[SOGo] SOGo crashes when the SOGo mail spool is full
SOGo leaves many files in the SOGo mail spool directory and even with a cron job deleting all files which were not modified for X days, it is still possible to crash sogo by filling it with attachments and breaking the session. Would'nt it be possible to include a check for this spool space or some kind of garbage collection? It is the directory referenced by SOGoMailSpoolPath . Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 G+: https://plus.google.com/114525323843315818983/ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Crash server
Le 31/01/2012 11:26, l.dubai...@eurytos.fr a écrit : > Hi Julian, > > I have 20 users, my server is a CentOS 5.7, I will increase the PREFORK > value. We had similar problems when our IMAP backend had a problem and returned answers too slowly. Is your IMAP server accessible and returns answers in a timely fashion? -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 G+: https://plus.google.com/114525323843315818983/ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Changing display of related emails in WebGUI similar to newer TB versions
Le 26/01/2012 10:04, Pascal Gienger a écrit : > Le 26/01/2012 09:41, Alessio Fattorini a écrit : >> Il 25/01/2012 21:08, Mirko Stoffers ha scritto: >>> Hi Georg, >>> >>> in my opinion the web interface is not meant to be the primary interface >>> for extensive mail management. It is rather meant to be used on PCs >>> where you don't want (be allowed) to install a fat client since you do >>> not use them every day. >> >> +1 > > > The problem lies in the wrong assumption which collides with the reality. > > As I can see here, people want WEB. More, they want APP on their mobile > phone. They're not capable (or maybe not wanting) to configure their > mail App on their Pad or Phone and they try to search for an "Uni > Konstanz Mail App" (in our case). Part which I forgot: So to address the greatest possible audience, the web interface of SOGo is the key to success. All these little functions which are not implemented yet (like "Mark all messages as read") will be the killer feature - "Thunderbird in the cloud". That's what people want. I also saw iPad owners using SOGo with their Mobile Safari (because they did not find an App for it). Local storage is dead. Local software on desktop and notebook computers is dead. It is up to us to adapt to stay within the audiences' interest. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 G+: https://plus.google.com/114525323843315818983/ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Changing display of related emails in WebGUI similar to newer TB versions
Le 26/01/2012 09:41, Alessio Fattorini a écrit : > Il 25/01/2012 21:08, Mirko Stoffers ha scritto: >> Hi Georg, >> >> in my opinion the web interface is not meant to be the primary interface >> for extensive mail management. It is rather meant to be used on PCs >> where you don't want (be allowed) to install a fat client since you do >> not use them every day. > > +1 The problem lies in the wrong assumption which collides with the reality. As I can see here, people want WEB. More, they want APP on their mobile phone. They're not capable (or maybe not wanting) to configure their mail App on their Pad or Phone and they try to search for an "Uni Konstanz Mail App" (in our case). The new paradigm for mobile devices seems to be "for each service you need an App" and for notebooks and desktops "it has to be done with the web browser, I don't want to install software". You notice the schizophrenia in this? We have plenty of users stating "I don't want to install a software on my computer. It must run on my Internet Explorer, it has to be cloud! *sigh*" (Cloud == application on the web browser, that's what they think!). 90% of our users take the web frontend, even at the office! We support real mail clients, sure, but they don't want them. Web Web Web! And if we wouldn't offer it they would go to Google, because students can go wherever they want. We see massive people using Google Mail to read mail stored on our servers (including storing their password at Google). The battle is lost, installable software on the desktop/notebook PC like a fat mail client will decline in the time to come, only in the mobile world of these castrated walled garden systems people are happy to spend even dollars to buy an "App" from an "App Store" and pay money for it - to install a fat client. If Inverse would compile an iOS iPhone/iPad "App" for access to a SOGo system which many nice animations and designed like a Disney software for little children, people would buy it for $10 each. I promise it! This App - sure - has to use a "web service" to overcome all firewalls and narrow minded "data packs" which allow only port 80 and 443 connects. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 G+: https://plus.google.com/114525323843315818983/ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Failed login after adding ldap index for uid attribute
Le 24/01/2012 14:23, Georg Bretschneider a écrit : > Hi Christian, > I hope, someone will come up with an idea. Within the next months I > won't have time for further and time expensive testing. Raise openldap's debug level in your test setup and see the exact search filter string. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 G+: https://plus.google.com/114525323843315818983/ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Cannot Log Into SOGo After Install
Le 23/01/2012 03:04, Nathan Acks a écrit : I've been searching Google and the list here all day, and can't find anything that seems to match my problem. Basically, I have SOGo set up to use a custom port on my server, and can access it at Hi Nathan, first: your mail fell into my spam filter (Ironport), you were my first false positive for 5 years now... :-( Jan 22 17:22:00 sogod [27842]: |SOGo| starting method 'GET' on uri '/SOGo/myuser' Jan 22 17:22:00 sogod [27842]:<0x0x700c78[SOGoWebAuthenticator]> tried wrong password for user '1477YRibp8H12nCyarBR4mXtiSE6NOfcK5fYify0hLcLblrcGrvTCOsru/h+M8ibjRTeFwu/i/Zz4kP12Ro/nw=='! [...] SOGoUserSources canAuthenticate YES displayName SOGo Users id sogo_db isAddressBook YES type sql userPasswordAlgorithm sha viewURL mysql://sogo:sogopassword@localhost:3306/sogo/sogo_auth How the user passwords are coded in your "sogo_auth" table? How the columns are named? Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 G+: https://plus.google.com/114525323843315818983/ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Read/unread marks-Problem was solved with Cyrus 2.4.13
Just a little feedback: The problem with inconsistent Read/Unread-Marks was completely solved by upgrading to Cyrus 2.4.x, 2.4.13 in our case. The biggest problem were the index updates to the 13,000 INBOXes which put our storage system to whine, (max IOPS was not foreseen for this job), so a delay was taken into consideration - and it was a delay - delivering processes just touched the INBOX so index rebuild was triggered. With some Postfix parameters (first delivery try timeout very very very low, so INDEX generation is triggered but the delivering process will not block, it will timeout and the mail will get deferred in the Postfix queue, 2nd retry time low enough so that the delay will be acceptable). The fruits of the delay are: Consistent read/unread and a speed bump. So all question regarding read/unread from our side can be closed, it was Cyrus 2.3.x which has a problem here on high volume sites. (Comments stating that I should use Dovecot, because this is the way to go and "all mail gurus like M Heinlein say you must use this" and "cyrus is obsolete" will be thrown to trash, I am really fed up with these discussions always popping up). -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Solved (was: Re: [SOGo] /dav.woa/ ?)
Le 14/12/2011 06:05, Pascal Gienger a écrit : > Starting with SOGo 1.3.10, we see strange requests in the log: > > XXX - - [12/Dec/2011:08:41:25 +0100] "GET > /dav.woa/WebServerResources/PasswordPolicy.js HTTP/1.1" 404 265 Was the wrong httpd.conf, mea culpa! Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] /dav.woa/ ?
