[SOGo] SOGo crashes when the SOGo mail spool is full

2012-02-06 Thread Pascal Gienger
SOGo leaves many files in the SOGo mail spool directory and even with a 
cron job deleting all files which were not modified for X days, it is 
still possible to crash sogo by filling it with attachments and breaking 
the session.


Would'nt it be possible to include a check for this spool space or some 
kind of garbage collection?


It is the directory referenced by SOGoMailSpoolPath .

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
G+: https://plus.google.com/114525323843315818983/
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Crash server

2012-01-31 Thread Pascal Gienger
Le 31/01/2012 11:26, l.dubai...@eurytos.fr a écrit :
> Hi Julian,
> 
> I have 20 users, my server is a CentOS 5.7, I will increase the PREFORK
> value.

We had similar problems when our IMAP backend had a problem and returned
answers too slowly.

Is your IMAP server accessible and returns answers in a timely fashion?


-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
G+: https://plus.google.com/114525323843315818983/
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Changing display of related emails in WebGUI similar to newer TB versions

2012-01-26 Thread Pascal Gienger
Le 26/01/2012 10:04, Pascal Gienger a écrit :
> Le 26/01/2012 09:41, Alessio Fattorini a écrit :
>> Il 25/01/2012 21:08, Mirko Stoffers ha scritto:
>>> Hi Georg,
>>>
>>> in my opinion the web interface is not meant to be the primary interface
>>> for extensive mail management. It is rather meant to be used on PCs
>>> where you don't want (be allowed) to install a fat client since you do
>>> not use them every day.
>>
>> +1
> 
> 
> The problem lies in the wrong assumption which collides with the reality.
> 
> As I can see here, people want WEB. More, they want APP on their mobile
> phone. They're not capable (or maybe not wanting) to configure their
> mail App on their Pad or Phone and they try to search for an "Uni
> Konstanz Mail App" (in our case).

Part which I forgot:

So to address the greatest possible audience, the web interface of SOGo
is the key to success.

All these little functions which are not implemented yet (like "Mark all
messages as read") will be the killer feature - "Thunderbird in the
cloud". That's what people want.

I also saw iPad owners using SOGo with their Mobile Safari (because they
did not find an App for it).

Local storage is dead. Local software on desktop and notebook computers
is dead. It is up to us to adapt to stay within the audiences' interest.


-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
G+: https://plus.google.com/114525323843315818983/
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Changing display of related emails in WebGUI similar to newer TB versions

2012-01-26 Thread Pascal Gienger
Le 26/01/2012 09:41, Alessio Fattorini a écrit :
> Il 25/01/2012 21:08, Mirko Stoffers ha scritto:
>> Hi Georg,
>>
>> in my opinion the web interface is not meant to be the primary interface
>> for extensive mail management. It is rather meant to be used on PCs
>> where you don't want (be allowed) to install a fat client since you do
>> not use them every day.
> 
> +1


The problem lies in the wrong assumption which collides with the reality.

As I can see here, people want WEB. More, they want APP on their mobile
phone. They're not capable (or maybe not wanting) to configure their
mail App on their Pad or Phone and they try to search for an "Uni
Konstanz Mail App" (in our case).

The new paradigm for mobile devices seems to be "for each service you
need an App" and for notebooks and desktops "it has to be done with the
web browser, I don't want to install software". You notice the
schizophrenia in this?

We have plenty of users stating "I don't want to install a software on
my computer. It must run on my Internet Explorer, it has to be cloud!
*sigh*" (Cloud == application on the web browser, that's what they think!).

90% of our users take the web frontend, even at the office! We support
real mail clients, sure, but they don't want them. Web Web Web!

And if we wouldn't offer it they would go to Google, because students
can go wherever they want. We see massive people using Google Mail to
read mail stored on our servers (including storing their password at
Google).

The battle is lost, installable software on the desktop/notebook PC like
a fat mail client will decline in the time to come, only in the mobile
world of these castrated walled garden systems people are happy to spend
even dollars to buy an "App" from an "App Store" and pay money for it -
to install a fat client.

If Inverse would compile an iOS iPhone/iPad "App" for access to a SOGo
system which many nice animations and designed like a Disney software
for little children, people would buy it for $10 each. I promise it!

This App - sure - has to use a "web service" to overcome all firewalls
and narrow minded "data packs" which allow only port 80 and 443 connects.



-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
G+: https://plus.google.com/114525323843315818983/
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Failed login after adding ldap index for uid attribute

2012-01-24 Thread Pascal Gienger
Le 24/01/2012 14:23, Georg Bretschneider a écrit :
> Hi Christian,

> I hope, someone will come up with an idea. Within the next months I
> won't have time for further and time expensive testing.

Raise openldap's debug level in your test setup and see the exact search
filter string.


-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
G+: https://plus.google.com/114525323843315818983/
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Cannot Log Into SOGo After Install

2012-01-23 Thread Pascal Gienger

Le 23/01/2012 03:04, Nathan Acks a écrit :

I've been searching Google and the list here all day, and can't find anything 
that seems to match my problem. Basically, I have SOGo set up to use a custom  
port on my server, and can access it at


Hi Nathan,

first: your mail fell into my spam filter (Ironport), you were my first 
false positive for 5 years now... :-(






Jan 22 17:22:00 sogod [27842]: |SOGo| starting method 'GET' on uri 
'/SOGo/myuser'
Jan 22 17:22:00 sogod [27842]:<0x0x700c78[SOGoWebAuthenticator]>  tried wrong 
password for user 
'1477YRibp8H12nCyarBR4mXtiSE6NOfcK5fYify0hLcLblrcGrvTCOsru/h+M8ibjRTeFwu/i/Zz4kP12Ro/nw=='!


[...]


SOGoUserSources


canAuthenticate
YES
displayName
SOGo Users
id
sogo_db
isAddressBook
YES
type
sql
userPasswordAlgorithm
sha
viewURL

mysql://sogo:sogopassword@localhost:3306/sogo/sogo_auth




How the user passwords are coded in your "sogo_auth" table? How the 
columns are named?


Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
G+: https://plus.google.com/114525323843315818983/
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Read/unread marks-Problem was solved with Cyrus 2.4.13

2012-01-07 Thread Pascal Gienger

Just a little feedback:

The problem with inconsistent Read/Unread-Marks was completely solved by 
upgrading to Cyrus 2.4.x, 2.4.13 in our case.


The biggest problem were the index updates to the 13,000 INBOXes which 
put our storage system to whine, (max IOPS was not foreseen for this 
job), so a delay was taken into consideration - and it was a delay - 
delivering processes just touched the INBOX so index rebuild was 
triggered. With some Postfix parameters (first delivery try timeout very 
very very low, so INDEX generation is triggered but the delivering 
process will not block, it will timeout and the mail will get deferred 
in the Postfix queue, 2nd retry time low enough so that the delay will 
be acceptable).


The fruits of the delay are: Consistent read/unread and a speed bump.
So all question regarding read/unread from our side can be closed, it 
was Cyrus 2.3.x which has a problem here on high volume sites.


(Comments stating that I should use Dovecot, because this is the way to 
go and "all mail gurus like M Heinlein say you must use this" and "cyrus 
is obsolete" will be thrown to trash, I am really fed up with these 
discussions always popping up).


--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Solved (was: Re: [SOGo] /dav.woa/ ?)

2011-12-14 Thread Pascal Gienger
Le 14/12/2011 06:05, Pascal Gienger a écrit :
> Starting with SOGo 1.3.10, we see strange requests in the log:
> 
> XXX - - [12/Dec/2011:08:41:25 +0100] "GET
> /dav.woa/WebServerResources/PasswordPolicy.js HTTP/1.1" 404 265


Was the wrong httpd.conf, mea culpa!


Pascal
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] /dav.woa/ ?

2011-12-13 Thread Pascal Gienger

Starting with SOGo 1.3.10, we see strange requests in the log:

XXX - - [12/Dec/2011:08:41:25 +0100] "GET 
/dav.woa/WebServerResources/PasswordPolicy.js HTTP/1.1" 404 265
XXX - - [12/Dec/2011:08:41:38 +0100] "GET 
/dav.woa/WebServerResources/generic.css HTTP/1.1" 404 261
XXX - - [12/Dec/2011:08:41:38 +0100] "GET 
/dav.woa/WebServerResources/dtree.css HTTP/1.1" 404 259



Normally it should read /SOGo.woa/ - most of the request are in fact 
/SOGo.woa/
In the apache config there was no alias for /dav.woa/ so the login 
screen was quite garbled.



Example (using my IP so no data security problem):

188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/SOGo.woa/WebServerResources/SOGoResizableTable.js HTTP/1.1" 200 2602
188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/SOGo.woa/WebServerResources/SOGoMailDataSource.js HTTP/1.1" 200 2385
188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/SOGo.woa/WebServerResources/SOGoDataTable.js HTTP/1.1" 200 3279
188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/dav.woa/WebServerResources/menu-nocheck.gif HTTP/1.1" 200 74
188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/dav.woa/WebServerResources/dragdot.png HTTP/1.1" 200 174
188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/dav.woa/WebServerResources/Search-bar.png HTTP/1.1" 200 820
188.110.230.78 - - [14/Dec/2011:06:04:45 +0100] "GET 
/dav.woa/WebServerResources/thead_bg.png HTTP/1.1" 200 951



Where can I look for the mistake? Where does this "/dav.woa/" originate 
from?


Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] email notify error

2011-12-05 Thread Pascal Gienger

Le 05/12/2011 11:37, Alain DEFRANCE a écrit :

Hi all

with sogo i never received email notify
the message in the logs ei :

sogo-ealarms-notify[3402] EMail alarms are disabled in the SOGo
configuration.

but in my GNUstepDefaults file i have

SOGOEnableEMailAlarms
 YES

wha't the problem ?


OCSEMailAlarmsFolderURL set?
sogo-ealarms-notify put in the sogo user's crontab (every minute)?

