[SOGo] How to disable X-Forward header?
Hi, when sending e-mails SOGo writes the IP address of the user in the e-mail header: X-Forward: IP We have to disable it for privacy reasons. Is there a possibility within SOGo? Thanks, Frank -- Frank Richter, Chemnitz University of Technology, Germany
Re: [SOGo] terminating app, vMem size limit …
Am 06.02.24 um 17:09 schrieb Christian Mack (christian.m...@uni-konstanz.de): Hello Am 06.02.24 um 13:41 schrieb Frank Richter (frank.rich...@hrz.tu-chemnitz.de): Hi, we’ve set SxVMemLimit = 768; in /etc/sogo/sogo.conf But it seems that this big value isn’t sufficient, we see this several times a day in sogo.log: Feb 06 04:47:06 sogod [1280936]: 2003:f3:1708:b0ca:f955:2664:d05:4987 "GET /SOGo/so/dadel/Mail/0/view HTTP/1.1" 200 427415/0 1.657 - - 39M - 20 Feb 06 04:47:06 sogod [1280936]: |SOGo| terminating app, vMem size limit (768 MB) has been reached (currently 771 MB) ax_Main;" ^ [...] Feb 06 04:47:06 sogod [1280926]: <0x0x5606e7615030[WOWatchDogChild]> child 1280936 exited What is advisable? We don’t like to raise SxVMemLimit even more … They will always happen. But such worker/child termination is only happening *after* a request was processed. Therefore they are usually harmless. The only drawback is the time needed to start a new worker/child. While this is happening, you have less worker available. Therefore you only have to keep an eye on how often this happens. As long as it only happens a couple of times per hour, you are save. Thanks, Christian, for clarifying this. I’ll look into memory consumption of the SOGo processes, and maybe revert to 512 MB. BTW: We use SxVMemLimit = 512; with 350 worker With approx. 20,000 accounts => approx. 1.2 million requests per day => approx. 600 of the above terminating errors per day We have 9,500 users , use 2 servers with each 16 GB RAM and 50 SOGo workers, ~ 500,000 requests per work day on each server. Frank -- Frank Richter, Chemnitz University of Technology, Germany
[SOGo] terminating app, vMem size limit …
Hi, we’ve set SxVMemLimit = 768; in /etc/sogo/sogo.conf But it seems that this big value isn’t sufficient, we see this several times a day in sogo.log: Feb 06 04:47:06 sogod [1280936]: 2003:f3:1708:b0ca:f955:2664:d05:4987 "GET /SOGo/so/dadel/Mail/0/view HTTP/1.1" 200 427415/0 1.657 - - 39M - 20 Feb 06 04:47:06 sogod [1280936]: |SOGo| terminating app, vMem size limit (768 MB) has been reached (currently 771 MB) ax_Main;" ^ :1: element span: validity error : ID MathJax-Span-32 already defined > ^ :1: element span: validity error : ID MathJax-Span-33 already defined " id="MathJax-Span-33" style="font-family: MathJax_Main; padding-left: 0.222em;" ^ :1: element span: validity error : ID MathJax-Span-34 already defined 4" style="font-family: MathJax_Math; font-style: italic; padding-left: 0.222em;" ^ :1: element span: validity error : ID MathJax-Span-35 already defined d:1: element span: validity error : ID MathJax-Span-36 already defined ="font-family: MathJax_Main;">(:1: element span: validity error : ID MathJax-Span-37 already defined "mi" id="MathJax-Span-37" style="font-family: MathJax_Math; font-style: italic;" ^ :1: element span: validity error : ID MathJax-Span-38 already defined s="mn" id="MathJax-Span-38" style="font-size: 70.7%; font-family: MathJax_Main;" ^ :1: element span: validity error : ID MathJax-Span-39 already defined > ^ :1: element span: validity error : ID MathJax-Span-40 already defined :1: element span: validity error : ID MathJax-Span-41 already defined "mi" id="MathJax-Span-41" style="font-family: MathJax_Math; font-style: italic;" ^ :1: element span: validity error : ID MathJax-Element-6-Frame already defined t;/mimo stretchy=false)/mo/math" role="presentation" ^ :1: element span: validity error : ID MathJax-Element-7-Frame already defined org/1998/Math/MathMLmix/mi/math" role="presentation" ^ 2024-02-06 04:47:06.864 sogod[1280926:1280926] INFO(-[NGActiveSocket isAlive]) poll(): fd=23 revents=0x0011) Feb 06 04:47:06 sogod [1280926]: <0x0x5606e7615030[WOWatchDogChild]> child 1280936 exited What is advisable? We don’t like to raise SxVMemLimit even more … Thanks Frank -- Frank Richter, Chemnitz University of Technology, Germany
[SOGo] Mail: Display of Content-Type: text/calendar configurable?
