOS 9 Activesync - Calendar sync only "Personal calendar"

2015-11-13 Thread Chris Coleman

Yes, read the thread "[SOGo] ANN: SOGo v2.3.3", Ian McMichael had the 
same issue, and shares the solution.



On 11/13/2015 3:32 AM, giova...@neweden.uk.to wrote:

Hello,

I have an issue with SOGo 2.3.3 opening the iOS 9 using Activesync 
only one calendar "Personal Calendar" is synced (which is the 
default). The second calendar called "Default"  was synced without 
issues from the Version 2.3.2 but from SOGo 2.3.3 it isn't accessible 
anymore.


Does anybody of you have the same behaviour with Multiple Calendar and 
ActiveSync?


Giovanni


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Installproblem

2015-11-05 Thread Chris Coleman




On 11/4/2015 7:41 PM, Robert Rott wrote:

Hello,
I'm installing Sogo on Debian Jessie an i got a bug.

When I use this code:

openchange_provision --openchangedb --openchangedb-uri 'mysql://openchange-
user[:openchange$123]@localhost/openchange'

I get:

Setting up openchange db
Traceback (most recent call last):
   File "/usr/sbin/openchange_provision", line 128, in 
 openchange.openchangedb_provision(provisionnames, lp,
opts.openchangedb_uri)
   File "/usr/lib/python2.7/dist-packages/openchange/provision.py", line 1312,
in openchangedb_provision
 openchangedb = mailbox.OpenChangeDBWithMysqlBackend(uri, find_setup_dir())
   File "/usr/lib/python2.7/dist-packages/openchange/mailbox.py", line 375, in
__init__
 self._connect_to_mysql()
   File "/usr/lib/python2.7/dist-packages/openchange/mailbox.py", line 300, in
_connect_to_mysql
 host, user, passwd, self.db_name, port = self._parse_mysql_url()
   File "/usr/lib/python2.7/dist-packages/openchange/mailbox.py", line 306, in
_parse_mysql_url
 conn_url = urlparse(self.url)
   File "/usr/lib/python2.7/urlparse.py", line 143, in urlparse
 tuple = urlsplit(url, scheme, allow_fragments)
   File "/usr/lib/python2.7/urlparse.py", line 214, in urlsplit
 raise ValueError("Invalid IPv6 URL")
ValueError: Invalid IPv6 URL

Can someone help me please?

Thanks.

[% user.email %]


Robert,

"ValueError: Invalid IPv6 URL".

The python script sees your two square brackets [ ] in the mysql URL, 
and expects the brackets to contain an IPv6 address, but there is no 
valid IPv6 address in there.


Instead of :

openchange_provision --openchangedb --openchangedb-uri 
'mysql://openchange-user[:openchange$123]@localhost/openchange'

Try:

openchange_provision --openchangedb --openchangedb-uri 
'mysql://openchange-user:openchange-password@localhost/openchange'

Note: your openchange password is best to contain only alphanumeric 
characters because symbols, !@#$%^&*()-_=+[]{}\|;:'",<.>/?`~  etc, could 
cause unexpected errors.


-Chris

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] OpenChange/Samba crashes during folder sync (logs included)

2015-11-04 Thread Chris Coleman

On 11/4/2015 9:25 AM, Harold Fines wrote:
Bug confirmed, sixstone found it in
https://github.com/openchange/openchange/blob/master/mapiproxy/servers/default/emsmdb/emsmdbp_object.c#L3603

The lack of chunking in processing client uploads means that the
process runs out of memory and crashes.

I've made a backtrace with debugoc.py (instructions from sixstone):

[2015-10-29 16:13:24,020] INFO: Retrieving the list of Samba process
[2015-10-29 16:13:24,042] INFO: 3875 ?00:00:00 samba
[2015-10-29 16:13:24,045] INFO: 3876 ?00:00:00 samba
[2015-10-29 16:13:24,047] INFO: 3877 ?00:00:00 samba
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later

This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show
copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
>.
Find the GDB manual and other documentation resources online at:
>.
For help, type "help".
Type "apropos word" to search for commands related to "word".
Attaching to process 3877
Reading symbols from /usr/sbin/samba...Reading symbols from

/usr/lib/debug/.build-id/b2/a767673fffef27fef3e50431ff6ee021c74a48.debug...done.
done.
Reading symbols from
/lib/x86_64-linux-gnu/libpthread.so.0...Reading symbols from
/usr/lib/debug//lib/x86_64-linux-gnu/libpthread-2.19.so...done.
done.
[Thread debugging using libthread_db enabled]
Using host libthread_db library
"/lib/x86_64-linux-gnu/libthread_db.so.1".
Loaded symbols for /lib/x86_64-linux-gnu/libpthread.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/libsamba-util.so.0...Reading symbols
from

/usr/lib/debug/.build-id/3f/d97b13fdebb08b451f89ecc46c9d39d358d3ac.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libsamba-util.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libcluster.so.0...Reading symbols
from