Pascal

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] HELP !!! /etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh: Aucun fichier ou répertoire de ce type Restarting SOGo: /usr/GNUstep/System/Tools/Admin/sogod: error

2011-10-29 Thread Pascal Gienger

Le 29/10/2011 14:28, Francis Lachapelle a écrit :


On 2011-10-29, at 6:00 AM, Pascal Gienger wrote:


Since upgrade of my Centos 5 , I thing GNUStep alose upgrade :(

No I have this error when I try to start sogod

[root@serv1 ~]# service sogod start
/etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh:


This is a bug in /etc/init.d/sogod:

[root@limbe init.d]# diff -u sogod.orig sogod
--- sogod.orig  2011-10-28 15:28:53.0 +0200
+++ sogod   2011-10-29 11:59:07.0 +0200
@@ -70,7 +70,7 @@
. /etc/rc.d/init.d/functions
if [ -z "$GNUSTEP_SYSTEM_ROOT" ]
then
-  . /usr/GNUstep/System/Library/Makefiles/GNUstep.sh
+  . /usr/share/GNUstep/Makefiles/GNUstep.sh
fi

DAEMON_OPTS="-WOWorkersCount $PREFORK -WOPidFile $PIDFILE -WOLogFile $LOGFILE"


Even better :

http://mtn.inverse.ca/revision/diff/5dcf2a67f6b5d914d3f329aec3830f2484679b43/with/620e40dba861cf20ff94cffda921d7b7b564d061


Ok :-) 1:0 for you!

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] HELP !!! /etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh: Aucun fichier ou répertoire de ce type Restarting SOGo: /usr/GNUstep/System/Tools/Admin/sogod: error

2011-10-29 Thread Pascal Gienger

Le 28/10/2011 21:55, g...@orthobourg.com a écrit :

Hi ,

Since upgrade of my Centos 5 , I thing GNUStep alose upgrade :(

No I have this error when I try to start sogod

[root@serv1 ~]# service sogod start
/etc/init.d/sogod: line 73: /usr/GNUstep/System/Library/Makefiles/GNUstep.sh:


This is a bug in /etc/init.d/sogod:

[root@limbe init.d]# diff -u sogod.orig sogod
--- sogod.orig  2011-10-28 15:28:53.0 +0200
+++ sogod   2011-10-29 11:59:07.0 +0200
@@ -70,7 +70,7 @@
 . /etc/rc.d/init.d/functions
 if [ -z "$GNUSTEP_SYSTEM_ROOT" ]
 then
-  . /usr/GNUstep/System/Library/Makefiles/GNUstep.sh
+  . /usr/share/GNUstep/Makefiles/GNUstep.sh
 fi

 DAEMON_OPTS="-WOWorkersCount $PREFORK -WOPidFile $PIDFILE -WOLogFile 
$LOGFILE"



Pascal

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo 1.3.9 Update results

2011-10-29 Thread Pascal Gienger

Le 29/10/2011 11:19, Dominique a écrit :

Hi,

I just updated to version 1.3.9 from version 1.3.8b with mixed results:
1. In the address book, double clicking an entry returns a new empty
window with the following error:
"An error occurred during object publishing
the requested ob/usr/lib64/GNUstep/SOGo/WebServerResourcesject could not be 
found!"
2. The calendar window is empty where severa

On Redhat/CentOS,

the static elements and templates changed from

/usr/GNUstep/System/Library/SOGo/WebServerResources

to

/usr/lib64/GNUstep/SOGo/WebServerResources


If you use an SSL proxy or own httpd config file, look if you missed that.

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Library link error in samba4

2011-10-21 Thread Pascal Gienger
When provisioning (setup/provision) breaks with an error message stating
that tdb_compat (et.al.) were not found:


In the documentation all the needed libraries are under
/usr/local/samba/lib, but three needed libraries are in

/usr/local/samba/lib/ldb:

lrwxrwxrwx 1 root root33 oct 21 13:09 libccan.so.0 ->
libccan.so.0.1-init-1161-g661d41f
-rw-r--r-- 1 root root 49715 oct 21 13:09 libccan.so.0.1-init-1161-g661d41f
-rw-r--r-- 1 root root 38304 oct 21 13:10 libldb-cmdline.so
-rw-r--r-- 1 root root 17804 oct 21 13:09 libtdb_compat.so


So there are not found because they are not in the library search path
(ldconfig) nor they are coded in the shared objects. Symlinking them to
/usr/local/samba/lib did the job and provisioning did well.


Thank you for your work.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] ANN: SOGo v2.0.0beta2 with Native Outlook Compatibility

2011-10-21 Thread Pascal Gienger
Le 21/10/2011 13:04, Pascal Gienger a écrit :
> Le 21/10/2011 01:35, Ludovic Marcotte a écrit :
>> Inverse is proud to announce the second beta release of SOGo v2.0.0 with
>> native Microsoft Outlook compatibility.
> 
> Thank you!
> 
> I tried to build it on CentOS 5 (to see whether it works), and after
> compiling all components as described in the manual, the setup/provision
> (in ./samba4/source) breaks and dumps core. It is the python2.7
> interpreter who dumps core in ldb.c:

"Kommando zurück!" the germans would say...
Was my fault, there was a wrong ldb.so in the PYTHONPATH, which was not
belonging to the samba4 one.

I beg your pardon!
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] ANN: SOGo v2.0.0beta2 with Native Outlook Compatibility

2011-10-21 Thread Pascal Gienger
Le 21/10/2011 01:35, Ludovic Marcotte a écrit :
> Inverse is proud to announce the second beta release of SOGo v2.0.0 with
> native Microsoft Outlook compatibility.

Thank you!

I tried to build it on CentOS 5 (to see whether it works), and after
compiling all components as described in the manual, the setup/provision
(in ./samba4/source) breaks and dumps core. It is the python2.7
interpreter who dumps core in ldb.c:


DSO at 0x77dd6000
Core was generated by `python ./setup/provision --realm=UNI-KONSTANZ.DE
--domain=UNI-KONSTANZ --adminp'.
Program terminated with signal 11, Segmentation fault.

#0  0x2ae94c7dc561 in ldb_get_opaque (ldb=0x0, name=0x2ae94c39d2b5
"SAMBA_HANDLERS_REGISTERED") at ../common/ldb.c:1823

1823for (o=ldb->opaque;o;o=o->next) {
(gdb)



It is part of this loop:

void *ldb_get_opaque(struct ldb_context *ldb, const char *name)
{
struct ldb_opaque *o;
for (o=ldb->opaque;o;o=o->next) {
if (strcmp(o->name, name) == 0) {
return o->value;
}
}
return NULL;
}



Did you do any special things to make your nightly RedHat packages which
is differently from the manual which describes the build process for Ubuntu?

Gnustep, SOPE and SOGo are working properly. For OpenChange I had to
compile the citadel freeassociation libical which was not a big thing.

Pascal
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Could not find framework SOGo in any standard location

2011-10-12 Thread Pascal Gienger
Le 12/10/2011 16:17, Ludovic Marcotte a écrit :
> On 12/10/11 10:13, Pascal Gienger wrote:
>> Any idea? (Besides waiting for the precompiled 2.0.0 packages)?
> Create a link:
> 
> % mkdir /usr/GNUstep/System/Library/Frameworks
> % ln -s /usr/GNUstep/System/Library/SOGo/SOGo.framework
> /usr/GNUstep/System/Library/Frameworks/SOGo.framework
> 
> It's a bug in our makefile with recent versions of GNUstep make/base.
> 
> Regards,
> 

Thank you very much, it works.

-- 
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Could not find framework SOGo in any standard location

2011-10-12 Thread Pascal Gienger
I tried to compile SOGo 2.0.0-beta for our system, GNUStep 1.22.

gdl2-postgresql works, SOPE is installed correctly (I did all in SYSTEM
context, but the same error appears when installing all parts in LOCAL).

The resulting sogod breaks with this error message:

[sogo@bamenda ~]$ /usr/GNUstep/System/Tools/Admin/sogod -WOWorkersCount
20 -WOPidFile /var/run/sogod.pid -WOLogFile /var/log/sogo.log
2011-10-12 16:08:14.390 sogod[30098] File NSBundle.m: 711. In
+[NSBundle(Private) _addFrameworkFromClass:] Could not find framework
SOGo in any standard location
<0x0x1012aef0[NGBundle]> SOGoDefaults.plist not found

The SOGO.framework is in

/usr/GNUstep/System/Library/SOGo/SOGo.framework

which is linked to

/usr/GNUstep/System/Library/SOGo/SOGo.framework/Versions/2



All libraries for SOGo are correctly linked:

[sogo@bamenda ~]$ ldd /usr/GNUstep/System/Tools/Admin/sogod
linux-vdso.so.1 =>  (0x7fffbbbfd000)
libSOGo.so.2 => /usr/GNUstep/System/Library/Libraries/libSOGo.so.2
(0x2ba6e2cd9000)
libOGoContentStore.so.0.9 =>
/usr/GNUstep/System/Library/Libraries/libOGoContentStore.so.0.9
(0x2ba6e2fbd000)
libGDLContentStore.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libGDLContentStore.so.4.9
(0x2ba6e31c2000)
libGDLAccess.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libGDLAccess.so.4.9
(0x2ba6e33ff000)
libWEExtensions.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libWEExtensions.so.4.9
(0x2ba6e36c)
libNGCards.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libNGCards.so.4.9 (0x2ba6e39f)
libNGObjWeb.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libNGObjWeb.so.4.9
(0x2ba6e3c58000)
libNGMime.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libNGMime.so.4.9 (0x2ba6e41a2000)
libNGLdap.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libNGLdap.so.4.9 (0x2ba6e4517000)
libNGStreams.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libNGStreams.so.4.9
(0x2ba6e4749000)
libNGExtensions.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libNGExtensions.so.4.9
(0x2ba6e49c6000)
libEOControl.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libEOControl.so.4.9
(0x2ba6e4c8a000)
libDOM.so.4.9 => /usr/GNUstep/System/Library/Libraries/libDOM.so.4.9
(0x2ba6e4ee4000)
libXmlRpc.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libXmlRpc.so.4.9 (0x2ba6e513b000)
libSaxObjC.so.4.9 =>
/usr/GNUstep/System/Library/Libraries/libSaxObjC.so.4.9 (0x2ba6e5365000)
libgnustep-base.so.1.22 =>
/usr/GNUstep/System/Library/Libraries/libgnustep-base.so.1.22
(0x2ba6e558b000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x0036e0e0)
libobjc.so.1 => /usr/lib64/libobjc.so.1 (0x2ba6e5cc1000)
libm.so.6 => /lib64/libm.so.6 (0x0036e160)
libc.so.6 => /lib64/libc.so.6 (0x0036e060)
libmemcached.so.8 => /usr/local/lib/libmemcached.so.8 
(0x2ba6e5ede000)
libSBJson.so.2 => /usr/GNUstep/System/Library/Libraries/libSBJson.so.2
(0x2ba6e6113000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x003f9a20)
libldap-2.3.so.0 => /usr/lib64/libldap-2.3.so.0 (0x2ba6e6321000)
liblber-2.3.so.0 => /usr/lib64/liblber-2.3.so.0 (0x0036e660)
libssl.so.6 => /lib64/libssl.so.6 (0x003f9de0)
libz.so.1 => /lib64/libz.so.1 (0x0036e120)
libcrypto.so.6 => /lib64/libcrypto.so.6 (0x003f9da0)
libgmp.so.3 => /usr/lib64/libgmp.so.3 (0x2ba6e655e000)
libxslt.so.1 => /usr/lib64/libxslt.so.1 (0x0036e560)
libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x0036e3a0)
libffi.so.5 => /usr/GNUstep/System/Library/Libraries/libffi.so.5
(0x2ba6e6798000)
libnsl.so.1 => /lib64/libnsl.so.1 (0x0036e520)
librt.so.1 => /lib64/librt.so.1 (0x0036e220)
libdl.so.2 => /lib64/libdl.so.2 (0x0036e0a0)
/lib64/ld-linux-x86-64.so.2 (0x0036e020)
libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x0036e2a0)
libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x0036e4e0)
libstdc++.so.6 => /usr/lib64/libstdc++.so.6 (0x2ba6e69a7000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x003f9be0)
libgssapi_krb5.so.2 => /usr/lib64/libgssapi_krb5.so.2 
(0x003f9ba0)
libkrb5.so.3 => /usr/lib64/libkrb5.so.3 (0x003f9d60)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x0036e420)
libk5crypto.so.3 => /usr/lib64/libk5crypto.so.3 (0x003f9e20)
libkrb5support.so.0 => /usr/lib64/libkrb5support.so.0 
(0x003f9ce0)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x0036e4a0)
libselinux.so.1 => /lib64/libselinux.so.1 (0x003f9e60)
libsepol.so.1 => /lib64/libsepol.so.1 (0x0036e1e0)