Hello, is it possible to configure what data ist shown for e-mail parts Content-Type: text/calendar? Actually we'd like to have LOCATION shown in the e-mail view as well. Regards, Frank Richter -- Frank Richter, Chemnitz University of Technology, Germany
Re: [SOGo] Question regarding SOGoDisableSharingAnyAuthUser
Am 20.12.23 um 13:50 schrieb qhivert (qhiv...@alinto.eu): You do understand the documentation correctly. Good! I’ve just test it and with 5.9.1 all is ok, but with the nightly it seems to have a problem with the autocompletion unrelated to this parameter. What version are you using? Ah, I checked it with our test server who runs the nightly version. With version 5.9.1. ist works. Great, that will save us from users sharing their mailbox to all … Do you see any error in the console by the way? With nightly: No errors, just repeating https://server.domain/SOGo/so/login/usersSearch?search=searchterm Thanks, Frank *From:*users-requ...@sogo.nu *On Behalf Of *Frank Richter *Sent:* mercredi 20 décembre 2023 10:34 *To:* users@sogo.nu *Subject:* [SOGo] Question regarding SOGoDisableSharingAnyAuthUser Hello, we’d like to disable the possibility for users to share their mailfolders to all users. That means users should not see the option „Any Authenticated User“ under Sharing … . I hoped that the config option SOGoDisableSharingAnyAuthUser = (Mail); would do it. And yes, the option „Any Authenticated User“ isn't shown, but then sharing at all is disabled, the lookup for a user doesn’t work any longer. Is this a bug or do I misinterpret the explanation of this option: List of modules where sharing with any authenticated user option should be disabled, for example (Mail, Calendar). Modules can be Mail, Contacts and Calendar. Default value empty list (sharing enabled for everybody). -- Frank Richter, Chemnitz University of Technology, Germany
[SOGo] Question regarding SOGoDisableSharingAnyAuthUser
Hello, we’d like to disable the possibility for users to share their mailfolders to all users. That means users should not see the option „Any Authenticated User“ under Sharing … . I hoped that the config option SOGoDisableSharingAnyAuthUser = (Mail); would do it. And yes, the option „Any Authenticated User“ isn't shown, but then sharing at all is disabled, the lookup for a user doesn’t work any longer. Is this a bug or do I misinterpret the explanation of this option: List of modules where sharing with any authenticated user option should be disabled, for example (Mail, Calendar). Modules can be Mail, Contacts and Calendar. Default value empty list (sharing enabled for everybody). Regards and thanks, Frank -- Frank Richter, Chemnitz University of Technology, Germany
Re: [SOGo] Sogo-tool documentation is available
Am 02.11.23 um 17:30 schrieb qhivert (qhiv...@alinto.eu): The documentation of sogo-tool is finally available in our website here -> https://www.sogo.nu/files/docs/SOGoInstallationGuide.html#_using_sogo_tool You will find more details of each command and how to use them. The command sogo-tool alone will also print a link to this documentation. Thanks, Quentin! It’s very useful for me. I’d also find it useful to eleminate the dangerous bevaviour in sogo-tool expire-sessions not_a_number # remove all current session This should really print a usage information instead of removing all … Shall I open a featere enhancement for this? Regards, Frank -- Frank Richter, Chemnitz University of Technology, Germany
[SOGo] Option to use a fixed font for text/plain e-mails?
Hello, is the an option (per user?) to display the content of text/plain e-mails in a fixed font? A wish of some of our users … Thanks, Frank -- Frank Richter, Chemnitz University of Technology, Germany
[SOGo] Multiple mail identities – allow setting the name?