Starting with SOGo 1.3.10, we see strange requests in the log: XXX - - [12/Dec/2011:08:41:25 +0100] "GET /dav.woa/WebServerResources/PasswordPolicy.js HTTP/1.1" 404 265 XXX - - [12/Dec/2011:08:41:38 +0100] "GET /dav.woa/WebServerResources/generic.css HTTP/1.1" 404 261 XXX - - [12/Dec/2011:08:41:38 +0100] "GET /dav.woa/WebServerResources/dtree.css HTTP/1.1" 404 259 Normally it should read /SOGo.woa/ - most of the request are in fact /SOGo.woa/ In the apache config there was no alias for /dav.woa/ so the login screen was quite garbled. Example (using my IP so no data security problem): 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /SOGo.woa/WebServerResources/SOGoResizableTable.js HTTP/1.1" 200 2602 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /SOGo.woa/WebServerResources/SOGoMailDataSource.js HTTP/1.1" 200 2385 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /SOGo.woa/WebServerResources/SOGoDataTable.js HTTP/1.1" 200 3279 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /dav.woa/WebServerResources/menu-nocheck.gif HTTP/1.1" 200 74 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /dav.woa/WebServerResources/dragdot.png HTTP/1.1" 200 174 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /dav.woa/WebServerResources/Search-bar.png HTTP/1.1" 200 820 188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET /dav.woa/WebServerResources/thead_bg.png HTTP/1.1" 200 951 Where can I look for the mistake? Where does this "/dav.woa/" originate from? Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] email notify error
Le 05/12/2011 11:37, Alain DEFRANCE a écrit : Hi all with sogo i never received email notify the message in the logs ei : sogo-ealarms-notify[3402] EMail alarms are disabled in the SOGo configuration. but in my GNUstepDefaults file i have SOGOEnableEMailAlarms YES wha't the problem ? OCSEMailAlarmsFolderURL set? sogo-ealarms-notify put in the sogo user's crontab (every minute)? Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] HELP !!! /etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh: Aucun fichier ou répertoire de ce type Restarting SOGo: /usr/GNUstep/System/Tools/Admin/sogod: error
Le 29/10/2011 14:28, Francis Lachapelle a écrit : On 2011-10-29, at 6:00 AM, Pascal Gienger wrote: Since upgrade of my Centos 5 , I thing GNUStep alose upgrade :( No I have this error when I try to start sogod [root@serv1 ~]# service sogod start /etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh: This is a bug in /etc/init.d/sogod: [root@limbe init.d]# diff -u sogod.orig sogod --- sogod.orig 2011-10-28 15:28:53.0 +0200 +++ sogod 2011-10-29 11:59:07.0 +0200 @@ -70,7 +70,7 @@ . /etc/rc.d/init.d/functions if [ -z "$GNUSTEP_SYSTEM_ROOT" ] then - . /usr/GNUstep/System/Library/Makefiles/GNUstep.sh + . /usr/share/GNUstep/Makefiles/GNUstep.sh fi DAEMON_OPTS="-WOWorkersCount $PREFORK -WOPidFile $PIDFILE -WOLogFile $LOGFILE" Even better : http://mtn.inverse.ca/revision/diff/5dcf2a67f6b5d914d3f329aec3830f2484679b43/with/620e40dba861cf20ff94cffda921d7b7b564d061 Ok :-) 1:0 for you! Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] HELP !!! /etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh: Aucun fichier ou répertoire de ce type Restarting SOGo: /usr/GNUstep/System/Tools/Admin/sogod: error
Le 28/10/2011 21:55, g...@orthobourg.com a écrit : Hi , Since upgrade of my Centos 5 , I thing GNUStep alose upgrade :( No I have this error when I try to start sogod [root@serv1 ~]# service sogod start /etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh: This is a bug in /etc/init.d/sogod: [root@limbe init.d]# diff -u sogod.orig sogod --- sogod.orig 2011-10-28 15:28:53.0 +0200 +++ sogod 2011-10-29 11:59:07.0 +0200 @@ -70,7 +70,7 @@ . /etc/rc.d/init.d/functions if [ -z "$GNUSTEP_SYSTEM_ROOT" ] then - . /usr/GNUstep/System/Library/Makefiles/GNUstep.sh + . /usr/share/GNUstep/Makefiles/GNUstep.sh fi DAEMON_OPTS="-WOWorkersCount $PREFORK -WOPidFile $PIDFILE -WOLogFile $LOGFILE" Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo 1.3.9 Update results
Le 29/10/2011 11:19, Dominique a écrit : Hi, I just updated to version 1.3.9 from version 1.3.8b with mixed results: 1. In the address book, double clicking an entry returns a new empty window with the following error: "An error occurred during object publishing the requested ob/usr/lib64/GNUstep/SOGo/WebServerResourcesject could not be found!" 2. The calendar window is empty where severa On Redhat/CentOS, the static elements and templates changed from /usr/GNUstep/System/Library/SOGo/WebServerResources to /usr/lib64/GNUstep/SOGo/WebServerResources If you use an SSL proxy or own httpd config file, look if you missed that. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Library link error in samba4
When provisioning (setup/provision) breaks with an error message stating that tdb_compat (et.al.) were not found: In the documentation all the needed libraries are under /usr/local/samba/lib, but three needed libraries are in /usr/local/samba/lib/ldb: lrwxrwxrwx 1 root root33 oct 21 13:09 libccan.so.0 -> libccan.so.0.1-init-1161-g661d41f -rw-r--r-- 1 root root 49715 oct 21 13:09 libccan.so.0.1-init-1161-g661d41f -rw-r--r-- 1 root root 38304 oct 21 13:10 libldb-cmdline.so -rw-r--r-- 1 root root 17804 oct 21 13:09 libtdb_compat.so So there are not found because they are not in the library search path (ldconfig) nor they are coded in the shared objects. Symlinking them to /usr/local/samba/lib did the job and provisioning did well. Thank you for your work. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v2.0.0beta2 with Native Outlook Compatibility
Le 21/10/2011 13:04, Pascal Gienger a écrit : > Le 21/10/2011 01:35, Ludovic Marcotte a écrit : >> Inverse is proud to announce the second beta release of SOGo v2.0.0 with >> native Microsoft Outlook compatibility. > > Thank you! > > I tried to build it on CentOS 5 (to see whether it works), and after > compiling all components as described in the manual, the setup/provision > (in ./samba4/source) breaks and dumps core. It is the python2.7 > interpreter who dumps core in ldb.c: "Kommando zurück!" the germans would say... Was my fault, there was a wrong ldb.so in the PYTHONPATH, which was not belonging to the samba4 one. I beg your pardon! -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v2.0.0beta2 with Native Outlook Compatibility
Le 21/10/2011 01:35, Ludovic Marcotte a écrit : > Inverse is proud to announce the second beta release of SOGo v2.0.0 with > native Microsoft Outlook compatibility. Thank you! I tried to build it on CentOS 5 (to see whether it works), and after compiling all components as described in the manual, the setup/provision (in ./samba4/source) breaks and dumps core. It is the python2.7 interpreter who dumps core in ldb.c: DSO at 0x77dd6000 Core was generated by `python ./setup/provision --realm=UNI-KONSTANZ.DE --domain=UNI-KONSTANZ --adminp'. Program terminated with signal 11, Segmentation fault. #0 0x2ae94c7dc561 in ldb_get_opaque (ldb=0x0, name=0x2ae94c39d2b5 "SAMBA_HANDLERS_REGISTERED") at ../common/ldb.c:1823 1823for (o=ldb->opaque;o;o=o->next) { (gdb) It is part of this loop: void *ldb_get_opaque(struct ldb_context *ldb, const char *name) { struct ldb_opaque *o; for (o=ldb->opaque;o;o=o->next) { if (strcmp(o->name, name) == 0) { return o->value; } } return NULL; } Did you do any special things to make your nightly RedHat packages which is differently from the manual which describes the build process for Ubuntu? Gnustep, SOPE and SOGo are working properly. For OpenChange I had to compile the citadel freeassociation libical which was not a big thing. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Could not find framework SOGo in any standard location
Le 12/10/2011 16:17, Ludovic Marcotte a écrit : > On 12/10/11 10:13, Pascal Gienger wrote: >> Any idea? (Besides waiting for the precompiled 2.0.0 packages)? > Create a link: > > % mkdir /usr/GNUstep/System/Library/Frameworks > % ln -s /usr/GNUstep/System/Library/SOGo/SOGo.framework > /usr/GNUstep/System/Library/Frameworks/SOGo.framework > > It's a bug in our makefile with recent versions of GNUstep make/base. > > Regards, > Thank you very much, it works. -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Could not find framework SOGo in any standard location
I tried to compile SOGo 2.0.0-beta for our system, GNUStep 1.22. gdl2-postgresql works, SOPE is installed correctly (I did all in SYSTEM context, but the same error appears when installing all parts in LOCAL). The resulting sogod breaks with this error message: [sogo@bamenda ~]$ /usr/GNUstep/System/Tools/Admin/sogod -WOWorkersCount 20 -WOPidFile /var/run/sogod.pid -WOLogFile /var/log/sogo.log 2011-10-12 16:08:14.390 sogod[30098] File NSBundle.m: 711. In +[NSBundle(Private) _addFrameworkFromClass:] Could not find framework SOGo in any standard location <0x0x1012aef0[NGBundle]> SOGoDefaults.plist not found The SOGO.framework is in /usr/GNUstep/System/Library/SOGo/SOGo.framework which is linked to /usr/GNUstep/System/Library/SOGo/SOGo.framework/Versions/2 All libraries for SOGo are correctly linked: [sogo@bamenda ~]$ ldd /usr/GNUstep/System/Tools/Admin/sogod linux-vdso.so.1 => (0x7fffbbbfd000) libSOGo.so.2 => /usr/GNUstep/System/Library/Libraries/libSOGo.so.2 (0x2ba6e2cd9000) libOGoContentStore.so.0.9 => /usr/GNUstep/System/Library/Libraries/libOGoContentStore.so.0.9 (0x2ba6e2fbd000) libGDLContentStore.so.4.9 => /usr/GNUstep/System/Library/Libraries/libGDLContentStore.so.4.9 (0x2ba6e31c2000) libGDLAccess.so.4.9 => /usr/GNUstep/System/Library/Libraries/libGDLAccess.so.4.9 (0x2ba6e33ff000) libWEExtensions.so.4.9 => /usr/GNUstep/System/Library/Libraries/libWEExtensions.so.4.9 (0x2ba6e36c) libNGCards.so.4.9 => /usr/GNUstep/System/Library/Libraries/libNGCards.so.4.9 (0x2ba6e39f) libNGObjWeb.so.4.9 => /usr/GNUstep/System/Library/Libraries/libNGObjWeb.so.4.9 (0x2ba6e3c58000) libNGMime.so.4.9 => /usr/GNUstep/System/Library/Libraries/libNGMime.so.4.9 (0x2ba6e41a2000) libNGLdap.so.4.9 => /usr/GNUstep/System/Library/Libraries/libNGLdap.so.4.9 (0x2ba6e4517000) libNGStreams.so.4.9 => /usr/GNUstep/System/Library/Libraries/libNGStreams.so.4.9 (0x2ba6e4749000) libNGExtensions.so.4.9 => /usr/GNUstep/System/Library/Libraries/libNGExtensions.so.4.9 (0x2ba6e49c6000) libEOControl.so.4.9 => /usr/GNUstep/System/Library/Libraries/libEOControl.so.4.9 (0x2ba6e4c8a000) libDOM.so.4.9 => /usr/GNUstep/System/Library/Libraries/libDOM.so.4.9 (0x2ba6e4ee4000) libXmlRpc.so.4.9 => /usr/GNUstep/System/Library/Libraries/libXmlRpc.so.4.9 (0x2ba6e513b000) libSaxObjC.so.4.9 => /usr/GNUstep/System/Library/Libraries/libSaxObjC.so.4.9 (0x2ba6e5365000) libgnustep-base.so.1.22 => /usr/GNUstep/System/Library/Libraries/libgnustep-base.so.1.22 (0x2ba6e558b000) libpthread.so.0 => /lib64/libpthread.so.0 (0x0036e0e0) libobjc.so.1 => /usr/lib64/libobjc.so.1 (0x2ba6e5cc1000) libm.so.6 => /lib64/libm.so.6 (0x0036e160) libc.so.6 => /lib64/libc.so.6 (0x0036e060) libmemcached.so.8 => /usr/local/lib/libmemcached.so.8 (0x2ba6e5ede000) libSBJson.so.2 => /usr/GNUstep/System/Library/Libraries/libSBJson.so.2 (0x2ba6e6113000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x003f9a20) libldap-2.3.so.0 => /usr/lib64/libldap-2.3.so.0 (0x2ba6e6321000) liblber-2.3.so.0 => /usr/lib64/liblber-2.3.so.0 (0x0036e660) libssl.so.6 => /lib64/libssl.so.6 (0x003f9de0) libz.so.1 => /lib64/libz.so.1 (0x0036e120) libcrypto.so.6 => /lib64/libcrypto.so.6 (0x003f9da0) libgmp.so.3 => /usr/lib64/libgmp.so.3 (0x2ba6e655e000) libxslt.so.1 => /usr/lib64/libxslt.so.1 (0x0036e560) libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x0036e3a0) libffi.so.5 => /usr/GNUstep/System/Library/Libraries/libffi.so.5 (0x2ba6e6798000) libnsl.so.1 => /lib64/libnsl.so.1 (0x0036e520) librt.so.1 => /lib64/librt.so.1 (0x0036e220) libdl.so.2 => /lib64/libdl.so.2 (0x0036e0a0) /lib64/ld-linux-x86-64.so.2 (0x0036e020) libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x0036e2a0) libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x0036e4e0) libstdc++.so.6 => /usr/lib64/libstdc++.so.6 (0x2ba6e69a7000) libresolv.so.2 => /lib64/libresolv.so.2 (0x003f9be0) libgssapi_krb5.so.2 => /usr/lib64/libgssapi_krb5.so.2 (0x003f9ba0) libkrb5.so.3 => /usr/lib64/libkrb5.so.3 (0x003f9d60) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x0036e420) libk5crypto.so.3 => /usr/lib64/libk5crypto.so.3 (0x003f9e20) libkrb5support.so.0 => /usr/lib64/libkrb5support.so.0 (0x003f9ce0) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x0036e4a0) libselinux.so.1 => /lib64/libselinux.so.1 (0x003f9e60) libsepol.so.1 => /lib64/libsepol.so.1 (0x0036e1e0) Any idea? (Besides waiting for the precompiled
[SOGo] Feature Request: Automatic mail notice not only to the person who GETS new ACLs but also to the person who GIVES ACLs/SHAREs resources
Would this be easily feasible? Automatic mail notice not only to the person who GETS new ACLs but also to the person who GIVES ACLs/SHAREs resources. Scenario: A user shares his mailbox to the wrong person but does not realize it immediately. We're an institution with 13,000 users so an error is not so far away. A notification email with the relevant data "to whom which data was shared by ACLs" sent back to the user would show the error to the user. And: Is it possibile in some way to turn of the "anyone" sharing option? ("All authenticated users"). It is too heavy for us, one wrong click and all mails are public to all of our users... -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Thunderbird 5 support
Am 29.06.11 15:07, schrieb CF: Can someone point me to the features of Inverse edition ? It selects automatically the correct e-mail-account for a given calendar. It works with integrator. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Resource Planning only works in the web calendar :-\
Am 25.06.11 15:11, schrieb Ludovic Marcotte: On 25/06/11 07:33, Pascal Gienger wrote: In the Web Interface all is going well, but with thunderbird / lightning (and iCal) when using "v...@rooms.uni-konstanz.de" as attendee it will mark the meeting as reserved in v303's calendar (it is there!) but it won't answer with an accept, the participant status stays on undecided. Free/Busy-Calls also get answered properly when using v...@rooms.uni-konstanz.de. And if you create the event in v303's calendar and invite attendees? You mean I should try to give me full access to v303's calendar and to write an event including invitation there? -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Resource Planning only works in the web calendar :-\
Am 25.06.11 01:02, schrieb Ludovic Marcotte Show the LDIF entry of that resource and the associated SOGoUserSources entry resolving it. Here you are: [sogo@limbe ~]$ defaults read sogod [...] sogod SOGoUserSources '( [...] , { CNFieldName = cn; IDFieldName = uid; KindFieldName = uniknSOGoKind; MultipleBookingsFieldName = uniknSOGoMultipleBookings; UIDFieldName = uid; baseDN = "ou=resources,o=Universitaet Konstanz,c=DE"; bindFields = ( uid, mail ); canAuthenticate = YES; displayName = "Univ. Resources"; hostname = "ldap.internal.uni-konstanz.de"; id = unikn_res; isAddressBook = YES; port = 389; type = ldap; } )' [sogo@limbe ~]$ ldapsearch -x -b "ou=resources,o=Universitaet Konstanz,c=DE" mail=v...@rooms.uni-konstanz.de # extended LDIF # # LDAPv3 # base with scope subtree # filter: mail=v...@rooms.uni-konstanz.de # requesting: ALL # # room.v303, resources, Universitaet Konstanz, DE dn: uid=room.v303,ou=resources,o=Universitaet Konstanz,c=DE objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: inetMailUser uid: room.v303 mail: v...@rooms.uni-konstanz.de cn: Besprechungsraum V303 sn: V303 uniknSOGoMultipleBookings: 1 uniknSOGoKind: location # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 [sogo@limbe ~]$ In the Web Interface all is going well, but with thunderbird / lightning (and iCal) when using "v...@rooms.uni-konstanz.de" as attendee it will mark the meeting as reserved in v303's calendar (it is there!) but it won't answer with an accept, the participant status stays on undecided. Free/Busy-Calls also get answered properly when using v...@rooms.uni-konstanz.de. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Feature Request to omit UID@SOGoMailDomain as calendar-user-address-set?
Would it be a big task to insert a configurable option to hide UIDFieldName@SOGoMailDomain in the calendar-user-address-set? In my account case, the PROPFIND results in the following: mailto:pascal.gien...@uni-konstanz.de mailto:p3749...@uni-konstanz.de "p3749640" is our internal user id which gets never to the outside, our IMAP boxes have also this name. It is the "uid" field in LDAP and with this unique id the database tables get populated by SOGo. That's good. SOGo seems to give away "p3749...@uni-konstanz.de" also as calendar user name, but this address will not be usable from the outside. Apple iCal does use this address (I don't know why) as its internal user name after creating the account and it won't recognize that "pascal.gien...@uni-konstanz.de" is the same as "p3749...@uni-konstanz.de". This is very confusing and appalling. The easiest reason would be to only issue the mail address as calendar-user-address-set, configurable by a Yes/No-Option. Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo 1.3.7: OtherUsersFolderName
Am 09.05.11 13:49, schrieb Ludovic Marcotte: On 09/05/11 07:42, Pascal Gienger wrote: Look at the Localizable.strings file from the MailerUI bundle. The keys are wrong : "Other Users" = "Andere Benutzer"; "Shared Folders" = "Gemeinsame Ordner"; It should be : "OtherUsersFolderName" = "Andere Benutzer"; "SharedFoldersName" = "Gemeinsame Ordner"; [X] Done. And it works. Thank you! Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] SOGo 1.3.7: OtherUsersFolderName
The "Other Users" do appear with their cn ldap entry and not with the uid, they get translated by SOGo. Fine! But: The toplevel hierarchy is named "OtherUsersFolderName" - I am sure this is a variable that can be set by defaults write sogod ... Does anybody have a little hint for me? Thanks :-) -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v1.3.7
Em 05/05/11 08:39, Christian Mack escreveu: Hello Daniel Müller On 05/04/2011 12:44 PM, "Daniel Müller" wrote: I tried to update to SOGo 1.3.7 on my centos 5.4 with yum: yum update sogo* Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * epel: ftp-stud.hs-esslingen.de * rpmforge: apt.sw.be * contrib: centos.de-mirror-server.de * updates: centos.de-mirror-server.de * base: centos.de-mirror-server.de * centosplus: centos.de-mirror-server.de * addons: centos.de-mirror-server.de * extras: centos.de-mirror-server.de 639 packages excluded due to repository priority protections Setting up Update Process No Packages marked for Update My Version from the WEB-GUI: Version 1.3.6 (r...@vizzini.inverse.ca 201105030659) Is this correct?? Can't see the inverse repository in the above list from yum, only RPMForge. You should try [root@mutengene ~]# yum repolist Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: ftp-stud.fht-esslingen.de * extras: ftp-stud.fht-esslingen.de * rpmforge: ftp-stud.fht-esslingen.de * updates: mirror.switch.ch repo idrepo name status SOGo Inverse SOGo Repository enabled: 34 base CentOS-5 - Base enabled: 3,535 extras CentOS-5 - Extras enabled:296 rpmforge RHEL 5 - RPMforge.net - dag enabled: 10,499 updatesCentOS-5 - Updates enabled:444 repolist: 14,808 to see whether SOGo is included or not. The lines with a star are repositories which are arbitrated between candidates proposed depending on hostfiles and mirror speeds. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo database
Am 26.04.11 00:17, schrieb Milos Wimmer: On Thu, 21 Apr 2011, Pascal Gienger wrote: We have 60552 tables now, and the WAL backup (hot backup) is still running without any problem. PostgreSQL 8.4.7 on Ubuntu 10.04 LTS Server with different volumes for DB files and for DB log (WAL) files, 1G shared memory. I have 125406 tables now, PostgreSQL 8.4.7. SOGo works without problem with so many tables. But I cannot backup database with pg_dump command. It writes: pg_dump: WARNING: out of shared memory pg_dump: SQL command failed pg_dump: Error message from server: ERROR: out of shared memory HINT: You might need to increase max_locks_per_transaction. pg_dump: The command was: LOCK TABLE public.sogodrendr0013165525c_quick IN ACCESS SHARE MODE What's the size/value of shared_buffers = ... and max_locks_per_transaction = ... in your postgresql.conf? -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo database
