Re: [SOGo] XMPP in sogo
Hi! I know of this: https://jsxc.readthedocs.io/en/latest/getting-started/installation/sogo.html MJ Op 18-03-2022 om 00:19 schreef Aristedes Maniatis (a...@ish.com.au): Sogo is a terrific web interface for email messaging and calendaring. It keeps getting better and has a thoughtfully designed UI. XMPP is a technically very nice communications API, and has a good choice of servers to use on different platforms (my favourite is ejabberd). The choices client-side are rather limited [1] and a good slack style UI, focussing on the group chat aspects would be really nice. Is there any appetite for such a client in sogo, or has such a thing been attempted? While I did write WebObjects systems some 20 years ago, sadly my time is more limited these days. So I'm cheekily asking if other people have a similar itch to scratch or have already tried it. Cheers Ari [1] https://conversejs.org/ might be the best example -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] "prevent from being invited to appointments" | side effects
Hi, We have recently discovered that end users can configure their SOGo account to "prevent from being invited to appointments". Good function. However, it has the side effect, that when we (the institute) want to invite everyb...@institute.com, we can no longer send out that invitation, as a single person has his agenda blocked for appointments. Of course we can request that person to whitelist everyb...@institute.com. That will solve it, but tomorrow another person will discover the function, and we need to talk to that person again. An idea could be to allow admins to populate the whitelist function through sogo.conf, or using the SOGo administration screen in the web interface. Or perhaps a popup to say: "This invitation to everyb...@institute.com will not be sent to userX, because he/she has configured his account to prevent appointment invitations." Is there a better way forward? It's a bit strange that with this (in itself a useful) function, basically any person is able to make institute-wide invites impossible. Or are we missing something? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo database schema
Hi, Only to say: YES, specially on #3: the credentials in clear text inside the database. It's terrible. And additionally makes it so much more difficult to change the database credentials than it really should be. MJ Op 23-12-2021 om 10:33 schreef André Rodier (an...@rodier.me): Good morning, all. OK, SOGo is the only working CalDAV / CardDAV server with an acceptable level of quality, at least to me, in the standard Debian repository. The two absolute requirements for me are LDAP authentication and a working user interface over https. So I have to use it, fair enough. By the way, if right now, when reading this, your mind comes up with nice repositories on GitHub or somewhere else, where I can download xxx or yyy, just stop and read again. I want to stick to a standard Debian compatible repository, this is not negotiable. Unfortunately, every time I have a look into the database schema, it is a shame, and I don't see any improvements over the years. First, the tables prefixes - seriously, what is the point of this, remove it. The tables should not be named sogo_xxx ? We are not any more in the 80s, when you were only able to use one database on a hosting provider. At least, make this an option, and not the default case. Second, the column prefixes - Why all the columns are called c_xxx, there is no point behind this except it is annoying and reduce queries readability. Do you have a dinosaur programmer in your team that advertise this as a poor way to avoid errors ? For these two "features", trust unit test, static code analysis and continuous integration to detect errors, not programming practices from the 70s. Third, why the table sogo_folder_info replicates the credentials of the database in each record ? (columns c_location, c_quick_location, c_acl_location) Even if you wanted to have multiple database, the credentials should not be stored in clear text in the database. This is both a security issue and the worst database design I have seen so far...just remove this feature. Fourth, in the same table, what are the columns c_path1, c_path2, c_path3 ??? If your database was properly designed, you wouldn't need these artefacts. For 2022, can you hire a database administrator to redesign your database schema ? Otherwise, I wish the whole team a happy new year. Andre Rodier. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] MFA settings
Op 09-12-2021 om 08:04 schreef Christian Mack (christian.m...@uni-konstanz.de): Good point. Like enforcing password changes. You could open an enhancement request for that on https://sogo.nu/bugs/ Done, here: https://www.sogo.nu/bugs/view.php?id=5446 MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] MFA settings
Hi Chistian, Op 08-12-2021 om 18:17 schreef Christian Mack (christian.m...@uni-konstanz.de): How does the user get its TOTP initializon vector then? She/he can not login without it, but can only scan the QR code while logged into SOGo ;-) Well obviously it would mean: After the admin forces it, on the next login, those users would be required to setup and activate MFA. What for? Either you want to protect your account with 2FA or not. You can use long sessions, therefore only login once a day. You could require MFA from WAN, and not require it from LAN/VPN, for example. That's not unusual. But I understand from your replies that you don't see it that way ;-) Thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] MFA settings
Hi, We are looking at the MFA settings in SOGo, and it seems to work fine. However, it seems a bit basic: you can only turn it on and off yourself for your own account. Unless we miss something? Are there also settings like: - admin forced mandatory MFA for all or specific users? - define 'trusted' IP ranges that are excluded from MFA? I've searched the docs on https://www.sogo.nu/files/docs/SOGoInstallationGuide.html but it doesn't mention any config for MFA. Thanks, MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] No local time zone specified
Hi,
Just a thought: are you sure your /usr/local/etc/sogo/sogo.conf is
formatted correctly?