Any idea? (Besides waiting for the precompiled

[SOGo] Feature Request: Automatic mail notice not only to the person who GETS new ACLs but also to the person who GIVES ACLs/SHAREs resources

2011-09-02 Thread Pascal Gienger
Would this be easily feasible?

Automatic mail notice not only to the person who GETS new ACLs but also
to the person who GIVES ACLs/SHAREs resources.

Scenario:

A user shares his mailbox to the wrong person but does not realize it
immediately.
We're an institution with 13,000 users so an error is not so far away.

A notification email with the relevant data "to whom which data was
shared by ACLs" sent back to the user would show the error to the user.




And:

Is it possibile in some way to turn of the "anyone" sharing option?
("All authenticated users"). It is too heavy for us, one wrong click and
all mails are public to all of our users...




-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Thunderbird 5 support

2011-06-29 Thread Pascal Gienger

Am 29.06.11 15:07, schrieb CF:


Can someone point me to the features of Inverse edition ?



It selects automatically the correct e-mail-account for a given calendar.
It works with integrator.
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Resource Planning only works in the web calendar :-\

2011-06-27 Thread Pascal Gienger

Am 25.06.11 15:11, schrieb Ludovic Marcotte:

On 25/06/11 07:33, Pascal Gienger wrote:

In the Web Interface all is going well, but with thunderbird /
lightning (and iCal) when using "v...@rooms.uni-konstanz.de" as
attendee it will mark the meeting as reserved in v303's calendar (it
is there!) but it won't answer with an accept, the participant status
stays on undecided.

Free/Busy-Calls also get answered properly when using
v...@rooms.uni-konstanz.de.

And if you create the event in v303's calendar and invite attendees?



You mean I should try to give me full access to v303's calendar and to 
write an event including invitation there?



--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Resource Planning only works in the web calendar :-\

2011-06-25 Thread Pascal Gienger

Am 25.06.11 01:02, schrieb Ludovic Marcotte



Show the LDIF entry of that resource and the associated SOGoUserSources
entry resolving it.



Here you are:

[sogo@limbe ~]$ defaults read sogod
[...]
sogod SOGoUserSources '(
[...]
,
  {
CNFieldName = cn;
IDFieldName = uid;
KindFieldName = uniknSOGoKind;
MultipleBookingsFieldName = uniknSOGoMultipleBookings;
UIDFieldName = uid;
baseDN = "ou=resources,o=Universitaet Konstanz,c=DE";
bindFields = (
uid,
mail
);
canAuthenticate = YES;
displayName = "Univ. Resources";
hostname = "ldap.internal.uni-konstanz.de";
id = unikn_res;
isAddressBook = YES;
port = 389;
type = ldap;
}
)'

[sogo@limbe ~]$ ldapsearch -x -b "ou=resources,o=Universitaet 
Konstanz,c=DE" mail=v...@rooms.uni-konstanz.de

# extended LDIF
#
# LDAPv3
# base  with scope subtree
# filter: mail=v...@rooms.uni-konstanz.de
# requesting: ALL
#

# room.v303, resources, Universitaet Konstanz, DE
dn: uid=room.v303,ou=resources,o=Universitaet Konstanz,c=DE
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: inetMailUser
uid: room.v303
mail: v...@rooms.uni-konstanz.de
cn: Besprechungsraum V303
sn: V303
uniknSOGoMultipleBookings: 1
uniknSOGoKind: location

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
[sogo@limbe ~]$



In the Web Interface all is going well, but with thunderbird / lightning 
(and iCal) when using "v...@rooms.uni-konstanz.de" as attendee it will 
mark the meeting as reserved in v303's calendar (it is there!) but it 
won't answer with an accept, the participant status stays on undecided.


Free/Busy-Calls also get answered properly when using 
v...@rooms.uni-konstanz.de.



Pascal

--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Feature Request to omit UID@SOGoMailDomain as calendar-user-address-set?

2011-05-13 Thread Pascal Gienger
Would it be a big task to insert a configurable option to hide 
UIDFieldName@SOGoMailDomain in the calendar-user-address-set?



In my account case, the PROPFIND results in the following:


 
  mailto:pascal.gien...@uni-konstanz.de
  mailto:p3749...@uni-konstanz.de
 


"p3749640" is our internal user id which gets never to the outside, our 
IMAP boxes have also this name. It is the "uid" field in LDAP and with 
this unique id the database tables get populated by SOGo. That's good.


SOGo seems to give away "p3749...@uni-konstanz.de" also as calendar user 
name, but this address will not be usable from the outside.
Apple iCal does use this address (I don't know why) as its internal user 
name after creating the account and it won't recognize that 
"pascal.gien...@uni-konstanz.de" is the same as 
"p3749...@uni-konstanz.de". This is very confusing and appalling.


The easiest reason would be to only issue the mail address as 
calendar-user-address-set, configurable by a Yes/No-Option.



Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo 1.3.7: OtherUsersFolderName

2011-05-09 Thread Pascal Gienger

Am 09.05.11 13:49, schrieb Ludovic Marcotte:

On 09/05/11 07:42, Pascal Gienger wrote:



Look at the Localizable.strings file from the MailerUI bundle. The keys
are wrong :

"Other Users" = "Andere Benutzer";
"Shared Folders" = "Gemeinsame Ordner";

It should be :

"OtherUsersFolderName" = "Andere Benutzer";
"SharedFoldersName" = "Gemeinsame Ordner";


[X] Done. And it works.


Thank you!

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] SOGo 1.3.7: OtherUsersFolderName

2011-05-09 Thread Pascal Gienger
The "Other Users" do appear with their cn ldap entry and not with the 
uid, they get translated by SOGo. Fine!


But: The toplevel hierarchy is named

"OtherUsersFolderName" - I am sure this is a variable that can be set by 
defaults write sogod ...


Does anybody have a little hint for me?

Thanks :-)

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] ANN: SOGo v1.3.7

2011-05-04 Thread Pascal Gienger

Em 05/05/11 08:39, Christian Mack escreveu:

Hello Daniel Müller


On 05/04/2011 12:44 PM, "Daniel Müller" wrote:


I tried to update to SOGo 1.3.7 on my centos 5.4 with yum:

  yum update sogo*
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
  * epel: ftp-stud.hs-esslingen.de
  * rpmforge: apt.sw.be
  * contrib: centos.de-mirror-server.de
  * updates: centos.de-mirror-server.de
  * base: centos.de-mirror-server.de
  * centosplus: centos.de-mirror-server.de
  * addons: centos.de-mirror-server.de
  * extras: centos.de-mirror-server.de
639 packages excluded due to repository priority protections
Setting up Update Process
No Packages marked for Update

My Version from the WEB-GUI:
Version 1.3.6 (r...@vizzini.inverse.ca 201105030659)

Is this correct??


Can't see the inverse repository in the above list from yum, only RPMForge.


You should try

[root@mutengene ~]# yum repolist
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: ftp-stud.fht-esslingen.de
 * extras: ftp-stud.fht-esslingen.de
 * rpmforge: ftp-stud.fht-esslingen.de
 * updates: mirror.switch.ch
repo idrepo name status
SOGo   Inverse SOGo Repository 
enabled: 34
base   CentOS-5 - Base 
enabled:  3,535
extras CentOS-5 - Extras 
enabled:296
rpmforge   RHEL 5 - RPMforge.net - dag 
enabled: 10,499
updatesCentOS-5 - Updates 
enabled:444

repolist: 14,808


to see whether SOGo is included or not.

The lines with a star are repositories which are arbitrated between 
candidates proposed depending on hostfiles and mirror speeds.



--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo database

2011-04-25 Thread Pascal Gienger

Am 26.04.11 00:17, schrieb Milos Wimmer:

On Thu, 21 Apr 2011, Pascal Gienger wrote:


We have 60552 tables now, and the WAL backup (hot backup) is still
running without any problem.

PostgreSQL 8.4.7 on Ubuntu 10.04 LTS Server with different volumes for
DB files and for DB log (WAL) files, 1G shared memory.


I have 125406 tables now, PostgreSQL 8.4.7.
SOGo works without problem with so many tables.

But I cannot backup database with pg_dump command.
It writes:



pg_dump: WARNING: out of shared memory
pg_dump: SQL command failed
pg_dump: Error message from server: ERROR: out of shared memory
HINT: You might need to increase max_locks_per_transaction.
pg_dump: The command was: LOCK TABLE public.sogodrendr0013165525c_quick
IN ACCESS SHARE MODE


What's the size/value of

shared_buffers = ...

and

max_locks_per_transaction = ...

in your postgresql.conf?

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo database

2011-04-20 Thread Pascal Gienger

Am 21.04.11 07:40, schrieb Martin Rabl:


@Pascal Gienger: Pascal, you work with a large SOGo-Installation, do you have 
any problems with the many tables?