Am 21.04.11 07:40, schrieb Martin Rabl: @Pascal Gienger: Pascal, you work with a large SOGo-Installation, do you have any problems with the many tables? We use two Postgres instances: One locally on the SOGo system for the session table, and one in a central Postgres Server infrastructure to store all users' folders. We have 60552 tables now, and the WAL backup (hot backup) is still running without any problem. PostgreSQL 8.4.7 on Ubuntu 10.04 LTS Server with different volumes for DB files and for DB log (WAL) files, 1G shared memory. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Configure Signature in Webmail
Am 20.04.11 18:19, schrieb Ben Luey: Ok, I tried it and it works great for me. But some (most?) of my users don't get a link creating / editing the signature. It just shows "Signature: " with no text or link after it Easy trick: Change the language setting, save it, and change it back to your preferred language. It will work. I did not find out yet if it is due to preferences settings from earlier versions not being 100% compatible to 1.3.6 (rectified after saving prefs) or if it is another problem. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Mails marked read are appearing as unread again
With a parallel running thunderbird in IMAP IDLE (Push) mode to verify, I found out that reading a mail often does not mark it as read on IMAP, even if on the sogo mail view it is marked as read. A "Reload" of Mail shows the mail as unread again. Update to 1.3.6 did not change very much. I am sure it lies on the client javascript side that the appropriate call does not get sent to SOGo. Andy hints? -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo users in Quebec
Am 08.03.11 20:20, schrieb Dominique Gagnon: Hi, We would like to know if there are others users of SOGo in province of Quebec (Canada), can be governmental agencies or private ones. Cheers, Dominique Gagnon Bien dommage. J'aurais bien voulu habiter au Québec, mais la possibilité n'est jamais venue ;-) Utilisateur de SOGo en Allemagne (pour 13000 utilisateurs), ou on a toujours l'impression d'être un étranger Please excuse the french language, but I thought it would be appropriate in this Quebec case ;-) Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] SIGSEGV appearing since upgrade to 1.3.5a
I am experiencing SIGSEGV process ends of "sogod" after upgrading to 1.3.5a. Examples: Mar 06 19:14:45 sogod [5470]: [RM:Mailer] LOOKUP FAILED: SOGoMailUkrainianReply Mar 06 19:14:45 sogod [5470]: [RM:Mailer] PARENT (<0x0xe341900[WEResourceManager]:>) SAID: (nil) Mar 06 19:14:45 sogod [5470]: [WARN] SOGoMailUkrainianReply found no template named 'SOGoMailUkrainianReply' for component (fw=Mailer) Mar 06 19:14:50 sogod [25267]: <0x0xe4bfde0[WOWatchDogChild]> child 5470 exited 2011-03-06 18:48:25.407 sogod[4927] <0x0x103b9000[PostgreSQL72Channel]: connection=<0x0x109e03f0[PGConnection]: connection=0x0xe9551b0>>: message: WARNING: nonstandard use of \\ in a string literal at character 47 Mar 06 18:48:26 sogod [4927]: [ERROR] |SOGo| did not find locale for language: Chinese Mar 06 18:48:27 sogod [4927]: [ERROR] |SOGo| did not find locale for language: Chinese Mar 06 18:48:27 sogod [25267]: <0x0xe4c1030[WOWatchDogChild]> child 4927 exited Always the last message has to do about unknown locales or no suitable reply messages. What's going wrong here? CentOS 5.5, SOGo 1.3.5a. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] IMAP4 login failed?
> Mar 05 03:32:53 sogod [28271]: [ERROR] <0x0x11f7ee0[NGImap4ConnectionManager]> > IMAP4 login failed: > host=localhost, user=vangelis, pwd=yes > url=imap://vangelis@localhost/INBOX/ > base=(nil) > base-class=(nil)) > = <0x0x1588b40[NGImap4Client]: login=vangelis(pwd) > socket= address=<0x0x1363580[NGInternetSocketAddress]: host=localhost port=54671> > connectedTo=<0x0x1347eb0[NGInternetSocketAddress]: host=localhost port=143>>> > Mar 05 03:32:53 sogod [28271]: <0x015D4F40[SOGoMailFolder]:folderINBOX> > renewing imap4 password a) your dovecot allows plaintext passwords? b) your dovecot uses the same password for the imap account as you configured SOGo to use? (is the LDAP bind password identical to the dovecot IMAP mailbox password for a user)? -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Any CRM integration with SOGo
Em 04/03/11 08:47, Ladislav Pašek escreveu: Hello, has anybody successfully integrated any CRM with SOGo calendar and contacts? Any CRM capable of using external CalDAV and CardDAV connectors for calendar and vcard information should be usable. SOGo is a CalDAV and CardDAV server with a collaboration web frontend. Its job is to serve Calendar, Addresscard records and offering a mail/calendar/addressbook web frontend to the user. I don't think it would be a good idea to put proprietary connection modules into the SOGo system to work with proprietary CRM systems which can change their interface every month if they wish. -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] With PostgreSQL 8.4.7 server there's a nasty warning...
2011-03-03 08:01:13.715 sogod[951] <0x0xdf18b10[PostgreSQL72Channel]: connection=<0x0xfeca000[PGConnection]: connection=0x0xfb86c60>>: message: WARNING: nonstandard use of \\ in a string literal at character 47 HINT: Use the escape string syntax for backslashes, e.g., E'\\'. Not a showstopper. Is this worth to submit a bug? Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo logs user out after 10 minutes
Em 02/03/11 07:58, kaz.wal...@slipline.ca escreveu: Hello, I'm having a problem with my SOGo installation, I'm using the iRedMail email server suite as the backend, and have configured SOGo to use it's LDAP. In your case: # su - sogo $ defaults write sogod OCSSessionsFolderURL mysql://sogo:MYSQL_PASS@localhost:3306/sogo/sogo_sessions_folder $ exit # service sogod restart HTH. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Foreign Mail Accounts
Em 02/03/11 07:32, Pascal Gienger escreveu: Em 02/03/11 07:14, Jim Carter escreveu: So what's going wrong with TLS? In some other mailers it's interpreted as not just selection of ciphers, but SSL means fall back to unencrypted if you can't set it up, while TLS means mandatory, which is what I want. Does anyone know what SSL vs. TLS really means in SOGo? SSL means beginning SSL negotiation directly after having handshaked the TCP connection. The standard port for IMAP over SSL is 993. TLS means the usage of STARTTLS to raise a normal (unencrypted) connection to an encrypted one using an (in the IMAP case) IMAP command (STARTTLS). It just uses the normal IMAP port 143. Your external server does not seem to accept STARTTLS on port 143, so with the "SSL" setting you use the port 993 of the external mail server which just works fine. As another side note: In your setup you used Port 993. So SSL is the only thing which works. To use TLS you HAVE to set the server port to 143. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Foreign Mail Accounts
Em 02/03/11 07:14, Jim Carter escreveu: So what's going wrong with TLS? In some other mailers it's interpreted as not just selection of ciphers, but SSL means fall back to unencrypted if you can't set it up, while TLS means mandatory, which is what I want. Does anyone know what SSL vs. TLS really means in SOGo? SSL means beginning SSL negotiation directly after having handshaked the TCP connection. The standard port for IMAP over SSL is 993. TLS means the usage of STARTTLS to raise a normal (unencrypted) connection to an encrypted one using an (in the IMAP case) IMAP command (STARTTLS). It just uses the normal IMAP port 143. Your external server does not seem to accept STARTTLS on port 143, so with the "SSL" setting you use the port 993 of the external mail server which just works fine. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] LDAP addressbook
Am 01.03.11 18:51, schrieb Anil Thapa: Hello all, This might be very easy. But when I am searching address in LDAP it always returns 5 entry. for example if I type john in search field, first it takes sometime and returns with 5 john. But there are about 100 john in my LDAP. Where Can i adjust these and also to make it quicker ? Thanks A Possibility 1: A setting in your LDAP server - maximum number of entries returned by a search. Possibility 2: SOGo: As user sogo: defaults write sogod SOGoLDAPQueryLimit 25 to set the number to 25. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Foreign Mail Accounts
Am 01.03.11 07:41, schrieb Jim Carter: At home my mail is outsourced; at work my IMAP server is not the machine where I'm testing SOGo (which has a working IMAP server to which nobody ever sends mail). Thus I see my folders but my INBOX is always empty. I see the configuration option to identify the IMAP host from a field in the LDAP Persons record, but I have not yet gotten that into LDAP. The GUI is set up so it could represent foreign IMAP servers such as Gmail, but all relevant information seems to be non-editable. How can we make that happen for particular users? # su - sogo $ defaults write sogod SOGoMailAuxiliaryUserAccountsEnabled YES $ exit # service sogod restart Beware, passwords are stored in cleartext in your sql backend. Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Webmail Alternate Roles
Am 01.03.11 07:34, schrieb Pascal Gienger: Am 01.03.11 07:26, schrieb Jim Carter: I need to send mail from several "from" addresses, and in fact at home I always send from the realm at work, as you can see in this message. How does the individual user configure this in the SOGo web client? Can one of the addresses be set as the default? This is automatic if there are multiple mail attribute values in the LDAP user entry (see attachment) - we're using an LDAP setup. I forgot: The LDAP entry would look like this (only relevant portions with example data): # pg, it-staff, Universitaet Konstanz, DE dn: uid=pg,ou=it-staff,o=Universitaet Konstanz,c=DE objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: inetMailUser [...] mail: pascal.gien...@uni-konstanz.de mail: r...@uni-konstanz.de [...] -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo web save username/password