I have used "plparse /usr/local/etc/sogo/sogo.conf" in the past to make
sure is did not get corrupted.
MJ
Op 07-12-2021 om 23:01 schreef HYVERNAT Philippe (p.hyver...@outlook.fr):
Hello,
I am a newbie to Sogo and i installed it (v.5.3) on a FreeBSD 13 box via
port tree.
i configure sogo.conf and when i want to launch the sogod service, here
is the errors :
# service sogod onestart
*Starting sogod.**
**Throwing 0x804676d88, in flight exception: 0**
**Exception caught by C++: 0**
**Throwing 0x804677358, in flight exception: 0x804676d88**
**Exception caught by C++: 0**
**2021-12-07 20:57:01.609 sogod[71303:100517] No local time zone
specified.**
**2021-12-07 20:57:01.609 sogod[71303:100517] Using time zone with
absolute offset 0.**
**2021-12-07 20:57:01.608 sogod[71303:100517] File NSDictionary.m: 672.
In -[NSDictionary initWithContentsOfFile:] Contents of file
'/usr/local/etc/sogo/sogo.conf' does not contain a dictionary**
**<0x0x803c925c8[SOGoStartupLogger]> Cannot read configuration from
'/usr/local/etc/sogo/sogo.conf'. Aborting**
**/usr/local/etc/rc.d/sogod: WARNING: failed to start sogod*
Here is the directory :
root@sogo1:/usr/local/etc/sogo # ls -la
total 38
-rw-r--r-- 1 root wheel 3458 Dec 7 16:19 SOGo-Apache.conf
-rw-r--r-- 1 root wheel 3280 Dec 7 13:50 SOGo-Apache.conf.sample
-rw-r--r-- 1 root wheel 2372 Dec 7 13:50 SOGo-apple-ab.Apache.conf
-rw-r--r-- 1 root wheel 2372 Dec 7 13:50
SOGo-apple-ab.Apache.conf.sample
-rw--- 1 sogod sogod 18 Dec 7 13:50 ealarms-notify.creds
-rw--- 1 sogod sogod 18 Dec 7 13:50 ealarms-notify.creds.sample
-rw--- 1 sogod sogod 18 Dec 7 13:50 expire-autoreply.creds
-rw--- 1 sogod sogod 18 Dec 7 13:50 expire-autoreply.creds.sample
-rw-r--r-- 1 sogod sogod 6168 Dec 7 19:58 sogo.conf
-rw-r--r-- 1 root wheel 5132 Dec 7 13:50 sogo.conf.sample
Here is the configuration : (I replaced ip and pass by "X")
SOGoProfileURL = "mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_user_profile";
OCSFolderInfoURL =
"mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_folder_info";
OCSSessionsFolderURL =
"mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_sessions_folder";
OCSEMailAlarmsFolderURL =
"mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_alamrs_folder";
OCSStoreURL = "mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_store";
OCSAclURL = "mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_acl";
OCSCacheFolderURL =
"mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_cache_folder";
OCSQuickAppointment =
"mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_quick_appointment";
OCSQuickContact =
"mysql://sogo:sogo@X.X.X.X:3306/sogo/sogo_quick_contact";
/*MYSQL Unicode Complicance*/
MySQL4Encoding = "utf8mb4";
/* Mail */
SOGoDraftsFolderName = Drafts;
SOGoSentFolderName = Sent;
SOGoTrashFolderName = Trash;
SOGoJunkFolderName = Junk;
SOGoIMAPServer = "imaps://X.X.X.X:993";
SOGoSieveServer = "sieve://X.X.X.X:4190";
SOGoSieveFolderEncoding = UTF-8;
SOGoSMTPServer = "smtp://X.X.X.X";
SOGoMailDomain = test.fr;
SOGoMailingMechanism = smtp;
SOGoForceExternalLoginWithEmail = YES;
SOGoMailSpoolPath = /var/spool/sogo;
NGImap4ConnectionStringSeparator = "/";
SOGoMailMessageCheck = every_5_minutes;
SOGoFirstDayOfWeek = 1;
SOGoMailComposeMessageType = "html";
/* Notifications */
SOGoAppointmentSendEMailNotifications = YES;
SOGoACLsSendEMailNotifications = YES;
SOGoFoldersSendEMailNotifications = YES;
/* Authentication */
SOGoPasswordChangeEnabled = YES;
/* Authorize user to connect with domain name */
