Re: [SOGo] use https for shared DAV-links - how to ?
Hello,
Many thanks for your reply. We are using NGINX (not httpd - apache). Please
find below our configuration at NGINX (sogo.tmpl). Is it possible to change the
/SOGo at the end of the url?
QUOTE
# Settings for SOGo Groupware
# SOGo
location ~ ^/sogo { rewrite ^ https://$host/SOGo; }
location ~ ^/SOGO { rewrite ^ https://$host/SOGo; }
# Redirect /mail to /SOGo
#location ~ ^/mail { rewrite ^ https://$host/SOGo; }
# For Mac OS X and iOS devices.
rewrite ^/.well-known/caldav/SOGo/dav permanent;
rewrite ^/.well-known/carddav /SOGo/dav permanent;
rewrite ^/principals/SOGo/dav permanent;
location ^~ /SOGo {
include /etc/nginx/templates/hsts.tmpl;
proxy_pass https://127.0.0.1:2;
# forward user's IP address
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
# always use https
proxy_set_header x-webobjects-server-port $server_port;
proxy_set_header x-webobjects-server-name $host;
proxy_set_header x-webobjects-server-url https://$host;
proxy_set_header x-webobjects-server-protocol HTTP/1.0;
}
location ^~ /Microsoft-Server-ActiveSync {
proxy_pass https://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync;
proxy_connect_timeout 3540;
proxy_send_timeout 3540;
proxy_read_timeout 3540;
}
location ^~ /SOGo/Microsoft-Server-ActiveSync {
proxy_pass https://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync;
proxy_connect_timeout 3540;
proxy_send_timeout 3540;
proxy_read_timeout 3540;
}
location /SOGo.woa/WebServerResources/ {
alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
expires max;
}
location /SOGo/WebServerResources/ {
alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
expires max;
}
location ^/SOGo/so/ControlPanel/Products/([^/]*)/Resources/(.*)$ {
alias /usr/lib64/GNUstep/SOGo/$1.SOGo/Resources/$2;
expires max;
}
UNQUOTE
Many thanks again for your assistance.
Best regards,
Sent from Outlook
From: users-requ...@sogo.nu on behalf of Christian Mack
Sent: Monday, January 31, 2022 12:52 PM
To: users@sogo.nu
Subject: Re: [SOGo] use https for shared DAV-links - how to ?
Hello
Check your reverse proxy settings.
In Apache you need:
[...]
http://your-sogo.server.name:2/SOGo>
RequestHeader set "x-webobjects-server-port" "443"
RequestHeader set "x-webobjects-server-name" "%{HTTP_HOST}s"
RequestHeader set "x-webobjects-server-url"
"[https://%{HTTP_HOST}s]https://%{HTTP_HOST}s;
RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
[...]
This will tell SOGo to use https and the given/received server for all
generated URLs.
Kind regards,
Christian Mack
Am 28.01.22 um 18:02 schrieb Götz Reinicke (goetz.reini...@filmakademie.de):
> Hi,
>
> we noticed, that the URLs for sharing calendars or addressbooks are „still“
> http only without „s“ :)
>
> Is it possible to set this by default? If so, how and where?
>
> Thanks and regards . Götz
>
>
--
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung IT-Dienste Forschung und Lehre
78457 Konstanz
+49 7531 88-4416
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] Change Custom URL at SOGo
Hi,
Any assist for the below?
Is there any way to change the custom url of SOGo?
Many thanks and best regards,
Sent from Outlook<http://aka.ms/weboutlook>
From: users-requ...@sogo.nu on behalf of Pou Pas Kale
Sent: Wednesday, January 26, 2022 11:53 AM
To: users@sogo.nu
Subject: Re: [SOGo] Change Custom URL at SOGo
Hello,
Is it possible to provide us a solution regarding the custom url of SOGo?