/usr/lib/debug/.build-id/75/851ac23b9dde8e9c529ed61dd80dd2109c5ce9.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/samba/libcluster.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/libsamba-credentials.so.0...Reading
symbols from

/usr/lib/debug/.build-id/f3/5f6316588d41b654f6a1cbc017a7fca4353acb.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libsamba-credentials.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/libsamba-hostconfig.so.0...Reading
symbols from

/usr/lib/debug/.build-id/9a/0047f68d0dbdbced7985d07f7f5146111b95cb.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libsamba-hostconfig.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libldbsamba.so.0...Reading symbols
from

/usr/lib/debug/.build-id/1b/c98857cd27e2be39107f841cabc7b7167ac116.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/samba/libldbsamba.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libcliauth.so.0...Reading symbols
from

/usr/lib/debug/.build-id/6d/88faa7bbcd3cf1c07fbf9919f23312af5d394e.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/samba/libcliauth.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0...Reading symbols
from

/usr/lib/debug/.build-id/d0/ee23f3d5b5952514bbe2e8b60e814652185e03.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/samba/libservice.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libauth4.so.0...Reading symbols
from

/usr/lib/debug/.build-id/2b/03fad749dd7a5ee9d3af9a818200282eff6427.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/samba/libauth4.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libntvfs.so.0...Reading symbols
from

/usr/lib/debug/.build-id/fc/470df7bc302eeb50eb004a30bcd1b799def8d3.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/samba/libntvfs.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/libndr.so.0...Reading symbols from

/usr/lib/debug/.build-id/9c/d176912f6d3fce50519c54b300e7e7e802661d.debug...done.
done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libndr.so.0
Reading symbols from
/usr/lib/x86_64-linux-gnu/samba/libprocess_model.so.0...Reading
symbols from

/usr/lib/debug/.build-id/2d/3f9094065e92cb6f14b6b524ad9769f44589ed.debug...done.
done.
Loaded symbols for

Re: [SOGo] rpcproxy not working with outlook 2007 / 2010

2015-10-25 Thread Chris Coleman



On 10/23/2015 4:13 PM, Steve Ankeny wrote:

On 10/23/2015 09:32 AM, Chris Coleman wrote:

And this tip:
"If you face strange issues from Microsoft Outlook, you might want to 
remove any data associated with the user from the SOGo server and 
recreate a Microsoft Outlook profile. To remove any data associated 
to a user, use the openchange_cleanup.py script distributed with 
sogo. The script can be found in |/usr/share/doc/sogo/| 
(|/usr/share/sogo-VERSION/| on |RHEL|). To reset a user, run the 
script as root: |python openchange_cleanup.py username|. See the 
usage output for additional options."


Chris . . .

What is meant by "strange issues?"  Can you give examples?

For instance, I'm receiving, "The name cannot be resolved.  The 
requested operation failed because no search criteria were given to 
the Microsoft Exchange Address Book." -- with errors in 
'/ocsmanager.log' --


Starting server in PID 1885.
serving on http://127.0.0.1:5000
2015-10-17 07:44:28,313 INFO [openchange.web.auth.NTLMAuthHandler] 
[worker 0] client did not pass auth cookie
2015-10-17 07:44:28,321 INFO [openchange.web.auth.NTLMAuthHandler] 
[worker 1] client did not pass auth cookie
2015-10-17 07:44:28,358 INFO [openchange.web.auth.NTLMAuthHandler] 
[worker 1] acquiring lock 
/var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock (1885)
2015-10-17 07:44:29,019 INFO [openchange.web.auth.NTLMAuthHandler] 
[worker 2] acquiring lock 
/var/cache/ntlmauthhandler/ntlm-127.0.0.1.lock (1885)


Would clearing out any existing data and recreating an Outlook profile 
benefit my users?




Steve,

* That quote ("If you face strange issues from Microsoft Outlook, you 
might want to [...] run the script as root: openchange_cleanup.py 
username See the usage output for additional options.") comes from 
openchange 2.0 release notes at this URL:

http://www.openchange.org/developers/relnotes/2.0-quadrant.html
in the section "Known Issues from SOGo backend".
You can and certainly should try it out, clear out and recreate an 
Outlook profile.
I'd test it first.  Make new Outlook user profile, send it some email, 
then use that command line to clear it out (openchange_cleanup.py 
username), see what that does. Recreate the user profile it if the user 
profile for that username was truly removed completely.  Just to be 
totally sure that script works properly, before trying to run the script 
on your real user profile.


* Here is another quote from the same 2.0 release notes, explaining 
exactly how openchange and sogo interoperate.



   "Benefits of SOGo collaboration

OpenChange server and SOGo ( http://www.sogo.nu ) are both groupware 
servers sharing mutual interest in collaborating for the greatest 
benefits of end users. The cement of this cooperation lies in a backend 
developed by Inverse Inc on top of OpenChange API that plugs SOGo 
storage to OpenChange server through SOGo libraries. From a general 
perspective, it can be described as:


 * *OpenChange uses SOGo libraries to store Outlook data*
 * *SOGo uses OpenChange to serve Outlook clients*

In practice, it means that users primarily interested in an Exchange 
compatible server interoperable with Microsoft Outlook clients don't 
need anything but Samba4 and OpenChange. There is no need to run SOGo 
server.