We use two Postgres instances:
One locally on the SOGo system for the session table,
and one in a central Postgres Server infrastructure to store all users' 
folders.


We have 60552 tables now, and the WAL backup (hot backup) is still 
running without any problem.


PostgreSQL 8.4.7 on Ubuntu 10.04 LTS Server with different volumes for 
DB files and for DB log (WAL) files, 1G shared memory.



--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Configure Signature in Webmail

2011-04-20 Thread Pascal Gienger

Am 20.04.11 18:19, schrieb Ben Luey:


Ok, I tried it and it works great for me. But some (most?) of my users
don't get a link creating / editing the signature. It just shows
"Signature: " with no text or link after it

Easy trick:

Change the language setting, save it, and change it back to your 
preferred language.

It will work.

I did not find out yet if it is due to preferences settings from earlier 
versions not being 100% compatible to 1.3.6 (rectified after saving 
prefs) or if it is another problem.




--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Mails marked read are appearing as unread again

2011-04-11 Thread Pascal Gienger
With a parallel running thunderbird in IMAP IDLE (Push) mode to verify, 
I found out that reading a mail often does not mark it as read on IMAP, 
even if on the sogo mail view it is marked as read. A "Reload" of Mail 
shows the mail as unread again.


Update to 1.3.6 did not change very much.

I am sure it lies on the client javascript side that the appropriate 
call does not get sent to SOGo.


Andy hints?

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo users in Quebec

2011-03-08 Thread Pascal Gienger

Am 08.03.11 20:20, schrieb Dominique Gagnon:

Hi,

We would like to know if there are others users of SOGo in province of
Quebec (Canada), can be governmental agencies or private ones.

Cheers,

Dominique Gagnon


Bien dommage. J'aurais bien voulu habiter au Québec, mais la possibilité 
n'est jamais venue ;-)


Utilisateur de SOGo en Allemagne (pour 13000 utilisateurs), ou on a 
toujours l'impression d'être un étranger


Please excuse the french language, but I thought it would be appropriate 
in this Quebec case ;-)


Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] SIGSEGV appearing since upgrade to 1.3.5a

2011-03-06 Thread Pascal Gienger
I am experiencing SIGSEGV process ends of "sogod" after upgrading to 1.3.5a.

Examples:

Mar 06 19:14:45 sogod [5470]: [RM:Mailer] LOOKUP FAILED: SOGoMailUkrainianReply
Mar 06 19:14:45 sogod [5470]: [RM:Mailer]   PARENT 
(<0x0xe341900[WEResourceManager]:>) SAID: (nil)
Mar 06 19:14:45 sogod [5470]: [WARN] SOGoMailUkrainianReply found no template 
named 'SOGoMailUkrainianReply' for component (fw=Mailer)
Mar 06 19:14:50 sogod [25267]: <0x0xe4bfde0[WOWatchDogChild]> child 5470 exited


2011-03-06 18:48:25.407 sogod[4927] <0x0x103b9000[PostgreSQL72Channel]: 
connection=<0x0x109e03f0[PGConnection]:  connection=0x0xe9551b0>>: message: 
WARNING:  nonstandard use of \\ in a string literal at character 47
Mar 06 18:48:26 sogod [4927]: [ERROR] |SOGo| did not find locale for language: 
Chinese
Mar 06 18:48:27 sogod [4927]: [ERROR] |SOGo| did not find locale for language: 
Chinese
Mar 06 18:48:27 sogod [25267]: <0x0xe4c1030[WOWatchDogChild]> child 4927 exited


Always the last message has to do about unknown locales or no suitable reply 
messages.

What's going wrong here?

CentOS 5.5, SOGo 1.3.5a.

-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] IMAP4 login failed?

2011-03-06 Thread Pascal Gienger
 

> Mar 05 03:32:53 sogod [28271]: [ERROR] <0x0x11f7ee0[NGImap4ConnectionManager]>
> IMAP4 login failed:
>   host=localhost, user=vangelis, pwd=yes
>   url=imap://vangelis@localhost/INBOX/
>   base=(nil)
>   base-class=(nil))
>   = <0x0x1588b40[NGImap4Client]: login=vangelis(pwd)
> socket= address=<0x0x1363580[NGInternetSocketAddress]: host=localhost port=54671>
> connectedTo=<0x0x1347eb0[NGInternetSocketAddress]: host=localhost port=143>>>
> Mar 05 03:32:53 sogod [28271]: <0x015D4F40[SOGoMailFolder]:folderINBOX>
> renewing imap4 password

a) your dovecot allows plaintext passwords?
b) your dovecot uses the same password for the imap account as you configured 
SOGo to use? (is the LDAP bind password identical to the dovecot IMAP mailbox 
password for a user)?


 
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Any CRM integration with SOGo

2011-03-04 Thread Pascal Gienger

Em 04/03/11 08:47, Ladislav Pašek escreveu:

Hello,

has anybody successfully integrated any CRM with SOGo calendar and
contacts?



Any CRM capable of using external CalDAV and CardDAV connectors for 
calendar and vcard information should be usable.


SOGo is a CalDAV and CardDAV server with a collaboration web frontend. 
Its job is to serve Calendar, Addresscard records and offering a 
mail/calendar/addressbook web frontend to the user.


I don't think it would be a good idea to put proprietary connection 
modules into the SOGo system to work with proprietary CRM systems which 
can change their interface every month if they wish.

--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] With PostgreSQL 8.4.7 server there's a nasty warning...

2011-03-02 Thread Pascal Gienger
2011-03-03 08:01:13.715 sogod[951] <0x0xdf18b10[PostgreSQL72Channel]: 
connection=<0x0xfeca000[PGConnection]:  connection=0x0xfb86c60>>: 
message: WARNING:  nonstandard use of \\ in a string literal at character 47

HINT:  Use the escape string syntax for backslashes, e.g., E'\\'.


Not a showstopper. Is this worth to submit a bug?

Pascal
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo logs user out after 10 minutes

2011-03-01 Thread Pascal Gienger

Em 02/03/11 07:58, kaz.wal...@slipline.ca escreveu:

Hello, I'm having a problem with my SOGo installation, I'm using the iRedMail
email server suite  as the backend, and have configured SOGo to use it's LDAP.


In your case:

# su - sogo
$ defaults write sogod OCSSessionsFolderURL 
mysql://sogo:MYSQL_PASS@localhost:3306/sogo/sogo_sessions_folder

$ exit
# service sogod restart

HTH.
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Foreign Mail Accounts

2011-03-01 Thread Pascal Gienger

Em 02/03/11 07:32, Pascal Gienger escreveu:

Em 02/03/11 07:14, Jim Carter escreveu:


So what's going wrong with TLS? In some other mailers it's interpreted
as not just selection of ciphers, but SSL means fall back to unencrypted
if you can't set it up, while TLS means mandatory, which is what I want.
Does anyone know what SSL vs. TLS really means in SOGo?


SSL means beginning SSL negotiation directly after having handshaked the
TCP connection. The standard port for IMAP over SSL is 993.

TLS means the usage of STARTTLS to raise a normal (unencrypted)
connection to an encrypted one using an (in the IMAP case) IMAP command
(STARTTLS). It just uses the normal IMAP port 143.

Your external server does not seem to accept STARTTLS on port 143, so
with the "SSL" setting you use the port 993 of the external mail server
which just works fine.



As another side note: In your setup you used Port 993. So SSL is the 
only thing which works. To use TLS you HAVE to set the server port to 143.

--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Foreign Mail Accounts

2011-03-01 Thread Pascal Gienger

Em 02/03/11 07:14, Jim Carter escreveu:


So what's going wrong with TLS? In some other mailers it's interpreted
as not just selection of ciphers, but SSL means fall back to unencrypted
if you can't set it up, while TLS means mandatory, which is what I want.
Does anyone know what SSL vs. TLS really means in SOGo?


SSL means beginning SSL negotiation directly after having handshaked the 
TCP connection. The standard port for IMAP over SSL is 993.


TLS means the usage of STARTTLS to raise a normal (unencrypted) 
connection to an encrypted one using an (in the IMAP case) IMAP command 
(STARTTLS). It just uses the normal IMAP port 143.


Your external server does not seem to accept STARTTLS on port 143, so 
with the "SSL" setting you use the port 993 of the external mail server 
which just works fine.



Pascal
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] LDAP addressbook

2011-03-01 Thread Pascal Gienger

Am 01.03.11 18:51, schrieb Anil Thapa:

Hello all,

This might be very easy. But when I am searching address in LDAP it
always returns 5 entry. for example if I type john in search field,
first it takes sometime and returns with 5 john. But there are about 100
john in my LDAP. Where Can i adjust these and also to make it quicker ?

Thanks

A



Possibility 1: A setting in your LDAP server - maximum number of entries 
returned by a search.


Possibility 2: SOGo:

As user sogo:

defaults write sogod SOGoLDAPQueryLimit 25

to set the number to 25.



--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Foreign Mail Accounts

2011-02-28 Thread Pascal Gienger

Am 01.03.11 07:41, schrieb Jim Carter:

At home my mail is outsourced; at work my IMAP server is not the machine
where I'm testing SOGo (which has a working IMAP server to which nobody
ever sends mail). Thus I see my folders but my INBOX is always empty. I
see the configuration option to identify the IMAP host from a field in
the LDAP Persons record, but I have not yet gotten that into LDAP. The
GUI is set up so it could represent foreign IMAP servers such as Gmail,
but all relevant information seems to be non-editable. How can we make
that happen for particular users?


# su - sogo
$ defaults write sogod SOGoMailAuxiliaryUserAccountsEnabled YES
$ exit
# service sogod restart

Beware, passwords are stored in cleartext in your sql backend.

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Webmail Alternate Roles

2011-02-28 Thread Pascal Gienger

Am 01.03.11 07:34, schrieb Pascal Gienger:

Am 01.03.11 07:26, schrieb Jim Carter:

I need to send mail from several "from" addresses, and in fact at home I
always send from the realm at work, as you can see in this message. How
does the individual user configure this in the SOGo web client? Can one
of the addresses be set as the default?


This is automatic if there are multiple mail attribute values in the
LDAP user entry (see attachment) - we're using an LDAP setup.




I forgot:
The LDAP entry would look like this (only relevant portions with example 
data):


# pg, it-staff, Universitaet Konstanz, DE
dn: uid=pg,ou=it-staff,o=Universitaet Konstanz,c=DE
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: inetMailUser
[...]
mail: pascal.gien...@uni-konstanz.de
mail: r...@uni-konstanz.de
[...]