Am 28.02.11 10:22, schrieb mourik jan heupink: On 02/27/2011 06:41 PM, Bruno Leon wrote: It does not exist at all. If I remember well this is because AJAX is used for the page. Ok, that's pity... The use of AJAX makes it impossible? MJ For myself, this is an excellent feature. Typing in a username and a password should be something the user should understand. Many users type in their credentials on some public computer and very often it is stored there - not for evil purposes - just because the browser allows it. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Just a side note (success): Session table on another database than SOGo data
It just works. We have a central Postgres server with many cores, enough RAM for appropriate buffers and we have fine tuned postgresql.conf to achieve good performance and we are using WAL online archives to backup databases for "just in time" restores. But we did not want to have the session table there, imagine all transactions/changements of the session table backuped to archive files and to tape.. ;-) We're glad that the session table entry can use a completely different database instance for its session table. So it won't get backuped and it won't give megabytes of WAL logs just because users are doing something. A little Postgres instance with low memory and low performance data is sufficient - and it works. Very nice and thank you! Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Radius with SOGo
Am 22.02.11 07:56, schrieb Kiss Attila - Elastoffice: Hello, Just wondering, is possible to authenticate SOGo with a Radius server? Does anyone tried? If not there is some API where we could do it and share with SOGo community? Authentication against RADIUS is not very difficult and even with Objective C there are plenty of libraries to choose from - but RADIUS IMHO does not have the needed attributes to make things fly. You need a unique user id, a mail address, a real name (cn). RADIUS normally is used for network topologies, so you can store IP addresses or pools, ACLs to be set, user classes, PEAP authentication modules (with their apppropriate password algorithms). It's perfect if you only want a login (so you have user name checked against radius) or if you want to configure your switch to talk 802.1x (to prevent people with their private notebooks to get access to your corporate network). You would have to define a new dictionary for your radius server including all the attributes SOGo needs for a user login. My advice would be to instruct your IDM (identity manager, I am quite sure you don't feed your radius manually) to do a feed/provisioning also to an LDAP server (or SQL table) to use with SOGo. Just my $0.02, Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Be careful when choosing your database host name...
Just a little tip: When deploying a SOGo installation where the database server will not reside on the same host as the SOGo instances, be careful to select a (virtual) hostname which will NOT change for the lifetime of your installation. Use an DNS alias and use entries in /etc/hosts. Do not use an IP address as database host name. Why? In case you want/have to change your database host (ip renumbering, infrastructure change, ...) just change the IP entry for that virtual database host name (either in /etc/hosts or DNS). Otherwise... you're cooked. In sogo_folder_info, SOGo stores the URL to the actual storage tables (data, index (quick) and ACL (acl)) for each calendar and contact ressource. Example: 540 | /Users/testuser/Calendar/personal | Users | testuser | Calendar | personal | Persönlicher Kalender | postgresql://sogo:s...@ha-postgres:5432/sogo/sogotestuser0013182468c | postgresql://sogo:s...@ha-postgres:5432/sogo/sogotestuser0013182468c_quick | postgresql://sogo:s...@ha-postgres:5432/sogo/sogotestuser0013182468c_acl | Appointment As you can see, it stores links like postgresql://sogo:s...@ha-postgres:5432/sogo/sogopop211530013182468c_quick So if you change - the database host name - the database user - the database password - the database server port number then you'll have to ALTER ALL ENTRIES in sogo_folder_info. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Support for Apache sticky load balancer sessions (see inside)
I saw that bug #698 is on the roadmap for 1.3.5, nice. Another idea for that: It would be a FINE idea to include a suffix in this cookie with a unique name for that node where sogod runs on. The suffix has to be separated by a dot (and no other dot must appear in the cookie): Example: Set-Cookie: 0xHIGHFLYxSOGo=r5hfjkrblvhjlvrjehjkgfhrkj4kl3hjgb4glbv.node01; Path=/SOGo/ In that case, you may write in the front end Apache (example from my setup) BalancerMember http://10.0.0.2:2/SOGo route=edea BalancerMember http://10.0.0.3:2/SOGo route=bafoussam BalancerMember http://10.0.0.4:2/SOGo route=kousseri BalancerMember http://10.0.0.5:2/SOGo route=limbe RequestHeader set "x-webobjects-server-port" "443" RequestHeader set "x-webobjects-server-name" "sogo.uni-konstanz.de" RequestHeader set "x-webobjects-server-url" "https://sogo.uni-konstanz.de"; RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0" RequestHeader set "x-webobjects-remote-host" "%{SENDER_IP_ADDRESS}e" AddDefaultCharset UTF-8 ProxySet stickysession=0xHIGHFLYxSOGo(1) Order allow,deny Allow from all The "route" parameter on "BalancerMember" names this particular worker route and the cookie's name mentioned with "stickysession=" is used to derive the route where the request has to be sent. AN idea would be to use one of these nifty dictionary variables of "defaults" (GNUstepdefaults), something like "defaults write sogod SOGoClusterNodeName bafoussam" (as an example). The user would be on the same machine after login eliminating all kind of synchronization issues and you still have a load balanced session. If one node breaks the apache uses another route or breaks the session, it is up to you to configure it. (1) In my actual setup I am doing this voodoo magic in my updated sogosession (not yet public) apache module with an additional cookie ("uniknsogoroute") with the value "worker.${nodename} which is set from inside the module to select the right worker. It works nicely here with 4 cluster nodes. So in my config there is in reality ProxySet stickysession=uniknsogoroute Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] WOWorkersCount
Am 09.12.10 11:29, schrieb Alessio Fattorini: Thanks for your answer but my 30 users use Thunderbird + addon not sogo web access. I think that "TB3 + addon" is more heavy then web access. It's the opposite. CalDAV and CardDAV is quite lightweight compared to web access (/so/...). Heaviest CPU hog is Mail access via Web. As your thunderbirds use Mail over IMAP it won't even reach your SOGo server(s). So only CalDAV und CardDAV (Calendars, Address books) are handled by SOGo. Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] WOWorkersCount
Am 09.12.10 10:10, schrieb Alessio Fattorini: I have this model name : Intel(R) Xeon(R) CPU E5410 @ 2.33GHz cpu cores : 4 with 4 GB of RAM. SxVMemLimit is default 384 With 30 users, how should i set WOWorkersCount? Just for reference: We have now 16,000 accounts and 3,600 distinct users a day, approx 8,000 logins per day. The system runs on 4 machines with 4 cores each in load balancing mode (front end apache does the balancing and session handling). We have 10 sogod processes running per node and they are not getting all "full". Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Is there a problem replacing "x-webobjects-remote-host" with a useful information?
Is that a good or a bad idea: I just replaced RequestHeader set "x-webobjects-remote-host" "127.0.0.1" by RewriteCond %{REMOTE_ADDR} (.*) RewriteRule .* - [E=SENDER_IP_ADDRESS:%1] RequestHeader set "x-webobjects-remote-host" "%{SENDER_IP_ADDRESS}e" giving the remote user's IP address as "X-Forward:" header in mails sent by SOGo - so by looking at a mail message we can look where it originated. The side effect is that sogo.log now also takes this remote ip addresses as remote host - but all is still working properly. What's the exact meaning of "x-webobjects-remote-host"? Why was it set to 127.0.0.1? Our reverse-proxy-Apache is not on 127.0.0.1 and still this setup worked without any problem. Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] embold folders with new messages
Le 1 déc. 2010 à 14:29, Pascal Aubry (université de Rennes 1) a écrit : > Hi all, > On the webmail, it seems that nothing is done to inform the users of the > arrival of new messages in sub-folders. This is particularly blocking for > users who use sieve filters. > Are sub-folders scanned periodically as the inbox is? May this be added in > the future? They _ARE_ checked beginning from the moment you opened them the first time in your session. At least I see that from the logs. Example: x.y.z.a - - [01/Dec/2010:14:57:16 +0100] "POST /SOGo/so/pop05579/Mail//0/folderINBOX/unseenCount HTTP/1.1" 200 13 x.y.z.a - - [01/Dec/2010:14:57:16 +0100] "POST /SOGo/so/pop05579/Mail//0/folderOTRS/unseenCount HTTP/1.1" 200 13 (2477 distinct users since midnight, approx 700 sessions open at the moment. Still running without crash.) :-) Pascal-- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Integrator and Contacts woes...
Am 22.11.10 20:12, schrieb Wolfgang Sourdeau: What's the exact meaning of the publicid Thunderbird parameter? It's the id of the addressbook that you want to specify as "Directory Server" in Thunderbird, no more, no less. The term "public" is used here because it's considered that all users will have automatic read-only access to all system user sources marked with "isAddressBook = YES". It has nothing to do with the public access feature of SOGo, which has been added very recently... Ok can more than 1 address book can be set as "publicid"? In case an institution has more than one directory... (as we have)... -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Integrator and Contacts woes...
