[SOGo] BTS activities for Wednesday, July 11 2012
Title: BTS activities for Wednesday, July 11 2012 BTS Activities Home page: http://www.sogo.nu/bugs Project: SOGo For the period covering: Wednesday, July 11 2012 idlast updatestatus (resolution)categorysummary 1834 2012-07-11 16:12:30 updated (open) SOGo Native Outlook Compatibility Install Openchange Sogo Plugin 1855 2012-07-11 15:39:10 updated (open) SOGo Native Outlook Compatibility Samba4 goes to Panic while mail folders are synchrozing within SOPE&SOGo appliance. 1858 2012-07-11 15:38:32 updated (open) SOGo Native Outlook Compatibility SOPE/SOGo crashes Samba4 during user with its password differs from its login name using MS Outlook ! 1867 2012-07-11 03:30:03 new (open) SOGo Native Outlook Compatibility rc4 samba crash when cut/paste 1392 2012-07-11 04:39:45 updated (open) Backend Mail Patch: Inclusion/Embedding of server-side sieve scripts into standard sogo-script 1391 2012-07-11 04:25:27 updated (open) SOPE Patch for retrieving managesieve capabilities 1868 2012-07-11 10:30:11 new (open) Web Calendar Attendees list of event not scrollable if to many entries 1856 2012-07-11 15:40:28 closed (fixed) SOGo Native Outlook Compatibility SOGo v 2.0.0.rc4 Openchage plugin reports an error during building process.
[SOGo] SOGo Integrator duplicated Address Books
Hello,
I have been trying to get to work SOGo Integrator with Thunderbird.
After installing the Integrator, the calendars and address books were created
correctly, however after restarting Thunderbird all address books were
duplicated.
I double-checked config files and both extensions.rdf (with
isi:updateURL="http://mail.ptv.cz/plugins/updates.php?plugin=%ITEM_ID%&version=%ITEM_VERSION%&platform=%PLATFORM%";)
and Apache config SOGo.conf
RequestHeader set "x-webobjects-server-port" "80"
RequestHeader set "x-webobjects-server-name" "mail.ptv.cz"
RequestHeader set "x-webobjects-server-url" "http://mail.ptv.cz";
seems to be set up properly.
What is strange for me, is that the address books have URLs like
http:/mail.ptv.cz/SOGo/dav/pavel.poko...@ptv.cz/Contacts/personal/
(there seems to be missing / after http: and this URL is being send by server
as a response to PROPFIND /SOGo/dav/pavel.poko...@ptv.cz/Contacts)
One other issue (not sure if related to the previous one) is that even if I set
to use the public directory for autocomplete, the configuration is gone after
restarting TB.
(in site.js in integrator there is
pref("sogo-integrator.autocomplete.server.urlid", "public"); and in
GNUStepDefaults I have configured LDAP directory with id
public)
Thank you for any help with these problems.
Sincerely,
Pavel
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] SOGo mysql, dovecot and postfix using crypt MD5 passwords.
Look, Most of my clients are popping/imapping clear text. A few smart ones are using ssl. It would be nice to force every one to use ssl. But in reallity it will cost me half my clients. What I mean is sniffing is easy. if my systems gets hacked and rooted (and they cannot do that with sniffing of course) they can allready abuse all accounts on the system so no EXTRA harm done. I the customer is stupid enough to use the the same login on all other accounts hey have it is their problem. I warn them not do do that. If they choose to do so it is not my problem. I definetly out weighs the profits of being able to supply a customer with their passwords or login with their credentials to prove the problem is not at my side. Regards Hans de Groot On Wednesday, July 11, 2012 21:58 CEST, Daniel Colchete wrote: > I would like to point out that MD5 passwords, SHA1 passwords and alikes > are not safe because they dont have a SALT on it. Should a hacker get > access to your password list would be easy to guess most of your > passwords (google some of the MD5s or SHA1s you have). crypt with $1 is > MD5 with SALT, crypt $2 is SHA1 with SALT. Only crypt hashes with at > least $2 are considerate safe nowadays. > > Best, > Daniel > > On 07/11/2012 12:07 PM, Yellow Deli wrote: > > I am having the same issue. I have a combination of PLAIN passwords, > > as well as crypt, and MD5. I cannot get it to authenticate against any > > of them. > > > > ben > > > > On 7/11/12 7:36 AM, Kamil wrote: > >> hansg@... writes: > >>> >That is because now you have a "crypt" passwort instead of an > >>> "MD5" > >> one. > >>> > So you have to change the above setting and reboot sogod. > >>> But if I change it to > >>> userPasswordAlgorithm > >>> md5 > >>> I cannot login using the dovecot / etc passwd style password. > >>> it does not recognize the md5 password. > >>> So are there any other options to get this working? I still find it > >> weird that that can read but not write the long style md5 password. > >> > >> > >> any success ? I have the same problem and looking for a solution. > >> > >> I tink I'll have to change users passwords to MD5 only everywhere > >> > > > -- > users@sogo.nu > https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo mysql, dovecot and postfix using crypt MD5 passwords.