--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] sogo web save username/password

2011-02-28 Thread Pascal Gienger

Am 28.02.11 10:22, schrieb mourik jan heupink:



On 02/27/2011 06:41 PM, Bruno Leon wrote:

It does not exist at all.
If I remember well this is because AJAX is used for the page.


Ok, that's pity...

The use of AJAX makes it impossible?

MJ


For myself, this is an excellent feature. Typing in a username and a 
password should be something the user should understand.


Many users type in their credentials on some public computer and very 
often it is stored there - not for evil purposes - just because the 
browser allows it.




--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Just a side note (success): Session table on another database than SOGo data

2011-02-22 Thread Pascal Gienger

It just works.

We have a central Postgres server with many cores, enough RAM for 
appropriate buffers and we have fine tuned postgresql.conf to achieve 
good performance and we are using WAL online archives to backup 
databases for "just in time" restores.


But we did not want to have the session table there, imagine all 
transactions/changements of the session table backuped to archive files 
and to tape.. ;-)


We're glad that the session table entry can use a completely different 
database instance for its session table. So it won't get backuped and it 
won't give megabytes of WAL logs just because users are doing something. 
A little Postgres instance with low memory and low performance data is 
sufficient - and it works.


Very nice and thank you!

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Radius with SOGo

2011-02-22 Thread Pascal Gienger

Am 22.02.11 07:56, schrieb Kiss Attila - Elastoffice:

Hello,

Just wondering, is possible to authenticate SOGo with a Radius server?
Does anyone tried?
If not there is some API where we could do it and share with SOGo
community?


Authentication against RADIUS is not very difficult and even with 
Objective C there are plenty of libraries to choose from - but RADIUS 
IMHO does not have the needed attributes to make things fly. You need a 
unique user id, a mail address, a real name (cn). RADIUS normally is 
used for network topologies, so you can store IP addresses or pools, 
ACLs to be set, user classes, PEAP authentication modules (with their 
apppropriate password algorithms). It's perfect if you only want a login 
(so you have user name checked against radius) or if you want to 
configure your switch to talk 802.1x (to prevent people with their 
private notebooks to get access to your corporate network).


You would have to define a new dictionary for your radius server 
including all the attributes SOGo needs for a user login.


My advice would be to instruct your IDM (identity manager, I am quite 
sure you don't feed your radius manually) to do a feed/provisioning also 
to an LDAP server (or SQL table) to use with SOGo.


Just my $0.02,

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Be careful when choosing your database host name...

2010-12-16 Thread Pascal Gienger

Just a little tip:

When deploying a SOGo installation where the database server will not 
reside on the same host as the SOGo instances, be careful to select a 
(virtual) hostname which will NOT change for the lifetime of your 
installation. Use an DNS alias and use entries in /etc/hosts. Do not use 
an IP address as database host name.


Why?

In case you want/have to change your database host (ip renumbering, 
infrastructure change, ...) just change the IP entry for that virtual 
database host name (either in /etc/hosts or DNS). Otherwise...


you're cooked.


In sogo_folder_info, SOGo stores the URL to the actual storage tables 
(data, index (quick) and ACL (acl)) for each calendar and contact 
ressource.


Example:

 540 | /Users/testuser/Calendar/personal | 
Users   | testuser | Calendar | personal | Persönlicher 
Kalender   | 
postgresql://sogo:s...@ha-postgres:5432/sogo/sogotestuser0013182468c | 
postgresql://sogo:s...@ha-postgres:5432/sogo/sogotestuser0013182468c_quick 
| 
postgresql://sogo:s...@ha-postgres:5432/sogo/sogotestuser0013182468c_acl 
| Appointment




As you can see, it stores links like

postgresql://sogo:s...@ha-postgres:5432/sogo/sogopop211530013182468c_quick

So if you change


- the database host name
- the database user
- the database password
- the database server port number

then you'll have to ALTER ALL ENTRIES in sogo_folder_info.


Pascal
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Support for Apache sticky load balancer sessions (see inside)

2010-12-10 Thread Pascal Gienger
I saw that bug #698 is on the roadmap for 1.3.5, nice.

Another idea for that:

It would be a FINE idea to include a suffix in this cookie  with a unique name 
for that node where sogod runs on. The suffix has to be separated by a dot (and 
no other dot must appear in the cookie):

Example:

Set-Cookie: 0xHIGHFLYxSOGo=r5hfjkrblvhjlvrjehjkgfhrkj4kl3hjgb4glbv.node01; 
Path=/SOGo/

In that case, you may write in the front end Apache (example from my setup)


  BalancerMember http://10.0.0.2:2/SOGo route=edea
  BalancerMember http://10.0.0.3:2/SOGo route=bafoussam
  BalancerMember http://10.0.0.4:2/SOGo route=kousseri
  BalancerMember http://10.0.0.5:2/SOGo route=limbe

  RequestHeader set "x-webobjects-server-port" "443"
  RequestHeader set "x-webobjects-server-name" "sogo.uni-konstanz.de"
  RequestHeader set "x-webobjects-server-url" "https://sogo.uni-konstanz.de";

  RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
  RequestHeader set "x-webobjects-remote-host" "%{SENDER_IP_ADDRESS}e"

  AddDefaultCharset UTF-8

  ProxySet stickysession=0xHIGHFLYxSOGo(1)

  Order allow,deny
  Allow from all



The "route" parameter on "BalancerMember" names this particular worker route 
and the cookie's name mentioned with "stickysession=" is used to derive the 
route where the request has to be sent.

AN idea would be to use one of these nifty dictionary variables of "defaults" 
(GNUstepdefaults), something like "defaults write sogod SOGoClusterNodeName 
bafoussam"   (as an example).



The user would be on the same machine after login eliminating all kind of 
synchronization issues and you still have a load balanced session. If one node 
breaks the apache uses another route or breaks the session, it is up to you to 
configure it.


(1) In my actual setup I am doing this voodoo magic in my updated sogosession 
(not yet public) apache module with an additional cookie ("uniknsogoroute") 
with the value "worker.${nodename} which is set from inside the module to 
select the right worker. It works nicely here with 4 cluster nodes. So in my 
config there is in reality   

ProxySet stickysession=uniknsogoroute

Pascal
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] WOWorkersCount

2010-12-09 Thread Pascal Gienger

Am 09.12.10 11:29, schrieb Alessio Fattorini:



Thanks for your answer but my 30 users use Thunderbird + addon not sogo
web access.
I think that "TB3 + addon" is more heavy then web access.



It's the opposite. CalDAV and CardDAV is quite lightweight compared to 
web access (/so/...).

Heaviest CPU hog is Mail access via Web.

As your thunderbirds use Mail over IMAP it won't even reach your SOGo 
server(s). So only CalDAV und CardDAV (Calendars, Address books) are 
handled by SOGo.


Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] WOWorkersCount

2010-12-09 Thread Pascal Gienger

Am 09.12.10 10:10, schrieb Alessio Fattorini:



I have this
model name : Intel(R) Xeon(R) CPU E5410 @ 2.33GHz
cpu cores : 4

with 4 GB of RAM. SxVMemLimit is default 384

With 30 users, how should i set WOWorkersCount?



Just for reference:

We have now 16,000 accounts and 3,600 distinct users a day, approx 8,000 
logins per day.


The system runs on 4 machines with 4 cores each in load balancing mode 
(front end apache does the balancing and session handling).


We have 10 sogod processes running per node and they are not getting all 
"full".



Pascal

--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Is there a problem replacing "x-webobjects-remote-host" with a useful information?

2010-12-02 Thread Pascal Gienger
Is that a good or a bad idea:


I just replaced

RequestHeader set "x-webobjects-remote-host" "127.0.0.1"

by

RewriteCond %{REMOTE_ADDR} (.*)
RewriteRule .* - [E=SENDER_IP_ADDRESS:%1]

RequestHeader set "x-webobjects-remote-host" "%{SENDER_IP_ADDRESS}e"

giving the remote user's IP address as "X-Forward:" header in mails sent by 
SOGo - so by looking at a mail message we can look where it originated.

The side effect is that sogo.log now also takes this remote ip addresses as 
remote host - but all is still working properly.


What's the exact meaning of "x-webobjects-remote-host"?
Why was it set to 127.0.0.1? Our reverse-proxy-Apache is not on 127.0.0.1 and 
still this setup worked without any problem.

Pascal
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] embold folders with new messages

2010-12-01 Thread Pascal Gienger

Le 1 déc. 2010 à 14:29, Pascal Aubry (université de Rennes 1) a écrit :

> Hi all,
> On the webmail, it seems that nothing is done to inform the users of the 
> arrival of new messages in sub-folders. This is particularly blocking for 
> users who use sieve filters.
> Are sub-folders scanned periodically as the inbox is? May this be added in 
> the future?

They _ARE_ checked beginning from the moment you opened them the first time in 
your session.

At least I see that from the logs.

Example:

x.y.z.a - - [01/Dec/2010:14:57:16 +0100] "POST 
/SOGo/so/pop05579/Mail//0/folderINBOX/unseenCount HTTP/1.1" 200 13
x.y.z.a - - [01/Dec/2010:14:57:16 +0100] "POST 
/SOGo/so/pop05579/Mail//0/folderOTRS/unseenCount HTTP/1.1" 200 13

(2477 distinct users since midnight, approx 700 sessions open at the moment. 
Still running without crash.)

:-)

Pascal-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Integrator and Contacts woes...

2010-11-22 Thread Pascal Gienger

Am 22.11.10 20:12, schrieb Wolfgang Sourdeau:



What's the exact meaning of the publicid Thunderbird parameter?


It's the id of the addressbook that you want to specify as "Directory
Server" in Thunderbird, no more, no less. The term "public" is used here
because it's considered that all users will have automatic read-only
access to all system user sources marked with "isAddressBook = YES". It
has nothing to do with the public access feature of SOGo, which has been
added very recently...


Ok can more than 1 address book can be set as "publicid"?
In case an institution has more than one directory... (as we have)...
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Integrator and Contacts woes...

2010-11-22 Thread Pascal Gienger

Am 22.11.10 19:30, schrieb Wolfgang Sourdeau:


In SOGo, we use SQL-based addressbooks for all user addressbooks and
LDAP-based addressbooks for "system addressbooks". What "system" means
is that it represents a read-only source of user informations that is
managed only by the system administrator and outside of SOGo itself. In
Thunderbird, all user addressbooks but only one system addressbook can
be used for finding users when composing emails or inviting people to an
event. That's a limit of Thunderbird.
In SOGo Connector, user addressbooks are synchronized (via webdav sync)
with local Thunderbird addressbooks while system addressbooks are
queried in real time via a carddav request.