Am 22.11.10 19:30, schrieb Wolfgang Sourdeau: In SOGo, we use SQL-based addressbooks for all user addressbooks and LDAP-based addressbooks for "system addressbooks". What "system" means is that it represents a read-only source of user informations that is managed only by the system administrator and outside of SOGo itself. In Thunderbird, all user addressbooks but only one system addressbook can be used for finding users when composing emails or inviting people to an event. That's a limit of Thunderbird. In SOGo Connector, user addressbooks are synchronized (via webdav sync) with local Thunderbird addressbooks while system addressbooks are queried in real time via a carddav request. I suspect the problem that occurs is that SOGo Connector considers those 2 addressbooks as "user addressbooks" rather than "system addressbooks", which trigger webdav sync queried, which are not supported for system addressbooks. There would thus be 2 bugs: - SOGo Connector must consider them as system addressbooks - SOGo must not report those addressbooks as "webdavsync capable" In order to confirm this, please provide us with a sniff log of the SOGo traffic when this occurs, from the moment you launch Thunderbird until the problem starts to show up. Regarding your configuration, you should probably declare "unikn_users" as value for the "publicid" key mentionned by Ludovic. Following its unikn_rooms is also an LDAP system address book, containing all bookable rooms of the university. And unikn_resources will also exist, featuring ressources. If only one LDAP system addressbook may exist, I'll purge unikn_rooms to test. What's the exact meaning of the publicid Thunderbird parameter? -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Integrator and Contacts woes...
Am Montag, 22. November 2010 18:30 CET, Ludovic Marcotte schrieb: > On 10-11-22 12:27 PM, Pascal Gienger wrote: > > Thank you :-) > > Can it set to an empty string? Or can I omit it? > You can omit it. Yes, the 404 error has gone. But the loop is still there: 188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT /SOGo/dav/pop05579/Contacts/unikn_rooms/ HTTP/1.1" 207 127 188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT /SOGo/dav/pop05579/Contacts/unikn_users/ HTTP/1.1" 207 127 188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT /SOGo/dav/pop05579/Contacts/unikn_rooms/ HTTP/1.1" 207 127 188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT /SOGo/dav/pop05579/Contacts/unikn_users/ HTTP/1.1" 207 127 188.98.142.150 - - [22/Nov/2010:18:32:54 +0100] "REPORT /SOGo/dav/pop05579/Contacts/unikn_rooms/ HTTP/1.1" 207 127 It never ends, bumping sogod daemons much CPU. These two addressbooks are LDAP address books. The "normal" ones are working properly. But these LDAP address books seem to make probles with SOGo connector. Any hint? -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Integrator and Contacts woes...
Am 22.11.10 18:25, schrieb Ludovic Marcotte: Your site.js (in SOGo Integrator) is broken. Adapt the sogo-integrator.autocomplete.server.urlid preference value. Thank you :-) Can it set to an empty string? Or can I omit it? -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Integrator and Contacts woes...
Am 22.11.10 18:05, schrieb Pascal Gienger: After configuring extensions.rdf and the updates.php script I was able to load automatically connector and lightning. All calendars get recognized properly by Lightning Inverse Editions, but the SOGo connector does end in a loop: 188.98.142.150 - - [22/Nov/2010:18:02:33 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 188.98.142.150 - - [22/Nov/2010:18:02:38 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 188.98.142.150 - - [22/Nov/2010:18:02:40 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 Configuration: extensions.rdf in integrator.xpi: http://inverse.ca/sogo-integrator/extensions"; isi:updateURL="https://sogo.uni-konstanz.de/plugins/updates.php?plugin=%ITEM_ID%&version=%ITEM_VERSION%&platform=%PLATFORM%";> updates.php: $plugins = array( "sogo-connec...@inverse.ca" => array( "application" => "thunderbird", "version" => "3.104", "filename" => "sogo-connector-3.104.xpi" ), "sogo-integra...@inverse.ca" => array( "application" => "thunderbird", "version" => "3.104", "filename" => "sogo-unikn-integrator.xpi" ), "{e2fda1a4-762b-4020-b5ad-a41df1933103}" => array( "application" => "thunderbird", "version" => "1.0b2.104i", "filename" => "lightning-1.0b2.104i_mac.xpi" ) [...] https://sogo.uni-konstanz.de/plugins/$plugin["filename"] ?> It loads connector and lightning properly (I can see it accessing the Darwin_x86-gcc3 directory (in my case) to download lightning and the connector from the plugin directory (architecture-independent). Did I miss something? Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Integrator and Contacts woes...
After configuring extensions.rdf and the updates.php script I was able to load automatically connector and lightning. All calendars get recognized properly by Lightning Inverse Editions, but the SOGo connector does end in a loop: 188.98.142.150 - - [22/Nov/2010:18:02:33 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 188.98.142.150 - - [22/Nov/2010:18:02:38 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 188.98.142.150 - - [22/Nov/2010:18:02:40 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 188.98.142.150 - - [22/Nov/2010:18:02:47 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54 188.98.142.150 - - [22/Nov/2010:18:02:47 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/unikn_rooms/ HTTP/1.1" 207 127 188.98.142.150 - - [22/Nov/2010:18:02:47 +0100] "REPORT /SOGo/dav/pascal.gienger/Contacts/unikn_users/ HTTP/1.1" 207 127 It repeats and repeats... Apparently it does not like the 404. SOGoPublicAccess is set to NO, so I am wondering why he tries "Public". Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Lightning is crappy...
Am 18.11.10 16:21, schrieb Pascal Gienger: Many of them have lightning installed and I want to be prepared for this kind of things... I forgot something: With SOGo Lightning I often have the problem that I doubleclick on a calendar entry do get the details but the window won't open. At least this works here with the normal Lightning without a problem. I don't understand the different paradigma of Lightning. Look at Apple iCal. It will ask for all available calendars and delegations and will include them automatically. Why can't Lightning do that? Why you have to enter each Calender with is corresponding CalDAL URL? You could get all these URLs simply by doing the right PROPFIND on the Calendar root. Funny enough, Lightning DOES recurse the URL to /SOGo/dav/, requesting a PROPFIND at every stage - but it does not see to use informations from there. I presume it looks for an CalDAV Inbox and Outbox. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Lightning is crappy...
Am Donnerstag, 18. November 2010 15:48 CET, Wolfgang Sourdeau schrieb: > Hi Pascal, > > > I'll try to reproduce this here and I'll file a bug for Lightning (I am > > using the "normal" lightning, not the inverse edition). > > You like taking risks! > > We do offer our "version" of Lightning because of this kind of bug, why > don't you use it instead ? Simple. Because I cannot control the installation of our 12,000 users ;-) Many of them have lightning installed and I want to be prepared for this kind of things... -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Lightning is crappy...
Le 18 nov. 2010 à 09:51, André Schild a écrit : > Am 18.11.2010 09:42, schrieb Pascal Gienger: >> Just for your information: >> >> In case you delete Calendars in SOGo but do not remove these calendars in >> Lightning (1.0b2) it will loop forever. Lightning does not accept the "404" >> (not found) issued and reloads and reloads and reloads - resulting in 100% >> CPU from sogod. >> >> I used iptables with "--hit-rate" to drop requests in such cases. > Filling a bugreport at http://www.sogo.nu/bugs/my_view_page.php helps in most > cases ;) This is not a SOGo bug. SOGo behaves correctly ;-) I'll try to reproduce this here and I'll file a bug for Lightning (I am using the "normal" lightning, not the inverse edition). Pascal-- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Lightning is crappy...
Just for your information: In case you delete Calendars in SOGo but do not remove these calendars in Lightning (1.0b2) it will loop forever. Lightning does not accept the "404" (not found) issued and reloads and reloads and reloads - resulting in 100% CPU from sogod. I used iptables with "--hit-rate" to drop requests in such cases. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] German-speaking usergroup of SOGo?
Le 17 nov. 2010 à 10:34, Patrick Ben Koetter a écrit : > > You mean something like: The "German SOGo user group". We meet regularly, put > up a booth at (Linux) conferences, speak at conferences about SOGo, start the > SOGo evangelism, etc.? Ok if you think my idea was ridicolous, I'll accept that. I imagined a system where experiences in deploying such services on larger scales and typical german implications can be exchanged. If you think that this list is well and sufficient for that purpose I'll accept that opinion. Evangelism is not the kind of thing I wanted to start.-- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] German-speaking usergroup of SOGo?
Le 17 nov. 2010 à 09:06, Patrick Ben Koetter a écrit : > * Pascal Gienger : >> Are there other SOGo users in Germany, Switzerland, Austria >> deploying or planning to deploy SOGo in their institution? >> >> We at the university of Constance/Konstanz do offer the SOGo service >> already to all our students, staff members and professors/teachers. >> >> Operating System is CentOS 5.5. >> >> If there's some interest to share experiences and to look at each >> other's setup/solution I would be fine. > > +1 > > We'd join the list. We'd provide a list if that is needed. We can provide it too but I did not want to talk about a simple list but rather than real user group like a reference of SOGo users. Pascal-- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] German-speaking usergroup of SOGo?