Hello, our SOGo users should be able to set other e-mail identities this way: Name: chose any name freely – here the user's name from LDAP is used, not changeable E-mail address: chose from a list (given in LDAP attribute) – this works Signature: chose freely – this works So basically, how do I allow users to change the name for an identity? I'd like to avoid SOGoMailCustomFromEnabled = YES; because this allow any e-mail address as sender. Thanks, Frank -- Frank Richter Computing Services, Chemnitz University of Technolgy, Germany smime.p7s Description: Kryptografische S/MIME-Signatur
Re: [SOGo] Templates
Am 04.08.23 um 09:37 schrieb qhivert (qhiv...@alinto.eu): One an email is in your template folder. Open this folder, and select the mail you want to use. You will have a special button to use this mail as a draft. Thnaks, that looks useful. But I don’t find this „Create new draft with this template“, unfortunately … Thanks, Frank *From:*users-requ...@sogo.nu users-requ...@sogo.nu *On Behalf Of *Frank Richter *Sent:* jeudi 3 août 2023 13:50 *To:* users@sogo.nu *Subject:* Re: [SOGo] Templates Am 27.07.23 um 12:54 schrieb "Simon Wilson" (si...@simonandkate.net): From a folder's three-dot menu, select to use for Templates: On Saturday, July 22, 2023 02:57 AEST, "Hanns Mattes" (ha...@hannsmattes.de) <mailto:users@sogo.nu> wrote: Hi, how do I tell sogo, which IMAP-folder is used for templates? Might be obvious, but I don't get it. Can someone tell me, how do Templates work SOGo? I have an e-mail in the Template folder, now how it can be used? In Draft folder I see the edit icon (pencil) to continue editing an e-mail. But nothing in the Template folder … -- Frank Richter, Chemnitz University of Technology, Germany
[SOGo] How to terminate just a single user session?
Hello, is there a possibility to terminate a single user session? I noticed sogo-tool expire-sessions … (and painfully detected, that sogo-tool expire-sessions -h expires all users immediately). But in some cases I need to terminate just one session (i .e. account abuse). Grepping logfiles / database to achieve this would be no problem :-) Thanks Frank -- Frank Richter, Chemnitz University of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
Re: [SOGo] Templates
Am 27.07.23 um 12:54 schrieb "Simon Wilson" (si...@simonandkate.net): From a folder's three-dot menu, select to use for Templates: On Saturday, July 22, 2023 02:57 AEST, "Hanns Mattes" (ha...@hannsmattes.de) wrote: Hi, how do I tell sogo, which IMAP-folder is used for templates? Might be obvious, but I don't get it. Can someone tell me, how do Templates work SOGo? I have an e-mail in the Template folder, now how it can be used? In Draft folder I see the edit icon (pencil) to continue editing an e-mail. But nothing in the Template folder … Thanks Frank -- Frank Richter, Chemnitz University of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
Re: [SOGo] Setting Vacation with sogo-tool: filter gets wrong fileinto IMAP folder separator
Am 28.07.23 um 13:49 schrieb Frank Richter (frank.rich...@hrz.tu-chemnitz.de):
I'd like to change vacation settings for users with sogo-tool. Basically I do
sogo-tool user-preferences get defaults $user Vacation > file.json
edit file.json
sogo-tool user-preferences set defaults $user -p sieve.cred Vacation -f
file.json
The setting for vacation are written to SOGo database and sieve filter on
mail server are ok.
But if the user has filter rules with fileinto actions the folder is
written with '/' as folder separator. Our IMAP server has '.' as
separator, so '/' is wrong.
Example:
Sieve filter exported by SOGo Webmail – all right:
…
if allof (header :contains "subject" "…") {
fileinto "INBOX.Junk";
}
…
After changing with: sogo-tool user-preferences set defaults $user -p
sieve.cred Vacation -f file.json
…
if allof (header :contains "subject" "…") {
fileinto "INBOX/Junk";
}
…
Do I miss something … or is it a bug?
Yes, I missed something :-) I think I found the cause:
sogo-tool (or a function call inside) tries to determine the folder
separator by logging in to the IMAP server. My sieve admin, defined in
sieve.cred, wasn't able to log into the IMAP server, just the sieve server.
So the folder separator couldn't be examnied and the defaul '/' was used.
