[SOGo] BTS activities for Wednesday, February 01 2017

[SOGo reporter]

Title: BTS activities for Wednesday, February 01 2017





  
BTS Activities

  Home page: http://www.sogo.nu/bugs
  Project: SOGo
  For the period covering: Wednesday, February 01 2017

  
  
idlast updatestatus (resolution)categorysummary
	
	
	  
	
4002
	2017-02-01 13:09:39
	updated (open)
	Backend Calendar
	Alarm event notify
	
	  
	
4013
	2017-02-01 13:13:32
	updated (open)
	Web General
	Login and password change form not working when trying to access service behind an http proxy with secure cookies enable
	
	  
	
4014
	2017-02-01 14:35:44
	updated (open)
	Web Mail
	Issue when answering a mail via Android in plain text
	
	  
	
3938
	2017-02-01 08:33:44
	updated (open)
	with SOGo
	deletion contacts
	
	  
	
3965
	2017-02-01 03:30:44
	feedback (reopened)
	ActiveSync
	Wrong sync of invitations
	
	  
	
4003
	2017-02-01 13:04:55
	resolved (fixed)
	ActiveSync
	Segmentation fault when GET /SOGo/Microsoft-Server-ActiveSync
	
	  
	
3794
	2017-02-01 14:22:28
	resolved (fixed)
	Backend Calendar
	Meeting invites to MS Outlook 2007 do not work correctly
	
	  
	
4015
	2017-02-01 12:03:13
	resolved (fixed)
	Backend Mail
	Remote code execution vulnerability in SOGo webmail
	
	  
	
  
  


-- users@sogo.nuhttps://inverse.ca/sogo/lists

Re: [SOGo] Default home page

[Chris Clemson]

I've not tried doing that, but could the easiest fix be to just do a
redirect, so when someone goes to http://webmail.mydomain/ it then
redirects to /SOGo instead?
That may be the best way to do it without breaking anything.


On 30/01/17 16:29, Alexandre Zuotoski Neto (t...@csmcalderaria.com.br) wrote:
> Hi!
> 
>I am trying to change the default SOGo web address from
> "http://myserver.mydomain/SOGo; to "http://webmail.mydomain;. I know how
> to change it in DNS server, I was also able to create some aliases for
> other sites running in my server, like "http://helpdesk.mydomain; (which
> loads our GLPI home page). But I just can't make it work with SOGo. 
> 
>If someone knows how/what to change, I'd be very greatful.
> 
>We are using Apache 2.4.7 (Ubuntu 14.04), virtual hosts enabled and
> both HTTP/HTTPS access
>SOGo 3.2.6a.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] An error occurred during object publishing

[Gerald Brandt]

So I figure the issue is there are no users in the mysql database. 
Should SOGo auto create a user in the db when they log in with active 
directory authentication?


Gerald



On 2017-02-01 12:10 PM, Gerald Brandt (g...@majentis.com) wrote:

Hi,

I just installed SOGo, and I get the following error after I log in:

An error occurred during object publishing

the requested object could not be found!

The nginx log shows the following:

192.168.103.158 - - [01/Feb/2017:11:58:22 -0600] "GET 
/SOGo/so/anonymous/Calendar HTTP/1.1" 404 195 
"http://sogo.company.com/SOGo/; "Mozilla/5.0 (X11; Linux x86_64) 
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"


I basically installed SOGo, mysql, and nginx.

In mysql, I created the DB and a user. The DB has no tables though.

I took the nginx config from here: 
https://vpsineu.com/blog/how-to-install-sogo-on-ubuntu-14-04-vps/


My IMAP and SMTP servers are on another computer. I use Active 
Directory for users.


Any idea? Any more information I can supply?

Thanks,

Gerald





--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] An error occurred during object publishing

[Gerald Brandt]

Hi,

I just installed SOGo, and I get the following error after I log in:

An error occurred during object publishing

the requested object could not be found!