SOGoEnableDomainBasedUID = YES;
/* LDAP authentication example */
SOGoUserSources = (
{
type = ldap;
CNFieldName = cn;
UIDFieldName = uid;
IDFieldName = mail; // first field of the DN for direct binds
bindFields = (uid, mail); // array of fields to use for indirect
binds
baseDN = "ou=%d,dc=test,dc=fr";
bindDN = "uid=admin,ou=users,dc=test,dc=fr";
bindPassword = X;
canAuthenticate = YES;
filter = "(o='test' AND mail='*' AND status <> 'inactive')";
displayName = "Shared Addresses";
hostname = "ldap://X.X.X.X:389;;
id = public;
isAddressBook = YES;
}
);
SOGoPageTitle = SOGo;
SOGoVacationEnabled = YES;
SOGoForwardEnabled = YES;
SOGoSieveScriptsEnabled = YES;
SOGoMailAuxiliaryUserAccountsEnabled = YES;
SOGoTrustProxyAuthentication = NO;
SOGoXSRFValidationEnabled = NO;
/* General - SOGoTimeZone *MUST* be defined */
SOGoTimeZone = Europe/London;
SOGoLanguage = French;
SOGoCalendarDefaultRoles =
Re: [SOGo] failed to parse RFC822 date field
Thanks Christian and Emmanuel! Thanks for your help, I will see what I can find! MJ On 8/3/21 5:04 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hello Am 03.08.21 um 13:41 schrieb mj (li...@merit.unu.edu): Hi Emmanuel, On 02/08/2021 14:17, Emmanuel Dreyfus (m...@netbsd.org) wrote: I guess the problem is that RFC822 format is Sat, Jul 10 2021 11:56:18 + Yes you are right. But the question remains: where does this faulty date in the system come from, and how to get it out. Because even though the faulty date is juli 10, still today my sogo is trying to process it, and fails and complains about the format. (and two minutes later tries again) I also have a similar one from July 3. RFC822 is specifying the email format. Therefore that date originates from an email in the users postbox. Everytime SOGo parses that email, you get that error message. The only way to get rid of it is to delete that email. And yes, whoever/whatever program wrote that email should get publicly blamed for not knowing how to generate a valid email. Kind regards, Christian Mack -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] failed to parse RFC822 date field
Hi Emmanuel, On 02/08/2021 14:17, Emmanuel Dreyfus (m...@netbsd.org) wrote: I guess the problem is that RFC822 format is Sat, Jul 10 2021 11:56:18 + Yes you are right. But the question remains: where does this faulty date in the system come from, and how to get it out. Because even though the faulty date is juli 10, still today my sogo is trying to process it, and fails and complains about the format. (and two minutes later tries again) I also have a similar one from July 3. Anyway, thanks for replying! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] failed to parse RFC822 date field
Hi, Suddenly I notice in our logs: sogod [32661]: <0x0x5570fe0afcd0[NGMimeRFC822DateHeaderFieldParser]> WARNING: failed to parse RFC822 date field: 'Sat Jul 10 11:56:18 UTC 2021' These appear for various dates and times. Can anyone explain? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] sogo systemd logrotation issue
Hi,
We're running sogo 5 on an upgraded squeeze -> jessie -> stretch ->
buster system, our init system is now systemd, and it uses a 'generated'
unit file for sogo:
root@sogo:/etc/logrotate.d# systemctl list-unit-files | grep sogo
sogo.service generated
Now, we occasionally get this midnight error from logrotate, after log
rotation:
Apr 23 00:02:14 sogo systemd[1]: sogo.service: Found left-over process 28417
(sogod) in control group while starting unit. Ignoring.