Use userPasswordAlgorithm md5-crypt It is/was revered in the docs. I can use the /etc/passwd crypted style password with sogo since 1.3.16. only the docs (used to) state cypty-md5 use md5-crypt and it should work. (I never checked if the docs were changed) Regards Hans de Groot On Wednesday, July 11, 2012 17:07 CEST, Yellow Deli wrote: > I am having the same issue. I have a combination of PLAIN passwords, as > well as crypt, and MD5. I cannot get it to authenticate against any of them. > > ben > > On 7/11/12 7:36 AM, Kamil wrote: > > hansg@... writes: > >>>That is because now you have a "crypt" passwort instead of an "MD5" > > one. > >>> So you have to change the above setting and reboot sogod. > >>But if I change it to > >>userPasswordAlgorithm > >> md5 > >>I cannot login using the dovecot / etc passwd style password. > >>it does not recognize the md5 password. > >>So are there any other options to get this working? I still find it > > weird that that can read but not write the long style md5 password. > > > > > > any success ? I have the same problem and looking for a solution. > > > > I tink I'll have to change users passwords to MD5 only everywhere > > > -- > users@sogo.nu > https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo mysql, dovecot and postfix using crypt MD5 passwords.
I would like to point out that MD5 passwords, SHA1 passwords and alikes are not safe because they dont have a SALT on it. Should a hacker get access to your password list would be easy to guess most of your passwords (google some of the MD5s or SHA1s you have). crypt with $1 is MD5 with SALT, crypt $2 is SHA1 with SALT. Only crypt hashes with at least $2 are considerate safe nowadays. Best, Daniel On 07/11/2012 12:07 PM, Yellow Deli wrote: I am having the same issue. I have a combination of PLAIN passwords, as well as crypt, and MD5. I cannot get it to authenticate against any of them. ben On 7/11/12 7:36 AM, Kamil wrote: hansg@... writes: >That is because now you have a "crypt" passwort instead of an "MD5" one. > So you have to change the above setting and reboot sogod. But if I change it to userPasswordAlgorithm md5 I cannot login using the dovecot / etc passwd style password. it does not recognize the md5 password. So are there any other options to get this working? I still find it weird that that can read but not write the long style md5 password. any success ? I have the same problem and looking for a solution. I tink I'll have to change users passwords to MD5 only everywhere -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo mysql, dovecot and postfix using crypt MD5 passwords.
I am having the same issue. I have a combination of PLAIN passwords, as well as crypt, and MD5. I cannot get it to authenticate against any of them. ben On 7/11/12 7:36 AM, Kamil wrote: hansg@... writes: >That is because now you have a "crypt" passwort instead of an "MD5" one. > So you have to change the above setting and reboot sogod. But if I change it to userPasswordAlgorithm md5 I cannot login using the dovecot / etc passwd style password. it does not recognize the md5 password. So are there any other options to get this working? I still find it weird that that can read but not write the long style md5 password. any success ? I have the same problem and looking for a solution. I tink I'll have to change users passwords to MD5 only everywhere -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo mysql, dovecot and postfix using crypt MD5 passwords.