The nginx log shows the following:

192.168.103.158 - - [01/Feb/2017:11:58:22 -0600] "GET 
/SOGo/so/anonymous/Calendar HTTP/1.1" 404 195 
"http://sogo.company.com/SOGo/; "Mozilla/5.0 (X11; Linux x86_64) 
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"


I basically installed SOGo, mysql, and nginx.

In mysql, I created the DB and a user. The DB has no tables though.

I took the nginx config from here: 
https://vpsineu.com/blog/how-to-install-sogo-on-ubuntu-14-04-vps/


My IMAP and SMTP servers are on another computer. I use Active Directory 
for users.


Any idea? Any more information I can supply?

Thanks,

Gerald



--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] end user passwd change in /SOGo

[Alexandre Zuotoski Neto]

Hello everyone! 

That would be great if the option to change password could work with
Microsoft Active Directory. I tried all tips that was suggested in the
last few mails, but none worked, I always end up with "Forbidden" and a
popup saying "Unhandled error response". 

I guess that it is not possible to write in Microsoft AD, except
using some kind of paid protocol. I'm just wondering here, of course.  

Note that I am running SOGo under a Ubuntu 14.04 TLS, that connects
to Microsoft AD to authenticate. The authentication works perfectly, but
the change password doesn't. 

Cheers,

---

 [1] 
ALEX ZUOTOSKI
Tecnologia da Informação
Fones: +5541-3641-4250 / Ramal 229
E-mails: a...@csmcalderaria.com.br / t...@csmcalderaria.com.br 
 [1] 

http://www.csmcalderaria.com.br [2] 

Em 2017-01-31 18:30, Christoph Kreutzer escreveu:

> Hi Ralf, hi MJ, 
> 
> Thanks for the answers up to now! 
> 
> According to the docs [1] there is the following option for LDAP user 
> sources: 
> 
> bindAsCurrentUser 
> 
> If set to YES, SOGo will always keep binding to the LDAP server using the DN 
> of the currently authenticated user. If _bindFields_ is set, _bindDN_ and 
> _bindPassword_ will still be required to find the proper DN of the user. 
> 
> In this case the user should be able to change it's own password via SOGo. 
> For this to work, you either need bindFields set (for looking up the users 
> DN) or IDFieldName (the attribute which builds the users' DN (like 
> IDFieldName=, baseDN). 
> 
> MJ, I don't know if that works in combination with SAML - since SOGo 
> shouldn't know the users password, it probably binds using the given bindDN, 
> which then would need the rights to change other users passwords. 
> 
> Ralf, I'm not sure what you're looking for. If you need a frontend for 
> password self service, I would either go with the SOGo functionality built 
> in, or with the already named LAM. In my use case I have an existing user 
> management via a Zend Framework application, which allows that similarly to 
> LAM (we use an admin user to set userPassword, setting a custom built 
> crypt-hash using SHA512 with a nice number of rounds - should work with most 
> Linux distros [2]). 
> If you're asking regarding OpenLDAP ACLs to allow a user to change it's own 
> password, you would find that here: [3] 
> I don't really know much about the SOGo features itself, since I'm using SAML 
> auth. 
> 
> Regards, 
> Christoph 
> 
> [1] 
> https://sogo.nu/files/docs/SOGoInstallationGuide.html#_authentication_using_ldap
>  
> [2] https://en.m.wikipedia.org/wiki/Crypt_(C)#Support_in_operating_systems 
> [3] http://www.openldap.org/lists/openldap-software/200212/msg00518.html
> 
> Am 31.01.2017 um 14:52 schrieb lists (li...@merit.unu.edu) :
> 
> Hi
> 
> we are looking for a password change machanism for openldap. Can you please 
> share your knowledge re. this? In active directory, end users are allowed to 
> change their own passwords by default. This does require that the connection 
> is make over ldapS.
> 
> There is a tool called ldap-account-manager (lam) that we used in the past. 
> It included an end-user password change portal.
> (https://www.ldap-account-manager.org/)
> 
> We are also looking currently testing RedHat's keycloak (SAML/oauth Idp) that 
> will prompt users to change their ldap passwords as well, if they have 
> expired.
> (http://www.keycloak.org/)
> 
> And you're right: Perhaps better to take this offlist if you have more 
> questions. (and yes, I also realise that your question was actually aimed at 
> Christoph)
> 
> Best regards to all,
> MJ
> -- 
> users@sogo.nu
> https://inverse.ca/sogo/lists