Apr 23 00:02:14 sogo systemd[1]: This usually indicates unclean termination of
a previous run, or service implementation deficiencies.
Apr 23 00:02:14 sogo systemd[1]: sogo.service: Found left-over process 28418
(sogod) in control group while starting unit. Ignoring.
Apr 23 00:02:14 sogo systemd[1]: This usually indicates unclean termination of
a previous run, or service implementation deficiencies.
Apr 23 00:02:14 sogo systemd[1]: sogo.service: Found left-over process 28419
(sogod) in control group while starting unit. Ignoring.
Apr 23 00:02:14 sogo systemd[1]: This usually indicates unclean termination of
a previous run, or service implementation deficiencies.
This causes the logrotate sogo postrotate script ("/bin/systemctl
restart sogo.service") to fail, and after that sogo is no longer
running. :-(
I now created a script to verify that sogo is running, and restart it if
it is not. But solving the issue at it's root (the failing restart)
would be much better.
Anyone here experienced the same..? And how did you solve it?
Thanks and enjoy your weekend, everybody!
MJ
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] appointment attendee status
Hi Christian, Turned out the user did not choose "send a reply" from thunderbird when accepting the invite. After sending the reply, it still took a while (as you indicated) but now the appointment reflects the attendee-status. Thanks! On 3/25/21 4:18 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hello On 25.03.21 15:48, mj (li...@merit.unu.edu) wrote: Creating an appointment through the SOGo web interface. Right after creation, the attendees have a status "?", because they have not yet reponded to the invitation. Suppose an invited attendees (on the same SOGo server, but using ActiveSync) accepts the invitation. Is the status of that attendee in the SOGo web access appointment supposed to be updated to reflect that: ✔ ? (reason we ask: we see the checkmark ✔ showup after accepting the invitation via de SOGo webaccess, but not for thunderbird (tbsync) users) Are you sure, you use ActiveSync with tbsync, not calDAV/cardDAV? Either way, it should update for the organizer in SOGo webaccess, but can take a while depending on different settings for cache and refresh interval. For other attendees it is sometimes unreliable. Kind regards, Christian Mack -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] appointment attendee status
Hi, Creating an appointment through the SOGo web interface. Right after creation, the attendees have a status "?", because they have not yet reponded to the invitation. Suppose an invited attendees (on the same SOGo server, but using ActiveSync) accepts the invitation. Is the status of that attendee in the SOGo web access appointment supposed to be updated to reflect that: ✔ ? (reason we ask: we see the checkmark ✔ showup after accepting the invitation via de SOGo webaccess, but not for thunderbird (tbsync) users) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo will rename INBOX
Hi Christian, Thanks, I updated the ticket with our experience :-) Thanks! MJ On 22/03/2021 19:30, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hello There is already a bug report. https://www.sogo.nu/bugs/view.php?id=5096 This happens when the user does a double click on any folder, especially hard on users doing that on the INBOX. Kind regards, Christian Mack Am 22.03.21 um 14:39 schrieb mj (li...@merit.unu.edu): Hi, Just a headsup! We recently had a user, who "lost" all her old emails, and only received all new mails. After investigation, it turned out that she accidentally renamed her dovecot INBOX through the SOGo web access. This caused dovecot to generate a new INBOX folder, after receiving a new email. (as if it were a new unused mailbox) So all her old emails seemed gone from her perspective, and she only received new emails. Strange (worrysome) problem with a simple cause, as it turns out. :-) We think this is a bug in SOGo, and SOGo should refuse to rename the INBOX for a user. (in the GUI, there is no rename option, but you can click on the word 'INBOX', and then type a new name) If others also feel this is a bug, I can create a bug report. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] sogo will rename INBOX
Hi, Just a headsup! We recently had a user, who "lost" all her old emails, and only received all new mails. After investigation, it turned out that she accidentally renamed her dovecot INBOX through the SOGo web access. This caused dovecot to generate a new INBOX folder, after receiving a new email. (as if it were a new unused mailbox) So all her old emails seemed gone from her perspective, and she only received new emails. Strange (worrysome) problem with a simple cause, as it turns out. :-) We think this is a bug in SOGo, and SOGo should refuse to rename the INBOX for a user. (in the GUI, there is no rename option, but you can click on the word 'INBOX', and then type a new name) If others also feel this is a bug, I can create a bug report. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Change Custom URL at SOGo