Below our NGINX template ( /etc/nginx/templates/sogo.tmpl):
QUOTE
# Settings for SOGo Groupware
# SOGo
location ~ ^/sogo { rewrite ^ http://$host/SOGo; }
location ~ ^/SOGO { rewrite ^ http://$host/SOGo; }
# Redirect /mail to /SOGo
#location ~ ^/mail { rewrite ^ https://$host/SOGo; }
# For Mac OS X and iOS devices.
rewrite ^/.well-known/caldav/SOGo/dav permanent;
rewrite ^/.well-known/carddav /SOGo/dav permanent;
rewrite ^/principals/SOGo/dav permanent;
location ^~ /SOGo {
include /etc/nginx/templates/hsts.tmpl;
proxy_pass http://127.0.0.1:2;
# forward user's IP address
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
# always use https
proxy_set_header x-webobjects-server-port $server_port;
proxy_set_header x-webobjects-server-name $host;
proxy_set_header x-webobjects-server-url http://$host;
proxy_set_header x-webobjects-server-protocol HTTP/1.0;
}
location ^~ /Microsoft-Server-ActiveSync {
proxy_pass http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync;
proxy_connect_timeout 3540;
proxy_send_timeout 3540;
proxy_read_timeout 3540;
}
location ^~ /SOGo/Microsoft-Server-ActiveSync {
proxy_pass http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync;
proxy_connect_timeout 3540;
proxy_send_timeout 3540;
proxy_read_timeout 3540;
}
location /SOGo.woa/WebServerResources/ {
alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
expires max;
}
location /SOGo/WebServerResources/ {
alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
expires max;
}
location ^/SOGo/so/ControlPanel/Products/([^/]*)/Resources/(.*)$ {
alias /usr/lib64/GNUstep/SOGo/$1.SOGo/Resources/$2;
expires max;
}
UNQUOTE
Thanks again for your time.
Sent from Outlook<http://aka.ms/weboutlook>
________
From: Pou Pas Kale
Sent: Wednesday, March 3, 2021 9:13 PM
To: users@sogo.nu
Subject: Re: [SOGo] Change Custom URL at SOGo
Hi Benoît,
Sorry for my mistake..
Could you please send us an example with an nginx configuration
(https://IP_Server/mail) in order to change the URL?
Many thanks again!
Best regards
From: users-requ...@sogo.nu on behalf of Benoît
Sent: Wednesday, March 3, 2021 4:45 PM
To: users@sogo.nu
Subject: Re: [SOGo] Change Custom URL at SOGo
Hi
Its not support its community mailing list :)
Yes you can do it with apache or nginx.
Le 3 mars 2021 13:48:49 GMT+01:00, Pou Pas Kale a écrit :
Hello Support,
We have a CentOS 8 Server with the latest version of SOGo installed. My
question is, if final is it possible to change the /SOGo at the end of the url
of the web access via a proxy or something else.
Your assistance is highly appreciated.
Thanks
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
Benoît Pélissier - Lan2Net
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] Change Custom URL at SOGo
Hello,
Is it possible to provide us a solution regarding the custom url of SOGo?
Below our NGINX template ( /etc/nginx/templates/sogo.tmpl):
QUOTE
# Settings for SOGo Groupware
# SOGo
location ~ ^/sogo { rewrite ^ http://$host/SOGo; }
location ~ ^/SOGO { rewrite ^ http://$host/SOGo; }
# Redirect /mail to /SOGo
#location ~ ^/mail { rewrite ^ https://$host/SOGo; }
# For Mac OS X and iOS devices.
rewrite ^/.well-known/caldav/SOGo/dav permanent;
rewrite ^/.well-known/carddav /SOGo/dav permanent;
rewrite ^/principals/SOGo/dav permanent;
location ^~ /SOGo {
include /etc/nginx/templates/hsts.tmpl;
proxy_pass http://127.0.0.1:2;
# forward user's IP address
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
# always use https
proxy_set_header x-webobjects-server-port $server_port;
proxy_set_header x-webobjects-server-name $host;
proxy_set_header x-webobjects-server-url http://$host;
proxy_set_header x-webobjects-server-protocol HTTP/1.0;
}
location ^~ /Microsoft-Server-ActiveSync {
proxy_pass http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync;
proxy_connect_timeout 3540;
proxy_send_timeout 3540;
proxy_read_timeout 3540;
}
location ^~ /SOGo/Microsoft-Server-ActiveSync {
proxy_pass http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync;
proxy_connect_timeout 3540;
proxy_send_timeout 3540;
proxy_read_timeout 3540;
}
location /SOGo.woa/WebServerResources/ {
alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
expires max;
}
location /SOGo/WebServerResources/ {
alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
expires max;
}
location ^/SOGo/so/ControlPanel/Products/([^/]*)/Resources/(.*)$ {
alias /usr/lib64/GNUstep/SOGo/$1.SOGo/Resources/$2;
expires max;
}
UNQUOTE
Thanks again for your time.