hansg@... writes: > >That is because now you have a "crypt" passwort instead of an "MD5" one. > > So you have to change the above setting and reboot sogod. > But if I change it to > userPasswordAlgorithm > md5 > I cannot login using the dovecot / etc passwd style password. > it does not recognize the md5 password. > So are there any other options to get this working? I still find it weird that that can read but not write the long style md5 password. any success ? I have the same problem and looking for a solution. I tink I'll have to change users passwords to MD5 only everywhere -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGO and virtualmin on VPS
Hey Chris, you don't have to worry about that - SOGo won't touch any of your existing configurations - it interfaces using IMAP and Sieve only with your mailboxes. Actually we have a setup using Vimbadmin as well as ISPConfig3 (instead of virtualmin) that work very well - we just created the table "sogo_users" as a view in the sogo database for user's authentication using MySQL that get's its data directly from the postfix tables - and your're basically done with this imagine something like this: CREATE VIEW `sogo`.`sogo_users` AS select `mailadmin`.`mailbox`.`username` AS `c_uid`, `mailadmin`.`mailbox`.`username` AS `c_name`, `mailadmin`.`mailbox`.`password` AS `c_password`, `mailadmin`.`mailbox`.`name` AS `c_cn`,concat(`mailadmin`.`mailbox`.`local_part`,'@',`mailadmin`.`mailbox`.`domain`) AS `mail`, `mailadmin`.`mailbox`.`domain` AS `DomainFieldName` from `mailadmin`.`mailbox`; This works very well for us ... A security problem in such an environment would be for you that everybody will be able to see all other defined mailboxes (adresses only not contents) from that database when they have a look at the SOGO UI dialogues to delegate permissions or invite attendees for a meeting etc. We managed to separate the "domains" (not to be confused with internet domains) of the various customers by adding the last one as 'DomainFieldName" to the view. The resulting "domains" have to be created and defined in the .GNUstepDefaults before and sogo restarted so it does not (yet) work entirely dynamic from the Database ... I guess this is more or less what you might have been looking for.. Cheers Andreas Am Dienstag, 10. Juli 2012 08:24 CEST, specktator schrieb: Hi guys, new here. First of all i'm sending my regards to your community and the sogo team for the Great Soft. I was wondering if sogo intergrates well with virtualmin. I'm running a vps with ubuntu 12.04LTS and virtualmin for my work, and i want to give my users calendar(s) addressbook(s) for their workstations and cell phones (iPhones in case) without ruin my configuration of postfix let's say. I use that vps for other clients too so, is there a solution to share sogo between domains, subdomains in virtualmin or i'm totally out of the sogo concept? thnx a lot, Chris -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGO and virtualmin on VPS
Hey Chris, you don't have to worry about that - SOGo won't touch any of your existing configurations - it interfaces using IMAP and Sieve only with your mailboxes. Actually we have a setup using Vimbadmin as well as ISPConfig3 (instead of virtualmin) that work very well - we just created the table "sogo_users" as a view in the sogo database for user's authentication using MySQL that get's its data directly from the postfix tables - and your're basically done with this imagine something like this: CREATE VIEW `sogo`.`sogo_users` AS select `mailadmin`.`mailbox`.`username` AS `c_uid`, `mailadmin`.`mailbox`.`username` AS `c_name`, `mailadmin`.`mailbox`.`password` AS `c_password`, `mailadmin`.`mailbox`.`name` AS `c_cn`,concat(`mailadmin`.`mailbox`.`local_part`,'@',`mailadmin`.`mailbox`.`domain`) AS `mail`, `mailadmin`.`mailbox`.`domain` AS `DomainFieldName` from `mailadmin`.`mailbox`; This works very well for us ... A security problem in such an environment would be for you that everybody will be able to see all other defined mailboxes (adresses only not contents) from that database when they have a look at the SOGO UI dialogues to delegate permissions or invite attendees for a meeting etc. We managed to separate the "domains" (not to be confused with internet domains) of the various customers by adding the last one as 'DomainFieldName" to the view. The resulting "domains" have to be created and defined in the .GNUstepDefaults before and sogo restarted so it does not (yet) work entirely dynamic from the Database ... I guess this is more or less what you might have been looking for.. Cheers Andreas Am Dienstag, 10. Juli 2012 08:24 CEST, specktator schrieb: Hi guys, new here. First of all i'm sending my regards to your community and the sogo team for the Great Soft. I was wondering if sogo intergrates well with virtualmin. I'm running a vps with ubuntu 12.04LTS and virtualmin for my work, and i want to give my users calendar(s) addressbook(s) for their workstations and cell phones (iPhones in case) without ruin my configuration of postfix let's say. I use that vps for other clients too so, is there a solution to share sogo between domains, subdomains in virtualmin or i'm totally out of the sogo concept? thnx a lot, Chris -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo Version 2 rc4 Adding New Domain
Hi, > Hi you need to provision your new domain with openchange (samba4) I am interested in this as well :-) Can I see somehow, what is configured with this openchange_provision command? I look at the --help, but did not really understand, what needs to be done to manage stuff or in case of this thread topic - adding a new domain. So do you have an example for this please? If you don't matter. Thanks in advance -Christian Rößner --- Roessner-Network-Solutions Bachelor of Science Informatik Nahrungsberg 81, 35390 Gießen F: +49 641 5879091, M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com smime.p7s Description: S/MIME cryptographic signature