I suspect the problem that occurs is that SOGo Connector considers those
2 addressbooks as "user addressbooks" rather than "system addressbooks",
which trigger webdav sync queried, which are not supported for system
addressbooks. There would thus be 2 bugs:
- SOGo Connector must consider them as system addressbooks
- SOGo must not report those addressbooks as "webdavsync capable"
In order to confirm this, please provide us with a sniff log of the SOGo
traffic when this occurs, from the moment you launch Thunderbird until
the problem starts to show up.

Regarding your configuration, you should probably declare "unikn_users"
as value for the "publicid" key mentionned by Ludovic. Following its


unikn_rooms is also an LDAP system address book, containing all bookable 
rooms of the university.
And unikn_resources will also exist, featuring ressources. If only one 
LDAP system addressbook may exist, I'll purge unikn_rooms to test.


What's the exact meaning of the publicid Thunderbird parameter?
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Integrator and Contacts woes...

2010-11-22 Thread Pascal Gienger
 
Am Montag, 22. November 2010 18:30 CET, Ludovic Marcotte  
schrieb: 
 
> On 10-11-22 12:27 PM, Pascal Gienger wrote:
> > Thank you :-)
> > Can it set to an empty string? Or can I omit it?
> You can omit it.

Yes, the 404 error has gone.
But the loop is still there:

188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT 
/SOGo/dav/pop05579/Contacts/unikn_rooms/ HTTP/1.1" 207 127
188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT 
/SOGo/dav/pop05579/Contacts/unikn_users/ HTTP/1.1" 207 127
188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT 
/SOGo/dav/pop05579/Contacts/unikn_rooms/ HTTP/1.1" 207 127
188.98.142.150 - - [22/Nov/2010:18:32:53 +0100] "REPORT 
/SOGo/dav/pop05579/Contacts/unikn_users/ HTTP/1.1" 207 127
188.98.142.150 - - [22/Nov/2010:18:32:54 +0100] "REPORT 
/SOGo/dav/pop05579/Contacts/unikn_rooms/ HTTP/1.1" 207 127


It never ends, bumping sogod daemons much CPU.

These two addressbooks are LDAP address books. The "normal" ones are working 
properly. But these LDAP address books seem to make probles with SOGo 
connector. Any hint?

 
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Integrator and Contacts woes...

2010-11-22 Thread Pascal Gienger

Am 22.11.10 18:25, schrieb Ludovic Marcotte:


Your site.js (in SOGo Integrator) is broken. Adapt the
sogo-integrator.autocomplete.server.urlid preference value.



Thank you :-)
Can it set to an empty string? Or can I omit it?
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Integrator and Contacts woes...

2010-11-22 Thread Pascal Gienger

Am 22.11.10 18:05, schrieb Pascal Gienger:

After configuring extensions.rdf and the updates.php script I was able to load 
automatically connector and lightning.

All calendars get recognized properly by Lightning Inverse Editions, but the 
SOGo connector does end in a loop:

188.98.142.150 - - [22/Nov/2010:18:02:33 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54
188.98.142.150 - - [22/Nov/2010:18:02:38 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54
188.98.142.150 - - [22/Nov/2010:18:02:40 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54



Configuration:

extensions.rdf in integrator.xpi:

  http://inverse.ca/sogo-integrator/extensions";

isi:updateURL="https://sogo.uni-konstanz.de/plugins/updates.php?plugin=%ITEM_ID%&version=%ITEM_VERSION%&platform=%PLATFORM%";>



updates.php:

$plugins
= array(
"sogo-connec...@inverse.ca"
 => array( "application" => "thunderbird",
   "version" => "3.104",
   "filename" => "sogo-connector-3.104.xpi" ),
"sogo-integra...@inverse.ca"
 => array( "application" => "thunderbird",
   "version" => "3.104",
   "filename" => "sogo-unikn-integrator.xpi" ),
"{e2fda1a4-762b-4020-b5ad-a41df1933103}"
=> array( "application" => "thunderbird",
   "version" => "1.0b2.104i",
   "filename" => "lightning-1.0b2.104i_mac.xpi" )

[...]

		https://sogo.uni-konstanz.de/plugins/$plugin["filename"] ?>





It loads connector and lightning properly (I can see it accessing the 
Darwin_x86-gcc3 directory (in my case) to download lightning and the 
connector from the plugin directory (architecture-independent).



Did I miss something?

Pascal





--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Integrator and Contacts woes...

2010-11-22 Thread Pascal Gienger
After configuring extensions.rdf and the updates.php script I was able to load 
automatically connector and lightning.

All calendars get recognized properly by Lightning Inverse Editions, but the 
SOGo connector does end in a loop:

188.98.142.150 - - [22/Nov/2010:18:02:33 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54
188.98.142.150 - - [22/Nov/2010:18:02:38 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54
188.98.142.150 - - [22/Nov/2010:18:02:40 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54
188.98.142.150 - - [22/Nov/2010:18:02:47 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/public/ HTTP/1.1" 404 54
188.98.142.150 - - [22/Nov/2010:18:02:47 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/unikn_rooms/ HTTP/1.1" 207 127
188.98.142.150 - - [22/Nov/2010:18:02:47 +0100] "REPORT 
/SOGo/dav/pascal.gienger/Contacts/unikn_users/ HTTP/1.1" 207 127

It repeats and repeats... Apparently it does not like the 404. SOGoPublicAccess 
is set to NO, so I am wondering why he tries "Public".

Pascal

-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Lightning is crappy...

2010-11-18 Thread Pascal Gienger

Am 18.11.10 16:21, schrieb Pascal Gienger:


Many of them have lightning installed and I want to be prepared for this kind 
of things...



I forgot something:
With SOGo Lightning I often have the problem that I doubleclick on a 
calendar entry do get the details but the window won't open.


At least this works here with the normal Lightning without a problem.


I don't understand the different paradigma of Lightning. Look at Apple 
iCal. It will ask for all available calendars and delegations and will 
include them automatically.
Why can't Lightning do that? Why you have to enter each Calender with is 
corresponding CalDAL URL? You could get all these URLs simply by doing 
the right PROPFIND on the Calendar root.
Funny enough, Lightning DOES recurse the URL to /SOGo/dav/, requesting a 
PROPFIND at every stage - but it does not see to use informations from 
there. I presume it looks for an CalDAV Inbox and Outbox.



--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Lightning is crappy...

2010-11-18 Thread Pascal Gienger
 
Am Donnerstag, 18. November 2010 15:48 CET, Wolfgang Sourdeau 
 schrieb: 
 
> Hi Pascal,
> 
> > I'll try to reproduce this here and I'll file a bug for Lightning (I am 
> > using the "normal" lightning, not the inverse edition).
> 
> You like taking risks!
> 
> We do offer our "version" of Lightning because of this kind of bug, why 
> don't you use it instead ?

Simple. Because I cannot control the installation of our 12,000 users ;-)

Many of them have lightning installed and I want to be prepared for this kind 
of things...

-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739 
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Lightning is crappy...

2010-11-18 Thread Pascal Gienger

Le 18 nov. 2010 à 09:51, André Schild a écrit :

> Am 18.11.2010 09:42, schrieb Pascal Gienger:
>> Just for your information:
>> 
>> In case you delete Calendars in SOGo but do not remove these calendars in 
>> Lightning (1.0b2) it will loop forever. Lightning does not accept the "404" 
>> (not found) issued and reloads and reloads and reloads - resulting in 100% 
>> CPU from sogod.
>> 
>> I used iptables with "--hit-rate" to drop requests in such cases.
> Filling a bugreport at http://www.sogo.nu/bugs/my_view_page.php helps in most 
> cases ;)

This is not a SOGo bug. SOGo behaves correctly ;-)

I'll try to reproduce this here and I'll file a bug for Lightning (I am using 
the "normal" lightning, not the inverse edition).

Pascal-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Lightning is crappy...

2010-11-18 Thread Pascal Gienger
Just for your information:

In case you delete Calendars in SOGo but do not remove these calendars in 
Lightning (1.0b2) it will loop forever. Lightning does not accept the "404" 
(not found) issued and reloads and reloads and reloads - resulting in 100% CPU 
from sogod.

I used iptables with "--hit-rate" to drop requests in such cases.


-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] German-speaking usergroup of SOGo?

2010-11-17 Thread Pascal Gienger

Le 17 nov. 2010 à 10:34, Patrick Ben Koetter a écrit :

> 
> You mean something like: The "German SOGo user group". We meet regularly, put
> up a booth at (Linux) conferences, speak at conferences about SOGo, start the
> SOGo evangelism, etc.?


Ok if you think my idea was ridicolous, I'll accept that. I imagined a system 
where experiences in deploying such services on larger scales and typical 
german implications can be exchanged. If you think that this list is well and 
sufficient for that purpose I'll accept that opinion.

Evangelism is not the kind of thing I wanted to start.-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] German-speaking usergroup of SOGo?

2010-11-17 Thread Pascal Gienger

Le 17 nov. 2010 à 09:06, Patrick Ben Koetter a écrit :

> * Pascal Gienger :
>> Are there other SOGo users in Germany, Switzerland, Austria
>> deploying or planning to deploy SOGo in their institution?
>> 
>> We at the university of Constance/Konstanz do offer the SOGo service
>> already to all our students, staff members and professors/teachers.
>> 
>> Operating System is CentOS 5.5.
>> 
>> If there's some interest to share experiences and to look at each
>> other's setup/solution I would be fine.
> 
> +1
> 
> We'd join the list. We'd provide a list if that is needed.

We can provide it too but I did not want to talk about a simple list but rather 
than real user group like a reference of SOGo users.

Pascal-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] German-speaking usergroup of SOGo?

2010-11-16 Thread Pascal Gienger
Are there other SOGo users in Germany, Switzerland, Austria deploying or 
planning to deploy SOGo in their institution?


We at the university of Constance/Konstanz do offer the SOGo service 
already to all our students, staff members and professors/teachers.


Operating System is CentOS 5.5.

If there's some interest to share experiences and to look at each 
other's setup/solution I would be fine.


Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Session Cookie Obfuscator / Session management "uniknsogosession"

2010-10-25 Thread Pascal Gienger

Am 25.10.10 23:17, schrieb Ben:

If you integrate this into SOGo (which would be great -- I do not like
the idea of even temp cookies having plaintext passwords), I have a
feature request: session timeout. If someone leaves a connection idle
for X minutes, session is no longer valid. If I understand how this
patch is working, it shouldn't be hard to have postgres store the most
recent access time and every X minutes remove stale sessions.


DELETE FROM sessions WHERE now()-latest > 

Quite an easy cron job on your database.
"latest" gets updated on every request....




--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Session Cookie Obfuscator / Session management "uniknsogosession"

2010-10-25 Thread Pascal Gienger

Am 25.10.10 21:47, schrieb Ludovic Marcotte:


Thanks for this. What's the license of your code? If appropriate, we
could integrate it directly in SOGo instead of relying on an Apache module.


Consider it as public domain.
I am not used to Objective-C, so I tried to set it up as an apache 
module. It is a workaround. And stil no direct password is stored on the 
server, this is what I wanted.


--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Session Cookie Obfuscator / Session management "uniknsogosession"

2010-10-25 Thread Pascal Gienger
For those who don't want to store "basic username:password" as user cookie on 
the browser, we decided to publish the apache module we use here to anonymize 
the session cookie.

It refers to request nr 000698,
http://www.sogo.nu/bugs/view.php?id=698

I am using 64 byte XOR keydata stored on the browser's cookie cache (and not in 
the session database) with which the username:password-data is "crypted" 
(XOR'ed) and stored in the session database. At any time this key sent by the 
browser is needed to get the real "SOGo cookie" to form a session. 64byte 
should be sufficient to outlength a normal SOGo cookie length - forming a 
perfect OTP algorithm (XOR keylength > message length). The browser stores the 
session identifier and this 64 byte "user key". Only the session identifier is 
stored in the session database. 

SOGo is a great product and we like it and also how it evolves and how requests 
are handled. We had a problem however to store passwords in the browser's 
cookie store when we cannot control the browser's environment (example: 
Internet site in Abidjan, Ivory Coast or Douala, Cameroon (where I sometimes 
reside).

The obfuscation/anonymization with user key is done by an apache module, it can 
be found here:

http://southbrain.com/software/sogosession/

Be sure to read

http://southbrain.com/software/sogosession/NOTICE

before.

It needs at least Apache 2.0 module API so no chance to get it running with 
Apache 1.3.x.
Have a nice monday evening. In Southern Germany it is raining and raining and 
everything is gray

Pascal
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] iPhones and ics files

2010-09-29 Thread Pascal Gienger

Le 29 sept. 2010 à 16:16, Ludovic Marcotte a écrit :

> On 29/09/10 10:15 AM, Pascal Gienger wrote:
>> We had an Apple Calendar Server here (running on OS X 10.6 server) to test 
>> functionality, and iPhones with iPhone OS 4 loaded were able to schedule 
>> appointments via CalDAV and also invitations.
>> 
>> It's the big iOS4 change in the calendar system.
>> With SOGo however you're not able to edit attendees - with the calendar 
>> server it worked (and no, it was NOT ActiveSync).
>> 
>> Seems to be some kind of capability property to give to the iPhone client so 
>> it enables the functionality.
> Can you sniff and see what Calendar Server returns that SOGo doesn't?

This is a big part of the problem. We had to return the Xserve to Apple because 
it was a test equipment to see it their product will satisfy our needs.

It did not because Apple Calendar Server only allows _ALL_ calendars of a user 
to be delegated/shared to another (and not each calendar separately). (Apart 
from other things that I had to generate a "AppleGeneratedUUID" to each LDAP 
dn, plus include Apple LDAP schemata in my openLDAP setup and so on and so 
on... :-) ).

Pascal
-- 
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] iPhones and ics files

2010-09-29 Thread Pascal Gienger

Le 29 sept. 2010 à 15:14, Robert A Wooldridge a écrit :

> Mark,
> 
> Can you explain exactly how CalDAV works well apart from invitations? If you 
> can't accept an invitation on your iPhone, then how does it work? I suppose 
> you can schedule appointments and invite others on your iPhone?
> 
> Mark Adams wrote:
>> Actually invitations only work with activesync (exchange accounts) - ics
>> attachments to IMAP accounts don't work. Guess you need to talk to
>> Apple!


We had an Apple Calendar Server here (running on OS X 10.6 server) to test 
functionality, and iPhones with iPhone OS 4 loaded were able to schedule 
appointments via CalDAV and also invitations.

It's the big iOS4 change in the calendar system.
With SOGo however you're not able to edit attendees - with the calendar server 
it worked (and no, it was NOT ActiveSync).

Seems to be some kind of capability property to give to the iPhone client so it 
enables the functionality.

Pascal

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v1.3.2

2010-09-21 Thread Pascal Gienger

Am 21.09.10 19:08, schrieb Pascal Gienger:


First impression: Calendar delegation in Apple iCal 10.5 does not work
any more. You see the shared calendar but when you activate it in
"Delegation" you'll get an error.



Sorry, I take that bug. I made a typo. My face is really red (*blush*) 
now and I am hiding myself in the darkest corner of this list für five 
minutes ;-)



--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] ANN: SOGo v1.3.2

2010-09-21 Thread Pascal Gienger

Am 21.09.10 18:17, schrieb Ludovic Marcotte:

The Inverse Team is pleased to announce the immediate availability of
SOGo 1.3.2. This is a minor release of SOGo which focuses on small new
features and improved stability over previous versions.


First impression: Calendar delegation in Apple iCal 10.5 does not work 
any more. You see the shared calendar but when you activate it in 
"Delegation" you'll get an error.




--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] iphone caldav invitees

2010-09-21 Thread Pascal Gienger

Le 21 sept. 2010 à 15:02, Mark Adams a écrit :

> Not from the iPhone. apple have neglected to include this feature

With iOS 4.x it should work but I can't test it, I don't have an iPhone at my 
hands at the moment.

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo ZEG v1.3.1

2010-09-17 Thread Pascal Gienger

Am 16.09.10 22:17, schrieb Patrick Ben Koetter:


Same Question from me. The Ubuntu-Server-Guide advises Dovecot:
http://doc.ubuntu.com/ubuntu/serverguide/C/postfix.html#postfix-dovecot

And the big Postfix book by Hildebrandt/Koette the authors switch in
the last edition to Dovecot, too.


And we wouldn't switch back... ;)

p...@rick



Just my $0.02 and please don't do an advocacy discussion here -
I/we am/are using both.

On our main campus we have approx 15,000 accounts on Cyrus IMAP with 
cache files on fast storage (perhaps moving to SSD in the future) and 
mail data on classical RAID storage (redundant fiberchannel 
infrastructure). Performance is great and with ZFS as file system the 
nightly snapshot backups gets done in 3 hours for 35,000,000 files to check.
Cyrus IMAP can use SQL tables for its index databases as well as 
skiplist (very fast!).


Privately I use dovecot for my hosted server. Both are good products but 
following different pardigmas.


SOGo should not rely on special features of Cyrus IMAP or Dovecot, it 
should use IMAP. As Dovecot also uses IMAP ACLs there should be no issue 
with SOGo.


I don't know however wheter dovecot already allows extended ACLs.

Pascal
--
Pascal Gienger Jabber/XMPP/Mail: pascal.gien...@uni-konstanz.de
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Gray/inactive menu entries in mailbox context menus...

2010-08-12 Thread Pascal Gienger
Why many of the menu entries are greyed out? Did I miss something in my 
configuration?

It is not possible to mark all messages as read, it is not possible to 
subscribe to folders, it is not possible to search through messages.

Are these features not implemented yet or do I have to enable these things 
somewhere?

Attached screenshot shows the greyed options.

IMAP Server is Cyrus IMAP 2.3.16 with extended ACL, body indexed by squat 
(SEARCH BODY works).

Pascal
-- 
Pascal Gienger
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739<>-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] iOS 4 CardDAV support

2010-08-10 Thread Pascal Gienger

Am 10.08.10 16:58, schrieb Wolfgang Sourdeau:

Hi Pascal,


Thank you for the tip on using the 8443 port.


8843. CardDAV/SSL is 8843 for Apple ;-)

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] iOS 4 CardDAV support

2010-07-29 Thread Pascal Gienger

Am 29/07/10 14:51, schrieb Mark Adams:

No, I think you are thinking of CalDAV (for calendars) which allows you
to configure the URL.

Unfortunately with CardDAV on iphone and in address book this is
hardcoded. Thanks Apple...


It simply does a   PROPFIND / on Port 8843 (SSL) to the given server.
This is simple to solve. For this Apache has to send out an 
authentication request (you're lucky if you have ldap as auth base for 
SOGo) and then call a script which sends the requested XML propfind result.


A much better solution would be a special SOGo URL, i.e.

/SOGo/dav/carddavrequest

which does that (auth check and output of propfind result),
so that a rule like


 stuff omitted 
RewriteRule ^/$ /SOGo/dav/carddavrequest  [PT]


would be enough to enable it. Good enough for a feature request?


But (look at my other post) Apple Addressbook does a strange REPORT 
which breaks things up - you can ADD entries to the address book but you 
will never see them in Apple Addressbook.


Pascal
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Apple OS X 10.6 CardDAV access....

2010-07-29 Thread Pascal Gienger
After some Rewriting Mess and a quick&dirty script to give the correct output I 
managed to give Apple Addressbook the right top-level-root automatically.

Apple Addressbook _ONLY_ issues a

PROPFIND /

on port 8843 on the server given by the user. There are NO OTHER controls.

I managed my apache to give the right top-level-property-url for the given user 
(after Apache LDAP auth and %{LA-U:REMOTE_USER} with [PT] ).