Are there other SOGo users in Germany, Switzerland, Austria deploying or planning to deploy SOGo in their institution? We at the university of Constance/Konstanz do offer the SOGo service already to all our students, staff members and professors/teachers. Operating System is CentOS 5.5. If there's some interest to share experiences and to look at each other's setup/solution I would be fine. Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Session Cookie Obfuscator / Session management "uniknsogosession"
Am 25.10.10 23:17, schrieb Ben: If you integrate this into SOGo (which would be great -- I do not like the idea of even temp cookies having plaintext passwords), I have a feature request: session timeout. If someone leaves a connection idle for X minutes, session is no longer valid. If I understand how this patch is working, it shouldn't be hard to have postgres store the most recent access time and every X minutes remove stale sessions. DELETE FROM sessions WHERE now()-latest > Quite an easy cron job on your database. "latest" gets updated on every request.... -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Session Cookie Obfuscator / Session management "uniknsogosession"
Am 25.10.10 21:47, schrieb Ludovic Marcotte: Thanks for this. What's the license of your code? If appropriate, we could integrate it directly in SOGo instead of relying on an Apache module. Consider it as public domain. I am not used to Objective-C, so I tried to set it up as an apache module. It is a workaround. And stil no direct password is stored on the server, this is what I wanted. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Session Cookie Obfuscator / Session management "uniknsogosession"
For those who don't want to store "basic username:password" as user cookie on the browser, we decided to publish the apache module we use here to anonymize the session cookie. It refers to request nr 000698, http://www.sogo.nu/bugs/view.php?id=698 I am using 64 byte XOR keydata stored on the browser's cookie cache (and not in the session database) with which the username:password-data is "crypted" (XOR'ed) and stored in the session database. At any time this key sent by the browser is needed to get the real "SOGo cookie" to form a session. 64byte should be sufficient to outlength a normal SOGo cookie length - forming a perfect OTP algorithm (XOR keylength > message length). The browser stores the session identifier and this 64 byte "user key". Only the session identifier is stored in the session database. SOGo is a great product and we like it and also how it evolves and how requests are handled. We had a problem however to store passwords in the browser's cookie store when we cannot control the browser's environment (example: Internet site in Abidjan, Ivory Coast or Douala, Cameroon (where I sometimes reside). The obfuscation/anonymization with user key is done by an apache module, it can be found here: http://southbrain.com/software/sogosession/ Be sure to read http://southbrain.com/software/sogosession/NOTICE before. It needs at least Apache 2.0 module API so no chance to get it running with Apache 1.3.x. Have a nice monday evening. In Southern Germany it is raining and raining and everything is gray Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] iPhones and ics files
Le 29 sept. 2010 à 16:16, Ludovic Marcotte a écrit : > On 29/09/10 10:15 AM, Pascal Gienger wrote: >> We had an Apple Calendar Server here (running on OS X 10.6 server) to test >> functionality, and iPhones with iPhone OS 4 loaded were able to schedule >> appointments via CalDAV and also invitations. >> >> It's the big iOS4 change in the calendar system. >> With SOGo however you're not able to edit attendees - with the calendar >> server it worked (and no, it was NOT ActiveSync). >> >> Seems to be some kind of capability property to give to the iPhone client so >> it enables the functionality. > Can you sniff and see what Calendar Server returns that SOGo doesn't? This is a big part of the problem. We had to return the Xserve to Apple because it was a test equipment to see it their product will satisfy our needs. It did not because Apple Calendar Server only allows _ALL_ calendars of a user to be delegated/shared to another (and not each calendar separately). (Apart from other things that I had to generate a "AppleGeneratedUUID" to each LDAP dn, plus include Apple LDAP schemata in my openLDAP setup and so on and so on... :-) ). Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739-- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] iPhones and ics files
Le 29 sept. 2010 à 15:14, Robert A Wooldridge a écrit : > Mark, > > Can you explain exactly how CalDAV works well apart from invitations? If you > can't accept an invitation on your iPhone, then how does it work? I suppose > you can schedule appointments and invite others on your iPhone? > > Mark Adams wrote: >> Actually invitations only work with activesync (exchange accounts) - ics >> attachments to IMAP accounts don't work. Guess you need to talk to >> Apple! We had an Apple Calendar Server here (running on OS X 10.6 server) to test functionality, and iPhones with iPhone OS 4 loaded were able to schedule appointments via CalDAV and also invitations. It's the big iOS4 change in the calendar system. With SOGo however you're not able to edit attendees - with the calendar server it worked (and no, it was NOT ActiveSync). Seems to be some kind of capability property to give to the iPhone client so it enables the functionality. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v1.3.2
Am 21.09.10 19:08, schrieb Pascal Gienger: First impression: Calendar delegation in Apple iCal 10.5 does not work any more. You see the shared calendar but when you activate it in "Delegation" you'll get an error. Sorry, I take that bug. I made a typo. My face is really red (*blush*) now and I am hiding myself in the darkest corner of this list für five minutes ;-) -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v1.3.2
Am 21.09.10 18:17, schrieb Ludovic Marcotte: The Inverse Team is pleased to announce the immediate availability of SOGo 1.3.2. This is a minor release of SOGo which focuses on small new features and improved stability over previous versions. First impression: Calendar delegation in Apple iCal 10.5 does not work any more. You see the shared calendar but when you activate it in "Delegation" you'll get an error. -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] iphone caldav invitees
Le 21 sept. 2010 à 15:02, Mark Adams a écrit : > Not from the iPhone. apple have neglected to include this feature With iOS 4.x it should work but I can't test it, I don't have an iPhone at my hands at the moment. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo ZEG v1.3.1
Am 16.09.10 22:17, schrieb Patrick Ben Koetter: Same Question from me. The Ubuntu-Server-Guide advises Dovecot: http://doc.ubuntu.com/ubuntu/serverguide/C/postfix.html#postfix-dovecot And the big Postfix book by Hildebrandt/Koette the authors switch in the last edition to Dovecot, too. And we wouldn't switch back... ;) p...@rick Just my $0.02 and please don't do an advocacy discussion here - I/we am/are using both. On our main campus we have approx 15,000 accounts on Cyrus IMAP with cache files on fast storage (perhaps moving to SSD in the future) and mail data on classical RAID storage (redundant fiberchannel infrastructure). Performance is great and with ZFS as file system the nightly snapshot backups gets done in 3 hours for 35,000,000 files to check. Cyrus IMAP can use SQL tables for its index databases as well as skiplist (very fast!). Privately I use dovecot for my hosted server. Both are good products but following different pardigmas. SOGo should not rely on special features of Cyrus IMAP or Dovecot, it should use IMAP. As Dovecot also uses IMAP ACLs there should be no issue with SOGo. I don't know however wheter dovecot already allows extended ACLs. Pascal -- Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Gray/inactive menu entries in mailbox context menus...
Why many of the menu entries are greyed out? Did I miss something in my configuration? It is not possible to mark all messages as read, it is not possible to subscribe to folders, it is not possible to search through messages. Are these features not implemented yet or do I have to enable these things somewhere? Attached screenshot shows the greyed options. IMAP Server is Cyrus IMAP 2.3.16 with extended ACL, body indexed by squat (SEARCH BODY works). Pascal -- Pascal Gienger University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739<>-- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] iOS 4 CardDAV support
Am 10.08.10 16:58, schrieb Wolfgang Sourdeau: Hi Pascal, Thank you for the tip on using the 8443 port. 8843. CardDAV/SSL is 8843 for Apple ;-) -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] iOS 4 CardDAV support
Am 29/07/10 14:51, schrieb Mark Adams: No, I think you are thinking of CalDAV (for calendars) which allows you to configure the URL. Unfortunately with CardDAV on iphone and in address book this is hardcoded. Thanks Apple... It simply does a PROPFIND / on Port 8843 (SSL) to the given server. This is simple to solve. For this Apache has to send out an authentication request (you're lucky if you have ldap as auth base for SOGo) and then call a script which sends the requested XML propfind result. A much better solution would be a special SOGo URL, i.e. /SOGo/dav/carddavrequest which does that (auth check and output of propfind result), so that a rule like stuff omitted RewriteRule ^/$ /SOGo/dav/carddavrequest [PT] would be enough to enable it. Good enough for a feature request? But (look at my other post) Apple Addressbook does a strange REPORT which breaks things up - you can ADD entries to the address book but you will never see them in Apple Addressbook. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Apple OS X 10.6 CardDAV access....