2 possible solutions:
1. Make sieve admin an admin in IMAP as well – or –
2. Set in sogo.conf: NGImap4ConnectionStringSeparator = ".";
I tend to 2.
Thanks
Frank
--
Frank Richter, Chemnitz University of Technolgy, Germany
smime.p7s
Description: S/MIME Cryptographic Signature
[SOGo] Setting Vacation with sogo-tool: filter gets wrong fileinto IMAP folder separator
Hello,
I'd like to change vacation settings for users with sogo-tool. Basically
I do
sogo-tool user-preferences get defaults $user Vacation > file.json
edit file.json
sogo-tool user-preferences set defaults $user -p sieve.cred Vacation -f
file.json
The setting for vacation are written to SOGo database and sieve filter
on mail server are ok.
But if the user has filter rules with fileinto actions the folder is
written with '/' as folder separator. Our IMAP server has '.' as
separator, so '/' is wrong.
Example:
Sieve filter exported by SOGo Webmail – all right:
…
if allof (header :contains "subject" "…") {
fileinto "INBOX.Junk";
}
…
After changing with: sogo-tool user-preferences set defaults $user -p
sieve.cred Vacation -f file.json
…
if allof (header :contains "subject" "…") {
fileinto "INBOX/Junk";
}
…
Do I miss something … or is it a bug?
Thanks
Frank
--
Frank Richter, Chemnitz University of Technology, Germany
smime.p7s
Description: S/MIME Cryptographic Signature
Re: [SOGo] Different authentication for CalDAV/CardDAV accesses possible?
Am 28.06.23 um 15:02 schrieb Kees van Vloten (keesvanvlo...@gmail.com): On 28-06-2023 13:13, Frank Richter (frank.rich...@hrz.tu-chemnitz.de) wrote: Hello, for Web access to our SOGo server we use LDAP authentication. This works for CalDAV/CardDAV as well. We’d like to have another authentication method for CalDAV/CardDAV: same username, but different password (as users store those passwords in their apps, we’d like to have different password just for DAV accesses). Any hints how to achieve this are welcome. We’ve Apache as reverse proxy in front of SOGo. I have authentication delegated to the apache reverse proxy. With this I am able to achieve exactly what you describe but for sogo-webmail and sogo-activesync. I have not tried to make caldav/carddav available for mobile devices since activesync includes that information. But I see no reason why apache cannot do this for *dav. Thanks! And indeed, https://www.sogo.nu/support/faq/how-to-configure-apache-as-frontend.html contains the configuration for this already. Just one additional question: When you authenticate users for sogo-webmail in Apache, how do you log in users to the IMAP server then? Frank -- Frank Richter Chemnitz University of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
Re: [SOGo] Timeout to fetch web calendars configurable?
Am 28.06.23 um 15:12 schrieb smizr...@alinto.eu (smizr...@alinto.eu): We have increase the timeout in the latests nightly build (https://bugs.sogo.nu/view.php?id=5781) Can you try it ? Thanks, it works now. I also read your remark: Be careful, this will lock process until download or timeout is complete. You may need to adjust WOWorkerCount and WOListenQueueSize Frank Le Mercredi, Juin 28, 2023 13:06 CEST, "Frank Richter" (frank.rich...@hrz.tu-chemnitz.de) a écrit: Hello, > If you are using Apache in front, maybe you can try to increase timeout as > explained here : > https://serverfault.com/questions/948312/apache-reverse-proxy-timeout-in-60-seconds > <https://serverfault.com/questions/948312/apache-reverse-proxy-timeout-in-60-seconds> We use Apache in front, but this timeout occurs when SOGo fetches the calendar from the CalDAV server. So it’s IMHO a timeout in SOGo. We now take a look why the CalDAV server needs more than 20 secs to deliver the data to SOGo. Frank > > Le Vendredi, Juin 23, 2023 09:42 CEST, "Frank Richter" > (frank.rich...@hrz.tu-chemnitz.de) a écrit: >> Hello, >> >> when users subscribe to web calendars (CalDAV) we see timeouts, when the >> CalDAV server answers too slow: >> >> Jun 23 09:27:11 sogod [2125260]: >> <0x5574f1f944d0[SOGoWebAppointmentFolder]:206DCC-64954980-19-3E98F2C0> Load >> web calendar https://….tu-chemnitz.de/users/…/calendar/ (401) >> Jun 23 09:27:39 sogod [2125260]: [ERROR] >> <0x5574f190c590[SOGoWebAppointmentFolder]:206DCC-64954980-19-3E98F2C0> CURL >> error while accessing https://….tu-chemnitz.de/users/…/calendar/ (28): >> Operation timed out after 2 milliseconds with 229376 bytes received >> >> Is this timeout value configurable in SOGo? -- Frank Richter Chemnitz University of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
[SOGo] Different authentication for CalDAV/CardDAV accesses possible?
