Re: [SOGo] Synchronisation of LDAP addressbooks

[Peter]

Thanks for this advise.
We've done several tests - it seems that the problem comes from iPhone 
version of ActiveSync client as we have no problems on other devices. 
Anyway, we've disabled the huge address book for the moment.


Peter


On 06/23/2016 15:59, Christian Mack (christian.m...@uni-konstanz.de) wrote:

Hello

Am 22.06.2016 um 11:19 schrieb Peter (pe...@reseaunance.com):

We are using Sogo as a part of iRedMail install, based on OpenLDAP.
We have three different LDAP addressbooks configured in Sogo (default
GAL and two 'custom' LDAP queries).
Three addressbooks are visible in Sogo Web interface, we can search
contacts inside and it works well.
Our problem is that one of these addressbooks is very huge (10+
records), so we don't want to share it on CardDAV (neither on
ActiveSync). Remote users should only access it using LDAPS direct
queries from their mail clients or using Web interface of Sogo. Is there
any way to disable CardDAV/ActiveSync sharing of LDAP addressbook?


You can set
listRequiresDot = YES;
in your SOGoUserSources (which is the default).
With that they will not be synchronized via cardDAV.
You only can search within them.

We use that and have 18000+ accounts in it.


Kind regards,
Christian Mack



--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Multi domain sql configuration and strange behavior

[Vincent Sneyers]

Hi everybody,


I'm using Sogo for two month now and it' working well beside the multi 
domain which is making me crazy.
To explain it quickly, they are 3 domains hosted on the same server with 
a mysql backend.
The first domain two are able to login/logout. But after a few try, I 
can see in the address book that contact from an other domain is suggested.
The third (and also the fourth) are having more difficulties: after a 
few login/logout, I can't login anymore.


Even a sogo-tool restore doesn't seems to find the user back, after some 
times it may works again.

sogo-tool restore -f ALL . j...@domain3.org
<0x0x28eff00[SOGoCache]> Cache cleanup interval set every 300.00 seconds
<0x0x28eff00[SOGoCache]> Using host(s) '127.0.0.1' as server(s)
2016-06-24 13:19:18.488 sogo-tool[2135] user 'j...@domain3.org' not found

Does anybody is having an idea? I've checked the sogo config many times, 
updated yesterday to version 3.1.3-1, disabled memcached, changed 
password for the users, i'm still stucked.


Here are the details:

Log detail after  a failed login

Jun 24 13:21:32 sogod [885]: 
<0x0x7ff004ab7d60[SOGoActiveSyncDispatcher]> Sleeping 25 seconds while 
detecting changes in Ping...
Jun 24 13:21:37 sogod [885]: 
<0x0x7ff004ab7d60[SOGoActiveSyncDispatcher]> Sleeping 20 seconds while 
detecting changes in Ping...
Jun 24 13:21:42 sogod [885]: 
<0x0x7ff004ab7d60[SOGoActiveSyncDispatcher]> Sleeping 15 seconds while 
detecting changes in Ping...
2016-06-24 13:21:44.996 sogod[886] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector objectForKey: on NSNull !
2016-06-24 13:21:44.997 sogod[886] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector objectForKey: on NSNull !
Jun 24 13:21:45 sogod [886]: SOGoRootPage Login from '109.134.5.125' for 
user 'j...@domain3.org' might not have worked - password policy: 65535  
grace: -1  expire: -1  boun$


Log detail after a failed login (different answer: login succesfully 
then bad password)

-
2016-06-24 13:25:27.058 sogod[2337] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector objectForKey: on NSNull !
2016-06-24 13:25:27.059 sogod[2337] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector objectForKey: on NSNull !
2016-06-24 13:25:27.061 sogod[2337] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector setObject:forKey: on NSNull !

2016-06-24 13:25:27.061 sogod[2337]   didn't set return value for type 'v'
Jun 24 13:25:27 sogod [2337]: SOGoRootPage successful login from 
'109.134.5.125' for user 'j...@domain3.org' - expire = -1  grace = -1
Jun 24 13:25:27 sogod [2337]: 109.134.5.125 "POST /SOGo/connect 
HTTP/1.1" 200 27/80 0.019 - - 0
2016-06-24 13:25:27.105 sogod[2337] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector objectForKey: on NSNull !
2016-06-24 13:25:27.107 sogod[2337] ERROR(-[NSNull(misc) 
forwardInvocation:]): called selector objectForKey: on NSNull !
Jun 24 13:25:27 sogod [2337]: <0x0x7fad9379a750[SOGoWebAuthenticator]> 
tried wrong password for user 'blablabla$
Jun 24 13:25:27 sogod [2337]: 109.134.5.125 "GET 
/SOGo/so/SOGo/j...@domain3.org HTTP/1.1" 200 7633/0 0.039 24599 68% 1M