After some Rewriting Mess and a quick&dirty script to give the correct output I managed to give Apple Addressbook the right top-level-root automatically. Apple Addressbook _ONLY_ issues a PROPFIND / on port 8843 on the server given by the user. There are NO OTHER controls. I managed my apache to give the right top-level-property-url for the given user (after Apache LDAP auth and %{LA-U:REMOTE_USER} with [PT] ). Result (sogo.log, after Addressbook found out the toplevel directory for DAV): 127.0.0.1 - - [29/Jul/2010:12:42:16 GMT] "PROPFIND /SOGo/dav/pascal/ HTTP/1.1" 207 374/167 0.023 - - 0 127.0.0.1 - - [29/Jul/2010:12:42:16 GMT] "PROPFIND /SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/ HTTP/1.1" 207 331/232 0.033 - - 0 Jul 29 12:43:03 sogod: SOGo watchdog [1799]: [obj-dav-dispatch] did not find a method to server the REPORT 127.0.0.1 - - [29/Jul/2010:12:43:03 GMT] "REPORT /SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/ HTTP/1.1" 501 201/150 0.024 - - 0 [obj-dav-dispatch] did not find a method to server the REPORT Is the show stopper here: Apple Addressbook issues: REPORT /SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/ HTTP/1.1 Host: bafoussam.rz.uni-konstanz.de:8843 User-Agent: Carnet%20d%E2%80%99adresses/870 CFNetwork/454.9.7 Darwin/10.4.0 (i386) (iMac5%2C1) Content-Type: text/xml; charset=utf-8 Accept: */* Accept-Language: fr-fr Accept-Encoding: gzip, deflate Authorization: X x-webobjects-server-port: 8843 x-webobjects-server-name: bafoussam.rz.uni-konstanz.de:8843 x-webobjects-server-url: https://bafoussam.rz.uni-konstanz.de:8843 x-webobjects-server-protocol: HTTP/1.0 x-webobjects-remote-host: 127.0.0.1 X-Forwarded-For: 134.34.1.113 X-Forwarded-Host: bafoussam.rz.uni-konstanz.de:8843 X-Forwarded-Server: bafoussam.rz.uni-konstanz.de Connection: close Content-Length: 572 /SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55CC-4C4DD400-5-93E2980.vcf/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55CC-4C4DD400-7-93E2980.vcf/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55D3-4C4DD400-1B-6AE9230.vcf/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55D3-4C4DD480-1D-6AE9230.vcf Result: HTTP/1.0 501 Request failed content-length: 201 content-type: text/html; charset="iso-8859-1" http://www.w3.org/1999/xhtml";> An error occurred during object publishingdid not find the specified REPORT SOGo told Apple Addressbook about the existence of these four Entries (.vcf). Addressbook issues a REPORT command afterwards for these four "cards", resulting in a 501 Request failed error from Sogo. What's going on there? -- Pascal Gienger University of Konstanz, IT Services Department ("Rechenzentrum") Electronic Communications and Web Services Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] SOGoMailListViewColumnsOrder
Is there also a possible "UUID" column to be able to sort in the order of reception of these mails? Sorting by date is sometimes bad when a sender has configured a wrong timezone or did not synchronize his computer clock. Also some Spams (which rarely achieve to pass our spam filters) are always on top because of a date in the future. Thunderbird offers this option. Pascal -- pas...@southbrain.com http://southbrain.com/ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Serious Bug: Username and Passwort in Cookie (!)
I just stumbled upon a decrypted session to our sogo host and the browser sends this: POST /SOGo/so/my_user_name/Mail//my_D_name_A_mydomain_D_de/folderINBOX/uids HTTP/1.1 Host: bafoussam.rz.uni-konstanz.de User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; fr; rv:1.9.2.7) Gecko/20100713 Firefox/3.6.7 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: fr,fr-fr;q=0.8,en-us;q=0.5,en;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Referer: https://bafoussam.rz.uni-konstanz.de/SOGo/so/my_user_name/Mail/view Cookie: 0xHIGHFLYxSOGo=basic%20 Cookie: 0xHIGHFLYxSOGo=basic%20 is the culprit, the XXX is exactly the base64 encoded form of "username:password" as it is used by Basic HTTP auth. This cookie stays stored on the user's browser. From my understanding this is a security no-go, it should be an anonymous random hash code which is only describing an entry in the session table of the web application, so when the session has timed out the cookie has become worthless. This cookie is valid forever, even after logout - more: just by searching the cookie database of the browser you'll get the user account and his password! -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v1.3.0
Am Mittwoch 21 Juli 2010 17:48 CEST, Ludovic Marcotte schrieb: > The Inverse Team is pleased to announce the immediate availability of > SOGo 1.3.0. This is a minor release of SOGo which focuses on small new > features and improved stability over previous versions. Thank you for the release! The first impression: In the webinterface, in "Mail" view, it loads _ALL_ Mailheaders now. With 1.2.2 you got 150 results per Page which you could load by clicking the "next" arrow. My Inbox has 14072 messages at the moment and it sends 160kb (37kb compressed) data to the client, and it uses a whole cpu for approx 1 second. Pascal -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] How to kill a specific session?
Where does SOGo store session data? Imagine you want to remotely "kill" a session (because a user forgot to log off from the /SOGo/so/ web interface at a public place), how would you do it? I did not find a session database on the db tables containing the valid session cookies or other data. It is done in memory, in memcached or by some other means? -- Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste" Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Unable to Subscribe iCal 4 to caldav calendar
Am Donnerstag 15 Juli 2010 02:50 CEST, Chris Hobbs schrieb: > Wolfgang correctly guessed at my error. I was using the > Calendar->Subscribe menu to try to get access to the Calendar. The > correct process was to go to the Account Tab under Preferences and > create a CalDAV account with the appropriate username and password > pointing to https://mail.nhusd.k12.ca.us/SOGo/dav/chobbs/ With iCal 4 (OS X 10.6) you can also trigger the automatic configuration if you know that Apple iCal first tries to connect to port 8443 (using ssl) of the server you typed in in the "new account"-wizard. It does a PROPFIND on /principals/users// The "dirty" solution is to use a RedirectMatch on an apache port 8443 virtual host on ^/principals/users/(.*) to /SOGo/dav/$1/Calendar/ iCal honors this Redirect and then jumps to the correct top-CalDAV-URL. It will then find your calendar in its 2nd try which is acceptable. If you want to find him the calendar in his 1st try (because you're frightened that iCal 5 will expose this behaviour (like the OS X address book.. (!)), then things get more complicated. The first iCal guess is /principals/users/ Problem 1: You can't redirect it nor rewrite it because you don't have any auth in this stage (so you won't be able to tell which username is provided). So you must use Apache auth using the same(!) auth data source (LDAP, SQL) and the same authentication name ("SOGo"). So then you may hack a RewriteCond %{LA-U:REMOTE_USER} ..* RewriteRule ^/principals/(.*) /SOGo/dav/%{LA-U:REMOTE_USER}/ [PT] using a AuthType basic Authname "SOGo" AuthBasicProvider ldap AuthLDAPURL "ldap://ldap-server:389/dc=mybase,dc=com?uid?sub?(objectClass=*)" Require valid-user (as an example for ldap auth, the auth user id is "uid"). This is NOT a beautiful solution because of two different authentification processes (apache and Sogo). It was only a "will it work like this"-try. Children don't try this at home. And yes, it works. The rest of the virtual host is the same as in "SOGo.conf" (ProxyPass /SOGo http://127.0.0.1:2/SOGo interpolate and so on...). Background: The apple address book only features a "username", "password" and "servername" configuration screen for a new carddav account. I strongly believe that Apple will do the same thing on their next iCal. Apple addressbook is worse, it does a PROPFIND / as first try and breaks if it fails... But even that you can tackle with rewrites as Apple addressbook first tries to contact Port 8843 (with ssl). These are the standard ports of apple calendar server. -- Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste" Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Android/Caldav compatibility
Le Mercredi 14 Juillet 2010 12:51 CEST, Mickaël Misbach a écrit: > Hello everyone, > I have to buy a phone which can synchronize with sogo. > Has anybody tried to synchronize SOGo via CalDAV with this app : > http://www.hypermatix.com/products/calendar_sync_for_android > Unfortunately I don't have any android based phone to try it. > Thanks. It works but keep in mind it is a simple application. it allows only one calendar URL to be entered and data about attendees and their acceptance or refusal of the invitation is not transferred. I am using it with SOGo and my HTC Legend (Android 2.1). if you have any configuration questions, drop me a note. Pascal -- Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste" Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] IMAP Mailboxnames with "&" and Appointment Texts with semicolon
Hi there, with SOGo 1.2.2 the following two things appear: - IMAP foldernames with properly UTF-7-encoded ampersands ("&") are displayed correctly, but when dragging a message into them a new folder is created and named with the part of the original mailbox name before the "&". Example: You create with an IMAP client a mailbox named "Dies&Das". It is properly encoded as "Dies&-Das". This mailbox appears in SOGo (Webinterface) as "Dies&Das". After putting a message into it it remains empty but a new mailbox has been created with the name "Dies", containing the dropped messages. - Appointment Texts/Descriptions containing a semicolon When typing a semicolon in the text the whole part after the semicolon including the semicolon itself is discarded. Example: Test meeting; please accept results in Test meeting We are using PostgreSQL 8.1 (CentOS 5.5 version) as backend database. Relevant packages: sogo-1.2.2-1.el5 sope49-xml-4.9-20100504_1664.el5.1 sope49-core-4.9-20100504_1664.el5.1 sope49-mime-4.9-20100504_1664.el5.1 sope49-gdl1-contentstore-1.2.2-1.el5 sope49-gdl1-postgresql-4.9-20100504_1664.el5.1 sope49-appserver-4.9-20100504_1664.el5.1 sope49-gdl1-4.9-20100504_1664.el5.1 sope49-cards-1.2.2-1.el5 sope49-ldap-4.9-20100504_1664.el5.1 memcached-1.4.5-1.el5.rf libmemcached-0.34-1 postgresql-server-8.1.21-1.el5_5.1 postgresql-libs-8.1.21-1.el5_5.1 postgresql-8.1.21-1.el5_5.1 [pas...@bafoussam ~]$ uname -a Linux bafoussam 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux [pas...@bafoussam ~]$ Is there a workaround? It is due to a bug in sql parsing/processing (escape characters, quotation)? Is there a configuration option? Ah - yes - inviting users does not work with Safari (4.x and 5.x), you cannot add an attendee, there is no new line being inserted. firefox and ie8 do work. :) Besides of that, nice product, we're evaluating it to use it here (this mail is written with SOGo). -- Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste" Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de -- users@sogo.nu https://inverse.ca/sogo/lists