Sent from Outlook<http://aka.ms/weboutlook>
From: Pou Pas Kale
Sent: Wednesday, March 3, 2021 9:13 PM
To: users@sogo.nu
Subject: Re: [SOGo] Change Custom URL at SOGo
Hi Benoît,
Sorry for my mistake..
Could you please send us an example with an nginx configuration
(https://IP_Server/mail) in order to change the URL?
Many thanks again!
Best regards
From: users-requ...@sogo.nu on behalf of Benoît
Sent: Wednesday, March 3, 2021 4:45 PM
To: users@sogo.nu
Subject: Re: [SOGo] Change Custom URL at SOGo
Hi
Its not support its community mailing list :)
Yes you can do it with apache or nginx.
Le 3 mars 2021 13:48:49 GMT+01:00, Pou Pas Kale a écrit :
Hello Support,
We have a CentOS 8 Server with the latest version of SOGo installed. My
question is, if final is it possible to change the /SOGo at the end of the url
of the web access via a proxy or something else.
Your assistance is highly appreciated.
Thanks
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
Benoît Pélissier - Lan2Net
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain
Hi Matthias, Many thanks again for your advice - feedback on this Best regards From: users-requ...@sogo.nu on behalf of Matthias Kneer Sent: Monday, March 1, 2021 9:09 PM To: users@sogo.nu Subject: Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain Hi, > We have found the solution at the below path: > > /usr/lib64/GNUstep/SOGo/WebServerResources/js/Main.js While this might work for now, I don't think that this is a good long term solution. You will / might run into trouble once you update SOGo since this file might be overwritten. Another issue: This won't work dynamically if you need to allow multiple domains in the future. I would suggest to create / modify a table view which only returns users from the domain that should be able to login. Your view should return following columns (documented in section "5.10. Authentication using SQL" of the installation guide): c_uid: will be used for authentication - it’s a username or usern...@domain.tld c_name: will be used to uniquely identify entries - which can be identical to c_uid c_password: password of the user, plain text, crypt, md5 or sha encoded c_cn: the user’s common name mail: the user’s email address I don't know how your current sogo user database table looks like, so here's just an rough example on how to create such a "filtered" view, the view is called "sogo_view" and the souce table is called "mail_users", this has to be adjusted to match your environment: CREATE VIEW sogo_view AS SELECT username AS c_uid, password AS c_password, username AS c_name, fullname AS c_cn FROM mail_users WHERE username LIKE '%@test2.com'; After you've created that view, and granted privileges to the sogo postgres user, you can reference it in you SOGoUserSources hash like this: viewURL = "postgresql://sogo:sogo@127.0.0.1:5432/sogo/sogo_view"; I hope this helps. - Matthias -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Change Custom URL at SOGo
Hi Benoît, Sorry for my mistake.. Could you please send us an example with an nginx configuration (https://IP_Server/mail) in order to change the URL? Many thanks again! Best regards From: users-requ...@sogo.nu on behalf of Benoît Sent: Wednesday, March 3, 2021 4:45 PM To: users@sogo.nu Subject: Re: [SOGo] Change Custom URL at SOGo Hi Its not support its community mailing list :) Yes you can do it with apache or nginx. Le 3 mars 2021 13:48:49 GMT+01:00, Pou Pas Kale a écrit : Hello Support, We have a CentOS 8 Server with the latest version of SOGo installed. My question is, if final is it possible to change the /SOGo at the end of the url of the web access via a proxy or something else. Your assistance is highly appreciated. Thanks -- users@sogo.nu https://inverse.ca/sogo/lists -- Benoît Pélissier - Lan2Net -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Change Custom URL at SOGo
Hello Support, We have a CentOS 8 Server with the latest version of SOGo installed. My question is, if final is it possible to change the /SOGo at the end of the url of the web access via a proxy or something else. Your assistance is highly appreciated. Thanks -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain
Dear Matthias,
Good day again,
We have found the solution at the below path:
/usr/lib64/GNUstep/SOGo/WebServerResources/js/Main.js
Change the code as per below:
this.login = function() {
var checkStr = "test2.com";
if (r.creds.username.includes(checkStr)){
return r.loginState = "authenticating",
a.login(r.creds).then(function(o) {
o.gamissingkey ? r.loginState = "googleauthenticatorcode" : (r.loginState =
"logged",
r.cn = o.cn,
t(function() {
n.location.href === o.url ? n.location.reload(!0) : n.location.href = o.url
}, 1e3))
}, function(o) {
r.loginState = "error",
r.errorMessage = o.error
}),
!1
} else {
return r.loginState = "error", r.errorMessage = o.error;
}
}
Thanks for your time!