Hi, We have an index.html in the root / containing: https://webmail.company.com/SOGo/;> So our users just type the base url, and end up in /SOGo because of that index.html Simple, and it works for us. MJ On 3/5/21 8:59 AM, Benoît PELISSIER (bpeliss...@lan2net.fr) wrote: Sorry, i dont do this, i just say its possible :) seriously, i doesn't try it because i doesn't need it. (and when i answered you i presume that i do it ..) Benoît Le 03/03/2021 à 20:13, Pou Pas Kale (poupask...@outlook.com) a écrit : Hi Benoît, Sorry for my mistake.. Could you please send us an example with an nginx configuration (https://IP_Server/mail) in order to change the URL? Many thanks again! Best regards *From:* users-requ...@sogo.nu on behalf of Benoît *Sent:* Wednesday, March 3, 2021 4:45 PM *To:* users@sogo.nu *Subject:* Re: [SOGo] Change Custom URL at SOGo Hi Its not support its community mailing list :) Yes you can do it with apache or nginx. Le 3 mars 2021 13:48:49 GMT+01:00, Pou Pas Kale a écrit : Hello Support, We have a CentOS 8 Server with the latest version of SOGo installed. My question is, if final is it possible to change the /SOGo at the end of the url of the web access via a proxy or something else. Your assistance is highly appreciated. Thanks -- users@sogo.nu https://inverse.ca/sogo/lists -- Benoît Pélissier - Lan2Net -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] calendar invitation not displayed as such by SOGo webclient
Anyone? On 12/10/20 11:19 AM, mj (li...@merit.unu.edu) wrote: When inviting a gr...@internal.com to a meeting, a notification is sent to the group members: To make it even clearer: The invitation is composed and sent using the SOGo webclient, and displays in the same SOGo webclient as an email and not an invitation. That cannot make sense? The first line says: participation REQUIRED The last line says: you are not scheduled as a participant Makes no sense to us? Can anyone explain? And again: thunderbird handles it all as expected. Thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] calendar invitation not displayed as such by SOGo webclient
When inviting a gr...@internal.com to a meeting, a notification is sent to the group members: To make it even clearer: The invitation is composed and sent using the SOGo webclient, and displays in the same SOGo webclient as an email and not an invitation. That cannot make sense? The first line says: participation REQUIRED The last line says: you are not scheduled as a participant Makes no sense to us? Can anyone explain? And again: thunderbird handles it all as expected. Thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] calendar invitation not displayed as such by SOGo webclient
Hi, actually checking into it more, we see that it makes no difference if the invitation is coming from external or internal: When inviting a gr...@internal.com to a meeting, a notification is sent to the group members: Your participation is required to this event Locationroom1 TimeWednesday, December 16, 2020 Organizer First Last is proposing a meeting to the attendees. You receive this mail as a notification, you are not scheduled as a participant. The first line says: participation REQUIRED The last line says: you are not scheduled as a participant Makes no sense to us? Can anyone explain? And again: thunderbird handles it all as expected. Thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] calendar invitation not displayed as such by SOGo webclient
Hi, An external user John Doe invited an internal (SOGo hosted) group gr...@internal.com for an appointment, with the idea to invite every group member to this appointment. I am a member of the gr...@internal.com group, and hence the invitation is delivered to my INBOX. In thunderbird (activesync, tbsync) the invitation looks fine, and I can accept it. However, in the SOGo webclient, the invitation looks as a regular email, with the following contents: Organizer John Doe is proposing a meeting to the attendees. You receive this mail as a notification, you are not scheduled as a participant. Based on what does the SOGo web client decide that I am not scheduled as a participant? I am member of gr...@internal.com, so I was supposed to be a participant. How does this work? Based on what does SOGo decide that I AM a participant, or that I am NOT one? And why would thunderbird happily display and process it as an invite, and the sogo webclient not? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] outlook / activesync (/ debian10?)