In the meanwhile, as soon as users are looking for Webmail access, 
synchronization with Mozilla Thunderbird/Lighning, Apple iPhone or 
Blackberry, then SOGo server is needed."


* Here is yet another page well worth reading because it explains in 
more detail how OpenChange uses SOGo to store the user's Outlook (MAPI) 
information in what it calls a "MAPIStore".

http://www.openchange.org/documentation/programming/mapistore_python/concepts.html

* I highly suggest having a good read of this series of pages because 
they provide a more in depth look at how OpenChange and SOGo talk to one 
another.


** Did you know the "realm", which you provide in the configuration, 
(for example: mycompany.local which is 15 characters in length ) must be 
14 characters or less in length, to satisfy a Microsoft realm name 
length limit, otherwise strange and/or unpredictable results may occur? 
I didn't know that.  And it's undocumented in the SOGo documentation for 
Native Outlook aka OpenChange, 
http://www.sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuration.pdf 
. Now I know, after having read this openchange "docs" and "cookbook"!

Here is the reference explaining this (it's in the first section):
http://www.openchange.org/cookbook/configuring.html
"For the purpose of this documentation, arbitrary domain (|OC|) and 
realm (|OC.LOCAL|) and passwords (|adminpass| and |user password|) have 
been chosen. Feel free to adjust values to match your requirements.


However, when configuring the domain name during OS installation, it is 
very important *NOT* to choose a realm

Re: [SOGo] ANN: SOGo v3.0 beta 3

2015-10-25 Thread Chris Coleman




On 10/25/2015 3:25 AM, Christian Naumer wrote:

I have question regarding v3. What are the plans in using the v2 and v3 
interfaces in parallel? I like the new interface a lot on tablets and 
smartphones but on a large screen it does waste some space.

Then as a small bug report in v3 some buttons (vertical dots on calendars and 
mail folders) do not work with Firefox. They do work with chrome.

Regards

If you're sure a reproducible bug, you might want to register on the 
official bug tracker and post the steps to recreate it:

http://www.sogo.nu/bugs/view_all_bug_page.php

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] rpcproxy not working with outlook 2007 / 2010

2015-10-23 Thread Chris Coleman


On 10/23/2015 7:29 AM, DurgaPrasad - DatasoftComnet wrote:


Hi all,

Can someone respond on this please.

Regards

DP

*From:*DurgaPrasad - DatasoftComnet [mailto:d...@datasoftcomnet.com]
*Sent:* 20 October 2015 20:55
*To:* 'users@sogo.nu'
*Subject:* RE: [SOGo] rpcproxy not working with outlook 2007 / 2010

Hello all,

I have  installed sogo using apt-get.

Followed the guide below. SOGo Native Microsoft Outlook 
Configuration.pdf 
 
(PDF)


Can someone analyse and let me know. I have tried installing from 
scratch (formatting and installing) 2 or 3 times same situation.


Outlook 2007/2010 is not able to connect either through IP or name 
(via hosts file) using native MAPI.

Outlook 2007/2010 not connecting using Outlook Anywhere either.
The certificate is a valid paid cert

Activesync in 2013 works but I don’t want that.

Regards

DP

*From:*users-requ...@sogo.nu  
[mailto:users-requ...@sogo.nu] *On Behalf Of *Martin Simovic

*Sent:* 05 October 2015 15:59
*To:* users@sogo.nu 
*Subject:* Re: [SOGo] rpcproxy not working with outlook 2007 / 2010

Hi,

On 04 Oct 2015, at 16:13, > > wrote:

Hello all,
Ive checked thoroughly that outlook is not able to wotj with sogo
using native
mode.
below are the facts.

Environment
Ubuntu LTS trusty, Samba4 native mode., dovecot, postfix,sogo,
ocsmanager with
rpcproxy installed.
Webmail  - working
Activesync - working
IMAP/POP3 - working.

Outlook 2007/2010 is not able to connect either through IP or name
(via hosts
file) using native MAPI. (does this work on LAN only)
Outlook 2007/2010 not connecting using Outlook Anywhere either.
The certificate is a valid paid cert
this is what I get in the access.log of apache2

[04/Oct/2015:19:34:51 +0530] "RPC_IN_DATA /rpc/rpcproxy.dll?
mail.mydomain.com :6004 HTTP/1.1" 401
5757 "-" "MSRPC"
[04/Oct/2015:19:34:52 +0530] "RPC_OUT_DATA /rpc/rpcproxy.dll?
mail.mydomain.com :6004 HTTP/1.1" 401
5757 "-" "MSRPC"

mail.mydomain.com  is a placeholder. the
6004 used to be 6002 an hour back so
it might not be relavent.

when I use activesync the username is seen
POST /Microsoft-Server-ActiveSync?
User=x...@mydomain.com

=JF48EU1D7D0LL5QBAWWS3EVDQ0=iPhone=Ping
HTTP/1.1" 200 825 "-" "Apple-iPhone7C1/1301.404"

Can someone through some light on this?