Hello, for Web access to our SOGo server we use LDAP authentication. This works for CalDAV/CardDAV as well. We’d like to have another authentication method for CalDAV/CardDAV: same username, but different password (as users store those passwords in their apps, we’d like to have different password just for DAV accesses). Any hints how to achieve this are welcome. We’ve Apache as reverse proxy in front of SOGo. Thanks Frank -- Frank Richter Facharbeitsgruppe Datenkommunikation Universitätsrechenzentrum Technische Universität Chemnitz Straße der Nationen 62 | R. B302A 09111 Chemnitz Germany Tel: +49 371 531 31879 frank.rich...@hrz.tu-chemnitz.de www.tu-chemnitz.de/urz smime.p7s Description: S/MIME Cryptographic Signature
Re: [SOGo] Timeout to fetch web calendars configurable?
Hello, If you are using Apache in front, maybe you can try to increase timeout as explained here : https://serverfault.com/questions/948312/apache-reverse-proxy-timeout-in-60-seconds <https://serverfault.com/questions/948312/apache-reverse-proxy-timeout-in-60-seconds> We use Apache in front, but this timeout occurs when SOGo fetches the calendar from the CalDAV server. So it’s IMHO a timeout in SOGo. We now take a look why the CalDAV server needs more than 20 secs to deliver the data to SOGo. Frank Le Vendredi, Juin 23, 2023 09:42 CEST, "Frank Richter" (frank.rich...@hrz.tu-chemnitz.de) a écrit: Hello, when users subscribe to web calendars (CalDAV) we see timeouts, when the CalDAV server answers too slow: Jun 23 09:27:11 sogod [2125260]: <0x5574f1f944d0[SOGoWebAppointmentFolder]:206DCC-64954980-19-3E98F2C0> Load web calendar https://….tu-chemnitz.de/users/…/calendar/ (401) Jun 23 09:27:39 sogod [2125260]: [ERROR] <0x5574f190c590[SOGoWebAppointmentFolder]:206DCC-64954980-19-3E98F2C0> CURL error while accessing https://….tu-chemnitz.de/users/…/calendar/ (28): Operation timed out after 2 milliseconds with 229376 bytes received Is this timeout value configurable in SOGo? -- Frank Richter Chemnitz University of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
[SOGo] Timeout to fetch web calendars configurable?
Hello, when users subscribe to web calendars (CalDAV) we see timeouts, when the CalDAV server answers too slow: Jun 23 09:27:11 sogod [2125260]: <0x5574f1f944d0[SOGoWebAppointmentFolder]:206DCC-64954980-19-3E98F2C0> Load web calendar https://….tu-chemnitz.de/users/…/calendar/ (401) Jun 23 09:27:39 sogod [2125260]: [ERROR] <0x5574f190c590[SOGoWebAppointmentFolder]:206DCC-64954980-19-3E98F2C0> CURL error while accessing https://….tu-chemnitz.de/users/…/calendar/ (28): Operation timed out after 2 milliseconds with 229376 bytes received Is this timeout value configurable in SOGo? Thanks, Frank -- Frank Richter Chemnitz University of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
[SOGo] Migration from Horde to SOGo – any hints?
Hello, we're migrating our users from Horde to SOGo. Of course this can be done by the user. For addressbooks and calendar entries it is easy, for Sieve filters or other e-mail settings this is more complicated. So a tool support would be nice. I’ve seen https://github.com/Alinto/sogo/tree/master/Migration/Horde Are there any other tools available? Any hints are welcome. Thanks in advance, Frank -- Frank Richter Chemnitz Univerity of Technology, Germany smime.p7s Description: S/MIME Cryptographic Signature