Hi Thomas, Yes, it looks quite similar, but not identical. We observe that the new folder is not even created on the server, it only exists locally in outlook. Mails appear moved to the folder in Outlook, but remain in the INBOX on the server. MJ On 21/11/2020 08:16, "Thomas Fuehrer" (t...@aon.at) wrote: Hi mj, what you're describing seems to be related to https://sogo.nu/bugs/view.php?id=3928. Regards, Thomas -Ursprüngliche Nachricht- Von: users-requ...@sogo.nu Im Auftrag von mj Gesendet: Donnerstag, 19. November 2020 15:55 An: users@sogo.nu Betreff: Re: [SOGo] outlook / activesync (/ debian10?) Hi On 11/19/20 3:23 PM, mj (li...@merit.unu.edu) wrote: We are now copying back the missing folders en emails, and are very happy that his old outlook profile was still accessible, otherwise the mails would have been lost. I need to correct myself there. Now, having access to the lost folder, we can confirm that the emails have in fact never left his INBOX on the server. He moved them to a new subfolder in outlook, but these changes were only done in the local outlook copy of his inbox, and never synced back to the server. But, no actual loss of emails occured. MJ -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] outlook / activesync (/ debian10?)
Hi On 11/19/20 3:23 PM, mj (li...@merit.unu.edu) wrote: We are now copying back the missing folders en emails, and are very happy that his old outlook profile was still accessible, otherwise the mails would have been lost. I need to correct myself there. Now, having access to the lost folder, we can confirm that the emails have in fact never left his INBOX on the server. He moved them to a new subfolder in outlook, but these changes were only done in the local outlook copy of his inbox, and never synced back to the server. But, no actual loss of emails occured. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] outlook / activesync (/ debian10?)
Hi, Just a serious word of warning: One of our users (our director, of course!) was complaining that specific folders with emails were missing from his SOGo webmail mailbox. We checked on the dovecot mail server, and the folders were indeed not present on the filesystem, and the backups confirmed that had in fact those folders had NEVER been there. For the record: many custom folers under his inbox WERE present, there were just some that were missing. No strange characters, nothing special. We did not understand. Then we launched his old Outlook/ActiveSync, and BOOM the missing folders WERE indeed there in his mailbox. No personal folders or anything configured, simply only his own mailbox over activesync, configured to sync everything. He had always used his mailbox primarily via his outlook/activesync. So probably the folders had been created and also the emails were moved to them over ActiveSync. They were just never actually synced back (uploaded) to the SOGo server. We are now copying back the missing folders en emails, and are very happy that his old outlook profile was still accessible, otherwise the mails would have been lost. We have no idea which of the components (sogo/outlook/activesync/debian10) is actually causing these issues, but that fact is that we have experienced quite a few, lately. (and far less in the past) So our conclusion (and perhaps warning to others here) is: don't rely too heavily on outlook/activesync/debian10. (our issues seem to be outlook-exclusive other activesync clients working reliably, TbSync/NineFolders, just to name a few) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo segfaults, and then: systemd: "Found left-over process xxxx (sogod) in control group while starting unit. Ignoring" -> sogo down