I order to help you please post your smb.conf and ocsmanager.ini 
files. It’d also help if you stated how you installed your environment 
(compiling from source, installing from packages - if so, wha is 
package source (sogo , zentyal?)


Regards

Martin.


Durga,

I think the documentation is not perfect.

If you are having trouble logging in with native Outlook clients (MAPI), 
and same trouble with Outlook Anywhere, then you are missing the 
OpenChange part.  This OpenChange talks to SOGo for storing Outlook 
data, and talks to users Outlook clients with the outlook/exchange 
specific microsoft protocols.


Read more here:
http://www.openchange.org/developers/relnotes/2.0-quadrant.html

See section "Benefits of SOGo collaboration".

And this tip:
"If you face strange issues from Microsoft Outlook, you might want to 
remove any data associated with the user from the SOGo server and 
recreate a Microsoft Outlook profile. To remove any data associated to a 
user, use the openchange_cleanup.py script distributed with sogo. The 
script can be found in |/usr/share/doc/sogo/| 
(|/usr/share/sogo-VERSION/| on |RHEL|). To reset a user, run the script 
as root: |python openchange_cleanup.py username|. See the usage output 
for additional options."


The current release notes May 2015:
http://www.openchange.org/developers/relnotes/2.3-vulcan.html

If you have an issue with openchange, then click New Issue on the 
openchange github.

https://github.com/openchange/openchange/issues

If you want an easy solution for outlook compatible email server, based 
on samba4, sogo and openchange, you could try the free zentyal community 
server, it manages the configuration files for you, so you don't have to 
learn how to set them manually.


Good luck. Post back your results.

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] SOGo installation with Apache2

2015-10-20 Thread Chris Coleman


What does the SOGo acronym stand for?

*OGo = O*pen*G*roupware.*o*rg
http://www.opengroupware.org/en/about/index.html

"MDlink GmbH, the original author of the OpenGroupware.org reference 
server, was founded as an Internet service provider (ISP) in Germany in 
1994. The company started development on the LSOffice application server 
in about 1996 to extend it's Internet offerings with a powerful 
collaboration platform usable over the Internet.


Some years later LSOffice was renamed to SKYRiX 3 and finally in 2000 a 
separate company, SKYRIX Software AG , was 
forked to concentrate on the further development of the product.


The SKYRiX Groupware Server is certainly one of the earliest GNU/Linux 
based groupware solutions (being now, in [2015], about [nineteen] years 
old).


The OpenGroupware.org source code initially includes the technology 
SKYRIX Software AG  has been developing for the 
future versions of the SKYRiX groupware server. *The source is mainly 
written in Objective-C and delivers language-neutral and scriptable 
functionality, including XML interfaces.*


/Differences between OpenGroupware.org and SKYRiX/

Starting with the launch of OpenGroupware.org, SKYRiX becomes an 
enterprise *distribution* of the OpenGroupware.org software. That is, 
SKYRiX is a maintained selection of stable parts of the OGo sources.
The SKYRiX distribution also includes some additional software which is 
not available as part of the OpenGroupware.org project, like:


 * Application Level Load Balancer (snsd)
 * Various other SKYRiX 5 User Interface Themes
 * Support for Oracle and Sybase databases
 * CTI Support for CSTA based telephone switches
 * Outlook Support for ZideStore"


*SOGo = S*calable*O*pen*G*roupware.*o*rg
http://www.scalableogo.org/
http://www.sogo.nu/
Developed today by inverse (Canada).
SOGo uses OpenChange to provide native Outlook/Exchange protocol 
compatibility, which is developed by Zentyal (Spain).





On 10/20/2015 11:25 AM, Michael Angelozzi wrote:

Hi All,

Firstly, what does SOGo stand for? I have googled intensively and only 
come up with Society Of  Gas Operators, which I am i sure it does not 
stand for.

My guess would be: Super Openexchange Groupware O???

So I am trying to install SOGo on Ubuntu server 14.04.

I installed Apache2 which used to serve up a very simple page (as you 
will see below it is now broken).

I installed mysql-server.
I installed Postfix with Dovecot using: sudo apt-get -y install 
mail-stack-delivery
I did not install OpenLDAP because at the moment there is just myself 
in my company. I would rather use a the MySQL database to store the users.


Then I installed SOGo, and I noticed towards the end of the 
installation Apache2 fell over:

Setting up sogo:amd64 (2.3.2-1) ...
apache2_invoke: Enable configuration SOGo
Action 'configtest' failed.
The Apache error log may have more information.
apache2_reload: Your configuration is broken. Not reloading Apache 2
 * Starting SOGo 
sogo [ OK ]*

*
I checked the Apache log and there was nothing helpful.