Result (sogo.log, after Addressbook found out the toplevel directory for DAV):


127.0.0.1 - - [29/Jul/2010:12:42:16 GMT] "PROPFIND /SOGo/dav/pascal/ HTTP/1.1" 
207 374/167 0.023 - - 0

127.0.0.1 - - [29/Jul/2010:12:42:16 GMT] "PROPFIND 
/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/ HTTP/1.1" 207 331/232 0.033 
- - 0

Jul 29 12:43:03 sogod: SOGo watchdog [1799]: [obj-dav-dispatch] did not find a 
method to server the REPORT

127.0.0.1 - - [29/Jul/2010:12:43:03 GMT] "REPORT 
/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/ HTTP/1.1" 501 201/150 0.024 
- - 0


 [obj-dav-dispatch] did not find a method to server the REPORT



Is the show stopper here:

Apple Addressbook issues:

REPORT /SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/ HTTP/1.1
Host: bafoussam.rz.uni-konstanz.de:8843
User-Agent: Carnet%20d%E2%80%99adresses/870 CFNetwork/454.9.7 Darwin/10.4.0 
(i386) (iMac5%2C1)
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: fr-fr
Accept-Encoding: gzip, deflate
Authorization: X
x-webobjects-server-port: 8843
x-webobjects-server-name: bafoussam.rz.uni-konstanz.de:8843
x-webobjects-server-url: https://bafoussam.rz.uni-konstanz.de:8843
x-webobjects-server-protocol: HTTP/1.0
x-webobjects-remote-host: 127.0.0.1
X-Forwarded-For: 134.34.1.113
X-Forwarded-Host: bafoussam.rz.uni-konstanz.de:8843
X-Forwarded-Server: bafoussam.rz.uni-konstanz.de
Connection: close
Content-Length: 572

/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55CC-4C4DD400-5-93E2980.vcf/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55CC-4C4DD400-7-93E2980.vcf/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55D3-4C4DD400-1B-6AE9230.vcf/SOGo/dav/pascal/Contacts/55D3-4C4DD400-19-6AE9230/55D3-4C4DD480-1D-6AE9230.vcf

Result:

HTTP/1.0 501 Request failed
content-length: 201
content-type: text/html; charset="iso-8859-1"


http://www.w3.org/1999/xhtml";>
An error occurred during object publishingdid not find the 
specified REPORT



SOGo told Apple Addressbook about the existence of these four Entries (.vcf). 
Addressbook issues a REPORT command afterwards for these four "cards", 
resulting in a 501 Request failed error from Sogo.


What's going on there?

-- 
Pascal Gienger
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] SOGoMailListViewColumnsOrder

2010-07-22 Thread Pascal Gienger
Is there also a possible "UUID" column to be able to sort in the order of 
reception of these mails?

Sorting by date is sometimes bad when a sender has configured a wrong timezone 
or did not synchronize his computer clock. Also some Spams (which rarely 
achieve to pass our spam filters) are always on top because of a date in the 
future.

Thunderbird offers this option.

Pascal
-- 
pas...@southbrain.com
http://southbrain.com/

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] Serious Bug: Username and Passwort in Cookie (!)

2010-07-21 Thread Pascal Gienger
I just stumbled upon a decrypted session to our sogo host and the browser sends 
this:

POST /SOGo/so/my_user_name/Mail//my_D_name_A_mydomain_D_de/folderINBOX/uids 
HTTP/1.1
Host: bafoussam.rz.uni-konstanz.de
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; fr; rv:1.9.2.7) 
Gecko/20100713 Firefox/3.6.7
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: fr,fr-fr;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://bafoussam.rz.uni-konstanz.de/SOGo/so/my_user_name/Mail/view
Cookie: 0xHIGHFLYxSOGo=basic%20





Cookie: 0xHIGHFLYxSOGo=basic%20

is the culprit, the XXX is exactly the base64 encoded form of 
"username:password" as it is used by Basic HTTP auth.


This cookie stays stored on the user's browser. From my understanding this is a 
security no-go, it should be an anonymous random hash code which is only 
describing an entry in the session table of the web application, so when the 
session has timed out the cookie has become worthless. This cookie is valid 
forever, even after logout - more: just by searching the cookie database of the 
browser you'll get the user account and his password!



-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] ANN: SOGo v1.3.0

2010-07-21 Thread Pascal Gienger
 
Am Mittwoch 21 Juli 2010 17:48 CEST, Ludovic Marcotte  
schrieb: 
 
> The Inverse Team is pleased to announce the immediate availability of 
> SOGo 1.3.0. This is a minor release of SOGo which focuses on small new 
> features and improved stability over previous versions.

Thank you for the release!

The first impression: In the webinterface, in "Mail" view, it loads _ALL_ 
Mailheaders now. With 1.2.2 you got 150 results per Page which you could load 
by clicking the "next" arrow.  My Inbox has 14072 messages at the moment and it 
sends 160kb (37kb compressed) data to the client, and it uses a whole cpu for 
approx 1 second.


Pascal
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] How to kill a specific session?

2010-07-14 Thread Pascal Gienger
Where does SOGo store session data? Imagine you want to remotely "kill" a 
session (because a user forgot to log off from the /SOGo/so/ web interface at a 
public place), how would you do it?

I did not find a session database on the db tables containing the valid session 
cookies or other data. It is done in memory, in memcached or by some other 
means?

-- 
Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste"
Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Unable to Subscribe iCal 4 to caldav calendar

2010-07-14 Thread Pascal Gienger
 
Am Donnerstag 15 Juli 2010 02:50 CEST, Chris Hobbs  
schrieb: 

> Wolfgang correctly guessed at my error. I was using the 
> Calendar->Subscribe menu to try to get access to the Calendar. The 
> correct process was to go to the Account Tab under Preferences and 
> create a CalDAV account with the appropriate username and password 
> pointing to https://mail.nhusd.k12.ca.us/SOGo/dav/chobbs/

With iCal 4 (OS X 10.6) you can also trigger the automatic configuration if you 
know that Apple iCal first tries to connect to port 8443 (using ssl) of the 
server you typed in in the "new account"-wizard.

It does a PROPFIND on

/principals/users//


The "dirty" solution is to use a RedirectMatch on an apache port 8443 virtual 
host on 

^/principals/users/(.*)
to
/SOGo/dav/$1/Calendar/

iCal honors this Redirect and then jumps to the correct top-CalDAV-URL.

It will then find your calendar in its 2nd try which is acceptable.


If you want to find him the calendar in his 1st try (because you're frightened 
that iCal 5 will expose this behaviour (like the OS X address book.. (!)), then 
things get more complicated. The first iCal guess is

/principals/users/

Problem 1: You can't redirect it nor rewrite it because you don't have any auth 
in this stage (so you won't be able to tell which username is provided). So you 
must use Apache auth using the same(!) auth data source (LDAP, SQL) and the 
same authentication name ("SOGo"). So then you may hack a

RewriteCond %{LA-U:REMOTE_USER} ..*
RewriteRule ^/principals/(.*) /SOGo/dav/%{LA-U:REMOTE_USER}/  [PT]

using a


AuthType basic
Authname "SOGo"
AuthBasicProvider ldap
AuthLDAPURL "ldap://ldap-server:389/dc=mybase,dc=com?uid?sub?(objectClass=*)"
Require valid-user


(as an example for ldap auth, the auth user id is "uid").

This is NOT a beautiful solution because of two different authentification 
processes (apache and Sogo). It was only a "will it work like this"-try. 
Children don't try this at home.

And yes, it works.
 
The rest of the virtual host is the same as in "SOGo.conf" (ProxyPass /SOGo 
http://127.0.0.1:2/SOGo interpolate
 and so on...).



Background: The apple address book only features a "username", "password" and 
"servername" configuration screen for a new carddav account. I strongly believe 
that Apple will do the same thing on their next iCal. Apple addressbook is 
worse, it does a PROPFIND /  as first try and breaks if it fails... But even 
that you can tackle with rewrites as Apple addressbook first tries to contact 
Port 8843 (with ssl).
These are the standard ports of apple calendar server.

-- 
Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste"
Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail 
pascal.gien...@uni-konstanz.de 

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Android/Caldav compatibility

2010-07-14 Thread Pascal Gienger

Le Mercredi 14 Juillet 2010 12:51 CEST, Mickaël Misbach  a 
écrit:

> Hello everyone,
> I have to buy a phone which can synchronize with sogo.
> Has anybody tried to synchronize SOGo via CalDAV with this app :
> http://www.hypermatix.com/products/calendar_sync_for_android
> Unfortunately I don't have any android based phone to try it.
> Thanks.


It works but keep in mind it is a simple application.

it allows only one calendar URL to be entered and data about attendees and 
their acceptance or refusal of the invitation is not transferred.

I am using it with SOGo and my HTC Legend (Android 2.1).

if you have any configuration questions, drop me a note.

Pascal
--
Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste"
Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] IMAP Mailboxnames with "&" and Appointment Texts with semicolon

2010-07-06 Thread Pascal Gienger
Hi there,

with SOGo 1.2.2 the following two things appear:


- IMAP foldernames with properly UTF-7-encoded ampersands ("&") are displayed 
correctly, but when dragging a message into them a new folder is created and 
named with the part of the original mailbox name before the "&".

Example: You create with an IMAP client a mailbox named "Dies&Das". It is 
properly encoded as "Dies&-Das".
This mailbox appears in SOGo (Webinterface) as "Dies&Das". After putting a 
message into it it remains empty but a new mailbox has been created with the 
name "Dies", containing the dropped messages.

- Appointment Texts/Descriptions containing a semicolon
   When typing a semicolon in the text the whole part after the semicolon 
including the semicolon itself is discarded.

   Example:

   Test meeting; please accept

   results in

   Test meeting


We are using PostgreSQL 8.1 (CentOS 5.5 version) as backend database.
Relevant packages:

sogo-1.2.2-1.el5

sope49-xml-4.9-20100504_1664.el5.1
sope49-core-4.9-20100504_1664.el5.1
sope49-mime-4.9-20100504_1664.el5.1
sope49-gdl1-contentstore-1.2.2-1.el5
sope49-gdl1-postgresql-4.9-20100504_1664.el5.1
sope49-appserver-4.9-20100504_1664.el5.1
sope49-gdl1-4.9-20100504_1664.el5.1
sope49-cards-1.2.2-1.el5
sope49-ldap-4.9-20100504_1664.el5.1
memcached-1.4.5-1.el5.rf
libmemcached-0.34-1
postgresql-server-8.1.21-1.el5_5.1
postgresql-libs-8.1.21-1.el5_5.1
postgresql-8.1.21-1.el5_5.1

[pas...@bafoussam ~]$ uname -a
Linux bafoussam 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 
x86_64 x86_64 GNU/Linux
[pas...@bafoussam ~]$ 


Is there a workaround? It is due to a bug in sql parsing/processing (escape 
characters, quotation)? Is there a configuration option?



Ah - yes - inviting users does not work with Safari (4.x and 5.x), you cannot 
add an attendee, there is no new line being inserted. firefox and ie8 do work. 
:)

Besides of that, nice product, we're evaluating it to use it here (this mail is 
written with SOGo).

-- 
Pascal Gienger, Rechenzentrum, Gruppe "Informationsdienste"
Tel. +49 7531 88 5048, Fax +49 7531 88 3739, Mail pascal.gien...@uni-konstanz.de
-- 
users@sogo.nu
https://inverse.ca/sogo/lists