Multidomain related config in the sogo.conf
--
   SOGoEnableDomainBasedUID = YES;

domains = {
   domain1.be = {
   SOGoMailDomain = domain1.be;
   SOGoDraftsFolderName = Drafts;
   SOGoJunkFolderName = Spam;
   SOGoUserSources = (
{
   canAuthenticate = YES;
   displayName = "Utilisateurs domain1.be";
   id = users1;
   isAddressBook = YES;
   type = sql;
   userPasswordAlgorithm = sha512;
   LoginFieldNames = ( "c_name" );
   viewURL 
="mysql://sogo:password@127.0.0.1:3306/vimbadmin/sogo_users";

   IMAPLoginFieldName = "mail";
DomainFieldName = "domain";
}
);
   };
   domain2.be = {
   SOGoMailDomain = domain2.be;
   SOGoDraftsFolderName = Drafts;
   SOGoJunkFolderName = Spam;
   SOGoUserSources = (
   {
canAuthenticate = YES;
   displayName = "Utilisateurs domain2.be";
   id = users2;
  isAddressBook = YES;
   type = sql;
   userPasswordAlgorithm = sha512;
   LoginFieldNames = ( "c_name" );
   viewURL 
="mysql://sogo:password@127.0.0.1:3306/vimbadmin/sogo_users";

   IMAPLoginFieldName = "mail";
   DomainFieldName = 

Re: [SOGo] confidential appointments

["sg gs"]

hello,

 

i guess caldav/carddav/.. suffer from the same issue and i was told this is a weakness, deigned into the rfc. the implementaion is correct with respect to this rfc. as this might be a show stopper at our site (ok, i could teach users. but this is not really an option because users tend to forget - the higher in the hierarchie, the ealier and the higher the risk).

 

if there is the  option to declare an object private/confidential, the meaning of such flags should be respected and this should be done by the server.

 

may i suggest: whenever an object is requested, check the object for private/confidential flags and modify the object (ical,ics) in the same way the web client does it after the sharing permissions have been merged but before it will be sent to the requester.

 

yes i know, other systems do not respect these flags as well, but why not have a better system?

 

thanks for your attention

 

regards, g.

 

 

Sent: Thursday, June 23, 2016 at 2:55 PM
From: "\"Ralf Cirksena\" (c...@holmco.de)" 
To: "Ian McMichael" 
Subject: Re: [SOGo] confidential appointments

On Thu, Jun 23, 2016 at 01:33:05PM +0100 you wrote:

> It is here. We've been running v3 since its initial release and I
> have never experienced any different behaviour.

Bad.

> The appointments are correctly flagged as confidential (if you
> examine the XML sent to the client) but I believe this should be
> handled server-side (like it is with CalDAV) as I have yet to find a
> client that honours this! It is also much safer if data never
> intended for a client device is kept centrally and never distributed
> to it...

Fully agree. Why doesn't Inverse fix that? It should not be rocket
science.

MS-Outlook seems to handle that correct client-side. But leaking data
will be misused some day...


Greetings
--
R. Cirksena
--
users@sogo.nu
https://inverse.ca/sogo/lists



-- users@sogo.nuhttps://inverse.ca/sogo/lists

[SOGo] Global Address book via Carddav?

[Gerald Brandt]

Hi,

Is the Global Address Book exposed via Carddav or some other method? My 
user on Outlook, using Outlook Caldav Synchronizer would love to get 
access to it.


Gerald

--
Gerald Brandt, IT Manager
ERLPhase Power Technologies Ltd., 74 Scurfield Blvd., Winnipeg, MB R3Y 1G4
Tel: (204) 477-0591 x276, Fax (204) 478-1697
Email: g...@erlphase.com, Web: www.erlphase.com

--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] BTS activities for Friday, June 24 2016

[SOGo reporter]

Title: BTS activities for Friday, June 24 2016





  
BTS Activities

  Home page: http://www.sogo.nu/bugs
  Project: SOGo
  For the period covering: Friday, June 24 2016

  
  
idlast updatestatus (resolution)categorysummary
	
	
	  
	
3732
	2016-06-24 14:46:40
	updated (open)
	Backend Address Book
	Delete contact with CardDAV Server
	
	  
	
3734
	2016-06-24 18:35:09
	updated (open)
	Web Mail
	Drag & Drop Emails to Folders
	
	  
	
3745
	2016-06-24 03:34:25
	updated (open)
	Web Mail
	Webmail crash with several IMAP accounts
	
	  
	
2295
	2016-06-24 10:52:33
	resolved (fixed)
	Web Mail
	Signature link is not there
	
	  
	
  
  


-- users@sogo.nuhttps://inverse.ca/sogo/lists

[SOGo] Free/Busy and Outlook 2013

[Gerald Brandt]

Hi,

Is there a way to get free/busy info from SOGo using Outlooks free/busy 
URL entry?


I've tried this: https:///SOGo/dav/public/%NAME%/freebusy.ifb 
but it doesn't seem to be working. I am running an invalid certifcate.


Gerald

--
users@sogo.nu
https://inverse.ca/sogo/lists