This is what is in the SOGo conf file:
sudo nano /etc/apache2/conf-enabled/SOGo.conf
shows:
Line 47: ProxyRequests Off
Line 48: SetEnv proxy-nokeepalive 1
Line 49: ProxyPreserveHost On

I ran the following command:
apachectl configtest

And got:
AH00526: Syntax error on line 47 of /etc/apache2/conf-enabled/SOGo.conf:
Invalid command 'ProxyRequests', perhaps misspelled or defined by a 
module not included in the server configuration

Action 'configtest' failed.
So Commented out line 47, because Off is the default value in the 
Apache documentation anyway.


Then I tried again and this time the same error but for line 49:
AH00526: Syntax error on line 49 of /etc/apache2/conf-enabled/SOGo.conf:
Invalid command 'ProxyPreserveHost', perhaps misspelled or defined by 
a module not included in the server configuration

Action 'configtest' failed.

I figured it would be unwise to just keep commenting out stuff.
Any suggestions?

The SOGO Installation Guide.pdf page 45 says:
/"The SOGo configuration for Apache is located in 
/etc/httpd/conf.d/SOGo.conf"/

But I dont have a file there?

Not sure how to proceed.

Kind Regards
Michael


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange

2015-10-16 Thread Chris Coleman




On 10/16/2015 9:18 AM, Martin Simovic wrote:



On 15 Oct 2015, at 18:13, Chris Coleman <ch...@espacenetworks.com 
<mailto:ch...@espacenetworks.com>> wrote:




On 10/15/2015 10:32 AM, Martin Simovic wrote:



On 14 Oct 2015, at 21:06, Chris Coleman <ch...@espacenetworks.com> 
wrote:


You can try:
sudo openchange_provision --standalone --ignore_already_exists


This command line switch seems to be unimplemented: 
openchange_provision: error: no such option: —ignore_already_exists


I am using openchange 3:2.4-zentyal6 package from inverse 
repository. Maybe the way to go is to delete 
the CN=ms-Exch-Access-Control-Map attribute directly from directory? 
I am going to find out the hard way ..


Regards
Martin.
Sorry, try --ignore-already-exists (instead of 
--ignore_already_exists), e.g.

sudo openchange_provision --standalone --ignore-already-exists


Yes, that works, Thanks. Now I get further but:

root@pdc:~# openchange_provision --standalone --ignore-already-exists
NOTE: This operation can take several minutes
[+] Step 1: Register Exchange OIDs
[+] Step 2: Add Exchange attributes to Samba schema
[+] Step 3: Add Exchange auxiliary classes to Samba schema
[+] Step 4: Add Exchange objectCategory to Samba schema
[+] Step 5: Add Exchange containers to Samba schema
[+] Step 6: Add Exchange *sub* containers to Samba schema
[+] Step 7: Add Exchange CfgProtocol subcontainers to Samba schema
[+] Step 8: Add Exchange mailGateway subcontainers to Samba schema
[+] Step 9: Add Exchange classes to Samba schema
[+] Step 10: Add possSuperior attributes to Exchange classes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_possSuperior.ldif

[+] Step 11: Extend existing Samba classes and attributes
No elements to add found in 
/usr/share/samba/setup/AD/oc_provision_schema_modify.ldif

[+] Step 12: Generic Exchange configuration objects
[+] Step 13: Exchange Organization objects
Error: "(64, 'structural objectClass msExchAdminGroup is not a valid 
child class for CN=Administrative Groups,CN=First 
Organization,CN=Microsoft 
Exchange,CN=Services,CN=Configuration,DC=example,DC=com')" when adding 
element:


And I continue stuck. Still unable to provision entirely or 
deprovision either.


Best Regards
Martin.



1. You could play around with it, try to manually deprovision everything 
(users, groups, organizations) before doing the openchange_provision.

sudo openchange_newuser --deprovision 
sudo openchange_group --delete 
sudo openchange_neworganization --deprovision 
sudo openchange_provision --standalone


2. And... would you kindly report this as a new issue on github and 
include all the details in the above post for javier to look over, 
because your "openchange_provision --standalone --ignore-already-exists" 
really should've worked, and if not, that's a bug.  At the very least, 
it should've told you a better error message, and explain to you what 
when wrong, what you need to do, and why.

https://github.com/openchange/openchange/issues/new


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Openchange creating distribution group

On 10/15/2015 3:43 PM, Gerald Brandt wrote:

On 2015-10-15 02:33 PM, Gerald Brandt wrote:

On 2015-10-15 12:37 PM, Chris Coleman wrote:

On 10/15/2015 11:37 AM, Gerald Brandt wrote:
If I create a distribution group using OpenChange, do standard IMAP
users also get access to that group?

I'm a bit confused on how tightly integrated everything is with
OpenChnage/SOGo/IMAP/SMTP, etc.