-- 
users@sogo.nu
https://inverse.ca/sogo/lists 

Links:
--
[1] http://www.csmcalderaria.com.br
[2] http://www.csmcalderaria.com.br/
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Webinterface not available after login

[Florian Ransmayr]

Hi there,

I somehow fixed my problem but I am not sure about the real root cause. 
The problem seems to be connected to the javascript XMPP client (jsxc) 
that was integrated in my SOGo instance. I removed the additional 
javascript files that were added with SOGoUIAdditionalJSFiles in my 
sogo.conf file and the login started working again. :)


I had not the newest version of jsxc installed maybe that was the 
problem after a SOGo upgrade. As I don't need the XMPP client at the 
moment I didn't do any further investigation.


Sorry for any inconvenience but I was getting out of ideas with my 
problem...



Best regards

Florian

Am 01.02.2017 um 08:14 schrieb Florian Ransmayr (ransm...@sl-technology.de):

Hello SOGos,

I recently ran into a strange problem. I updated from 2.3.18 to 2.3.19 
and maybe after that I have a problem to log into my SOGo instance. I 
write maybe because I am not 100% sure that this was the root cause of 
my problem, but it used to work for years now ;)
If I go to the URL of my SOGo instance the login page appears. After I 
enter my credentials and hit enter the server just replies the 
following JSON that is shown in my browser " {"expire": -1, "grace": 
-1}" and the URL in the browser changes to {myURL}/SOGo/connect. The 
thunderbird clients are working fine. If I now navigate to the URL of 
my SOGo instance again the webinterface appears as normal.


The sogo.log contains the following lines but no visible error:
Feb 01 08:06:28 sogod [20099]: SOGoRootPage successful login from 
'x.x.x.x' for user 'ransmayr' - expire = -1  grace = -1
Feb 01 08:06:28 sogod [20099]: x.x.x.x "POST /SOGo/connect HTTP/1.1" 
200 27/70 0.127 - - 404K


Maybe someone can provide me a valuable hint where to look for my 
problem. If you need more information don't hesitate to ask.


Many thanks
Florian

--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] end user passwd change in /SOGo

[mj]

On 01/31/2017 09:30 PM, Christoph Kreutzer 
(kreutzer.christ...@gmail.com) wrote:


MJ, I don't know if that works in combination with SAML - since SOGo
shouldn't know the users password, it probably binds using the given
bindDN, which then would need the rights to change other users passwords.


In our (keycloak) case, keycloak is able to change it for the user, so 
we will disable the functionality in SOGo.


MJ
--
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Webinterface not available after login

[Florian Ransmayr]

Hello SOGos,

I recently ran into a strange problem. I updated from 2.3.18 to 2.3.19 
and maybe after that I have a problem to log into my SOGo instance. I 
write maybe because I am not 100% sure that this was the root cause of 
my problem, but it used to work for years now ;)
If I go to the URL of my SOGo instance the login page appears. After I 
enter my credentials and hit enter the server just replies the following 
JSON that is shown in my browser " {"expire": -1, "grace": -1}" and the 
URL in the browser changes to {myURL}/SOGo/connect. The thunderbird 
clients are working fine. If I now navigate to the URL of my SOGo 
instance again the webinterface appears as normal.


The sogo.log contains the following lines but no visible error:
Feb 01 08:06:28 sogod [20099]: SOGoRootPage successful login from 
'x.x.x.x' for user 'ransmayr' - expire = -1  grace = -1
Feb 01 08:06:28 sogod [20099]: x.x.x.x "POST /SOGo/connect HTTP/1.1" 200 
27/70 0.127 - - 404K


Maybe someone can provide me a valuable hint where to look for my 
problem. If you need more information don't hesitate to ask.


Many thanks
Florian
--
users@sogo.nu
https://inverse.ca/sogo/lists