Best regards,
____________
From: users-requ...@sogo.nu on behalf of Pou Pas Kale
Sent: Monday, March 1, 2021 8:56 AM
To: users@sogo.nu
Subject: Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain
Dear Mathias,
Good day,
Many thanks for our feedback. The authantication we are using is under
Postgress SQL . Could you please send me an example from your below suggestions
about "authView" & "add a dedicated column"?
Many thanks again for your feedback.
Best regards,
From: users-requ...@sogo.nu on behalf of Matthias Kneer
Sent: Monday, March 1, 2021 1:16 AM
To: users@sogo.nu
Subject: Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain
Hi,
> If we tried to login to
> an email account with the other domain (t...@b.com), then the system
> should not proceed. Your assistance is highly appreciated.
What kind of authentication / user backend are you using?
If you are using SQL, you just have to modify your authView to only
return users of domain a.com. You could also add a dedicated column to
your mail users table like "sogoLogin" and only return users in your
view where "sogoLogin" is true / 1.
If you are using LDAP, there's an specific example in the installation
guide (https://www.sogo.nu/files/docs/SOGoInstallationGuide.html) under
"5.4. Authentication using LDAP".
> the following filter to return only entries belonging to the
> organization Inverse with a mail address and not inactive:
> filter = "(o='Inverse' AND mail='*' AND status <> 'inactive')";
This can of course be specifically altered to your requirements.
- Matthias
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain
Dear Mathias, Good day, Many thanks for our feedback. The authantication we are using is under Postgress SQL . Could you please send me an example from your below suggestions about "authView" & "add a dedicated column"? Many thanks again for your feedback. Best regards, From: users-requ...@sogo.nu on behalf of Matthias Kneer Sent: Monday, March 1, 2021 1:16 AM To: users@sogo.nu Subject: Re: [SOGo] Restrict Web Access at SOGo from specific User - Domain Hi, > If we tried to login to > an email account with the other domain (t...@b.com), then the system > should not proceed. Your assistance is highly appreciated. What kind of authentication / user backend are you using? If you are using SQL, you just have to modify your authView to only return users of domain a.com. You could also add a dedicated column to your mail users table like "sogoLogin" and only return users in your view where "sogoLogin" is true / 1. If you are using LDAP, there's an specific example in the installation guide (https://www.sogo.nu/files/docs/SOGoInstallationGuide.html) under "5.4. Authentication using LDAP". > the following filter to return only entries belonging to the > organization Inverse with a mail address and not inactive: > filter = "(o='Inverse' AND mail='*' AND status <> 'inactive')"; This can of course be specifically altered to your requirements. - Matthias -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] Restrict Web Access at SOGo from specific User - Domain
Hi, i am trying to setup the sogo.conf file on a CentOs 8 Server, in order to restrict the Web access from specific users - domains. For example, we have created 2 Domains ( a.com & b.com). We need to login at SOGo platform only from t...@a.com domain. If we tried to login to an email account with the other domain (t...@b.com), then the system should not proceed. Your assistance is highly appreciated. -- users@sogo.nu https://inverse.ca/sogo/lists