In creating a distribution list you are supposed to assign an email
address to it either explicitly or the system auto-assigns one. From
that point any email sent to that email address is forwarded to all
members of the distribution list. Try sending an email and see if it
works.

Also Zentyal which is built on openchange and sogo, supports
distribution lists, see here:
https://wiki.zentyal.org/wiki/En/4.1/OpenChange_%28Microsoft%28R%29_Exchange_Server_protocol_implementation%29

Hi,

I've managed to create a distribution group, with an email address,
but the mail bounces 'no valid user'.

Gerald

There's gotta be something I'm missing. It can't be this complex to
add users and distribution groups to openchnage. Does anyone else do it?

Gerald

Here is some more info on groups in sogo!

http://www.sogo.nu/nc/support/faq/article/how-are-groups-handled-in-sogo.html
"

From the version 1.0.2 of SOGo, groups are now supported. Groups *have*
to be defined in an LDAP server and *must* have an email address. They
can be used in SOGo when :

* defining ACLs on calendars and address books
* scheduling meetings

When either settings ACLs or scheduling a meeting, a resource (person,
group, room, etc.) has to be specified. Upon save, SOGo will lookup the
LDAP entry of that particular resource in order to detect if a group was
specified. To detect if a group was specified, SOGo will look at the
/objectClass/ attributes of the returned entry. If one of the
/objectClass/ attribute is equal to /group/, /groupOfNames/,
/groupOfUniqueNames/ or /posixGroup/, the entry is considered to be a group.

When scheduling a meeting with a group, SOGo will decompose the group as
soon as the event is saved. Groups decomposition consist of fetching the
members of the groups - replacing groups with their members in the
attendees list.

As an exemple, if you have a "management" group defined in your LDAP
server as :

dn: cn=management,ou=groups,dc=inverse,dc=ca
objectClass: top
objectClass: groupOfNames
cn: management
mail: managem...@inverse.ca
member: cn=bob,ou=people,dc=inverse,dc=ca
member: cn=alice,ou=people,dc=inverse,dc=ca

When you actually add "/managem...@inverse.ca/" in the attendee list
while creating an event, Bob and Alice will actually receive the
invitation and will be present in the attendee list.

Note that the groups support is a work in progress. Support for dynamic
groups needs to be added.

June 08 2009 16:12"

You should post a bug about creating distribution groups for sogo, on
command line with openchange commands, mail addresses expanding
incorrectly, with full details. It's a too essential of a feature for it
not to be working smoothly.

http://www.sogo.nu/bugs/my_view_page.php

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Openchange creating distribution group




On 10/15/2015 3:33 PM, Gerald Brandt wrote:



On 2015-10-15 12:37 PM, Chris Coleman wrote:

On 10/15/2015 11:37 AM, Gerald Brandt wrote:
If I create a distribution group using OpenChange, do standard IMAP 
users also get access to that group?


I'm a bit confused on how tightly integrated everything is with 
OpenChnage/SOGo/IMAP/SMTP, etc.




In creating a distribution list you are supposed to assign an email 
address to it either explicitly or the system auto-assigns one. From 
that point any email sent to that email address is forwarded to all 
members of the distribution list.  Try sending an email and see if it 
works.


Also Zentyal which is built on openchange and sogo, supports 
distribution lists, see here:
https://wiki.zentyal.org/wiki/En/4.1/OpenChange_%28Microsoft%28R%29_Exchange_Server_protocol_implementation%29 




Hi,

I've managed to create a distribution group, with an email address, 
but the mail bounces 'no valid user'.


Gerald

I would suggest to create a new Issue here, because it should work, and 
since not, either you've made a minor omission with the undocumented 
command line commands, or maybe it's a bug. Please post back your 
results to the list.

https://github.com/openchange/openchange/issues

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Documentation on OpenChange tools?




On 10/15/2015 1:13 PM, Gerald Brandt wrote:



On 2015-10-15 11:19 AM, Chris Coleman wrote:



On 10/15/2015 11:15 AM, Gerald Brandt wrote:

Hi,

Where would I find docs on the OpenChange tools (openchange_newuser, 
openchange_group, etc)?  I can't seem to find anything on the 
openchange site.


I understand I can user RSAT to do most of the management (except 
adding a new user, see my previous emails), but I'd still like info 
on the local tools.  I hate having to go to two different places to 
get work done.


Thanks,
Gerald


Gerald, all,

After some search engine, I believe there is no documentation online 
for these openchange command line tools!


Here is the list of them direct from the source:
https://github.com/openchange/openchange/tree/master/setup

openchange_group
openchange_migrate
openchange_neworganization
openchange_newuser
openchange_provision

To find the options I dug into the python source.

What I discovered is, you Invoke each command without options and it 
will print the help/usage.


-Chris



Hi,

The online help is slim at best.  For example, when creating a group, 
how do I differentiate between a security and a distribution group?  
Is it by adding the --mail address?


I dunno.

Gerald

From reading the comments in the source, I believe you're right about 
that, the mail attribute creates a distribution group.

https://github.com/openchange/openchange/blob/master/python/openchange/provision.py
Line 772
search for keyword "newgroup"

Who knows, maybe distribution groups failing to send mail to their 
members could be a known openchange bug/limitation. But, unsure about 
that, because Zentyal runs on openchange and supports distribution groups:

http://www.zentyal.org/server/

So, I highly recommend creating a github "issue" on openchange, with 
full details so the dev can take a look and give you his official answer.

https://github.com/openchange/openchange/issues/new


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange




On 10/15/2015 10:32 AM, Martin Simovic wrote:



On 14 Oct 2015, at 21:06, Chris Coleman <ch...@espacenetworks.com 
<mailto:ch...@espacenetworks.com>> wrote:


You can try:
sudo openchange_provision --standalone --ignore_already_exists


This command line switch seems to be unimplemented: 
openchange_provision: error: no such option: —ignore_already_exists


I am using openchange 3:2.4-zentyal6 package from inverse repository. 
Maybe the way to go is to delete the CN=ms-Exch-Access-Control-Map 
attribute directly from directory? I am going to find out the hard way ..


Regards
Martin.
Sorry, try --ignore-already-exists (instead of --ignore_already_exists), 
e.g.

sudo openchange_provision --standalone --ignore-already-exists


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Documentation on OpenChange tools?




On 10/15/2015 11:15 AM, Gerald Brandt wrote:

Hi,

Where would I find docs on the OpenChange tools (openchange_newuser, 
openchange_group, etc)?  I can't seem to find anything on the 
openchange site.


I understand I can user RSAT to do most of the management (except 
adding a new user, see my previous emails), but I'd still like info on 
the local tools.  I hate having to go to two different places to get 
work done.


Thanks,
Gerald


Gerald, all,

After some search engine, I believe there is no documentation online for 
these openchange command line tools!


Here is the list of them direct from the source:
https://github.com/openchange/openchange/tree/master/setup

openchange_group
openchange_migrate
openchange_neworganization
openchange_newuser
openchange_provision

To find the options I dug into the python source.

What I discovered is, you Invoke each command without options and it 
will print the help/usage.


-Chris

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Openchange creating distribution group


On 10/15/2015 11:37 AM, Gerald Brandt wrote:
If I create a distribution group using OpenChange, do standard IMAP 
users also get access to that group?


I'm a bit confused on how tightly integrated everything is with 
OpenChnage/SOGo/IMAP/SMTP, etc.




In creating a distribution list you are supposed to assign an email 
address to it either explicitly or the system auto-assigns one. From 
that point any email sent to that email address is forwarded to all 
members of the distribution list.  Try sending an email and see if it works.


Also Zentyal which is built on openchange and sogo, supports 
distribution lists, see here:

https://wiki.zentyal.org/wiki/En/4.1/OpenChange_%28Microsoft%28R%29_Exchange_Server_protocol_implementation%29

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange




On 10/14/2015 7:56 AM, Steve Ankeny wrote:

On 10/14/2015 12:25 AM, Chris Coleman wrote:
It appears that the openchange.org documentation page is showing an 
example of how to setup a zentyal server for an openchange developer 
to run code against the server, with python scripts included to help 
get it going for the tutorial. It seems in a different order but 
really all it means is you should do all the things in the sogo PDF 
setup document for openchange (native outlook client compatibility 
PDF) first, which initializes certain data inside the databases, so 
that their openchange developer server setup doesn't produce errors 
due to uninitialized data.


I'm stuck!  Running, 'sudo openchange_provision --standalone' FAILS

This is after I successfully ran 'sudo openchange_provision --deprovision'

It fails with the following errors --

adam@sogo:~$ sudo openchange_provision --standalone
NOTE: This operation can take several minutes
[+] Step 1: Register Exchange OIDs
[+] Step 2: Add Exchange attributes to Samba schema
Error: "(68, 'Entry 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com 
*already exists*')" when adding element:

#
# ms-Exch-Access-Control-Map
# Contains the mapping for the access controls.
#
dn: 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com

objectClass: top
objectClass: attributeSchema
cn: ms-Exch-Access-Control-Map
distinguishedName: 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com

attributeID: 1.2.840.113556.1.4.7000.102.64
attributeSyntax: 2.5.5.12
isSingleValued: TRUE
showInAdvancedViewOnly: TRUE
adminDisplayName: ms-Exch-Access-Control-Map
adminDescription: ms-Exch-Access-Control-Map
oMSyntax: 64
searchFlags: 0
lDAPDisplayName: msExchAccessControlMap
name: ms-Exch-Access-Control-Map
#schemaIDGUID: 8ff54464-b093-11d2-aa06-00c04f8eedd8
isMemberOfPartialAttributeSet: FALSE
objectCategory: 
CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=smbdomain,DC=com


[!] error while provisioning the Exchange schema classes (68): Entry 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com 
*already exists*

Traceback (most recent call last):
  File "/usr/sbin/openchange_provision", line 115, in 
*ignore_already_exists*=opts.ignore_already_exists)
  File "/usr/lib/python2.7/dist-packages/openchange/provision.py", 
line 1062, in provision

*ignore_already_exists*=ignore_already_exists)
  File "/usr/lib/python2.7/dist-packages/openchange/provision.py", 
line 470, in install_schemas

*ignore_already_exists*=ignore_already_exists)
  File "/usr/lib/python2.7/dist-packages/openchange/provision.py", 
line 251, in provision_schema

ldif_apply_method(el, ['relax:0'])
  File "/usr/lib/python2.7/dist-packages/samba/__init__.py", line 224, 
in add_ldif

self.add(msg, controls)
_*ldb.LdbError*: (68, 'Entry 
CN=ms-Exch-Access-Control-Map,CN=Schema,CN=Configuration,DC=smbdomain,DC=com 
*already exists*')

adam@sogo:~$

Are there any switches I can use with the command to provision that 
EXCEPTS these errors?


And, where can I find this stuff on my own?  Documentation is SCARCE 
with OpenChange, IMO


Thanks for all your help!  I know it's not your responsibility but 
it's appreciated.




Steve
I provided you that previous tip by reading the openchange source and 
determining what commands and options it really needed from you at that 
point.
Try posting this issue at the following github repo, with full details, 
this is the developer of openchange:

https://github.com/openchange/openchange
Click Issues / New Issue.
Paste in this thread.
And post back your results!
Agreed that openchange and sogo documentation is less clear and concise 
than it should be for the end user to be able to quickly and simply 
accomplish all the usual administrative setup tasks.  There seems to be 
no documentation at all on the command line commands.
The openchange_provision error messages, and all the error messages, 
could/should be more helpful in terms of explaining what you need to do, 
why, and how.

-Chris

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange




On 10/14/2015 7:58 AM, Steve Ankeny wrote:

On 10/14/2015 12:25 AM, Chris Coleman wrote:
It appears that the openchange.org documentation page is showing an 
example of how to setup a zentyal server for an openchange developer 
to run code against the server, with  python scripts included to help 
get it going for the tutorial.  It seems in a different order but 
really all it means is you should do all the things in the sogo PDF 
setup document for openchange (native outlook client compatibility 
PDF) first, which initializes certain data inside the databases, so 
that their openchange developer server setup doesn't produce errors 
due to uninitialized data.


forgot to say, I am considering removing ALL of OpenChange (maybe even 
purging) and starting again


Would this be the best way around my problem?



You can try:
sudo openchange_provision --standalone --ignore_already_exists

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange




On 10/13/2015 3:37 PM, Steve Ankeny wrote:

On 10/13/2015 02:52 PM, Chris Coleman wrote:



On 10/13/2015 1:55 PM, Steve Ankeny wrote:

On 10/13/2015 07:12 AM, Steve Ankeny wrote:

On 10/12/2015 05:36 PM, Chris Coleman wrote:



On 10/12/2015 12:20 PM, Steve Ankeny wrote:

On 10/12/2015 10:28 AM, Chris Coleman wrote:
You have to deactivate each of your 8 user mailboxes before the 
command to deprovision the server will work.
Try to devprovision the users with the commands shown at the 
bottom of this page:
http://www.openchange.org/documentation/howto/zentyal_developer.html 



on the site listed above, I see the following --

"You MUST create the OpenChange user and log into its mailbox once 
with Outlook prior following this guide."


I've never seen documentation telling me to login with Outlook using 
the 'openchange-user' account.  I've tested the account in MySQL by 
logging in as 'openchange-user' but never using Outlook, Dovecot, etc.


Could this be why so many are having issues with OpenChange? What is 
the purpose of this login?



Yes, it's probable that using Outlook, as documented, to do a first 
login as "openchange-user", will create/initialize some basic 
required data, which will be needed for the proper running openchange.


You should try and do that first login as openchange-user, and see if 
the issues with OpenChange are resolved, and post your results back 
to the list.



will do . . .

I'm in the midst of provisioning OpenChange (after hours)

Am I reading it correctly, "Login as 'openchange-user' with Outlook 
AFTER following the guide?"


In other words, speaking the language of the SOGo Outlook 
Configuration guide --


(1) install the OpenChange packages
(2) create the 'openchange-user'
(3) provision the server as '--standalone' and '--openchangedb 
--openchangedb-uri', etc.
(4) THEN login as 'openchange-user' FIRST before attempting to 
configure any other user


There's a typo in the instructions on that page if I'm reading it right.


It appears that the openchange.org documentation page is showing an 
example of how to setup a zentyal server for an openchange developer to 
run code against the server, with  python scripts included to help get 
it going for the tutorial.  It seems in a different order but really all 
it means is you should do all the things in the sogo PDF setup document 
for openchange (native outlook client compatibility PDF) first, which 
initializes certain data inside the databases, so that their openchange 
developer server setup doesn't produce errors due to uninitialized data.


--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Deprovision openchange