Hi, Since the below happened at logrotation-time, I checked that out that a bit more carefully of the server, and discovered a difference between stretch <-> buster logrotate config. As I manually edited our /etc/logrotate.d/rsyslog, the dist-upgrade had not replaced our file. See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900586 I hope this has an effect on the observed SOGo behaviour. I will update this next week sunday, to let the archives know if it helped. Still strange that it results segfaults in sogo. Regards, MJ On 11/15/20 11:43 AM, mj (li...@merit.unu.edu) wrote: Hi, We are running sogo (5.0.1-1) on an upgraded stretch -> buster debian x64. We've noticed serieus looking issues on two saterday nights in a row, when cron restarts sogo (I guess after log rotation) It starts off with some segfaults: Nov 15 00:00:27 server kernel: [552373.802573] sogod[23629]: segfault at 7ffe84ab0583 ip 7f9e51069201 sp 7ffe04ab0488 error 4 in libc-2.28.so[7f9e50fe9000+148000] Nov 15 00:00:27 server kernel: [552373.802587] Code: f0 0f 10 5c 16 e0 0f 11 07 0f 11 4f 10 0f 11 54 17 f0 0f 11 5c 17 e0 c3 48 39 f7 0f 87 8c 00 00 00 0f 84 28 ff ff ff 0f 10 26 <0f> 10 6c 16 f0 0f 10 74 16 e0 0f 10 7c 16 d0 44 0f 10 44 16 c0 49 next sogo is stopped: Nov 15 00:00:27 server sogo[2019]: Stopping SOGo: sogo. Nov 15 00:00:27 server systemd[1]: sogo.service: Succeeded. Nov 15 00:00:27 server systemd[1]: Stopped LSB: SOGo server. Nov 15 00:00:27 server systemd[1]: sogo.service: Found left-over process 23446 (sogod) in control group while starting unit. Ignoring. Nov 15 00:00:27 server systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. and the sogo restart: Nov 15 00:00:27 server systemd[1]: Starting LSB: SOGo server... However this last start fails, and SOGo is no longer running after the above. Full syslogs logs are here: https://pastebin.com/344eNHAx I think the sogo.service that is used is a generated one, here: root@server:/proc/1# cat /run/systemd/generator.late/sogo.service # Automatically generated by systemd-sysv-generator [Unit] Documentation=man:systemd-sysv-generator(8) SourcePath=/etc/init.d/sogo Description=LSB: SOGo server Before=multi-user.target Before=multi-user.target Before=multi-user.target Before=graphical.target After=remote-fs.target After=network-online.target Wants=network-online.target [Service] Type=forking Restart=no TimeoutSec=5min IgnoreSIGPIPE=no KillMode=process GuessMainPID=no RemainAfterExit=yes SuccessExitStatus=5 6 ExecStart=/etc/init.d/sogo start ExecStop=/etc/init.d/sogo stop Anyone with an idea? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] sogo segfaults, and then: systemd: "Found left-over process xxxx (sogod) in control group while starting unit. Ignoring" -> sogo down
Hi, We are running sogo (5.0.1-1) on an upgraded stretch -> buster debian x64. We've noticed serieus looking issues on two saterday nights in a row, when cron restarts sogo (I guess after log rotation) It starts off with some segfaults: Nov 15 00:00:27 server kernel: [552373.802573] sogod[23629]: segfault at 7ffe84ab0583 ip 7f9e51069201 sp 7ffe04ab0488 error 4 in libc-2.28.so[7f9e50fe9000+148000] Nov 15 00:00:27 server kernel: [552373.802587] Code: f0 0f 10 5c 16 e0 0f 11 07 0f 11 4f 10 0f 11 54 17 f0 0f 11 5c 17 e0 c3 48 39 f7 0f 87 8c 00 00 00 0f 84 28 ff ff ff 0f 10 26 <0f> 10 6c 16 f0 0f 10 74 16 e0 0f 10 7c 16 d0 44 0f 10 44 16 c0 49 next sogo is stopped: Nov 15 00:00:27 server sogo[2019]: Stopping SOGo: sogo. Nov 15 00:00:27 server systemd[1]: sogo.service: Succeeded. Nov 15 00:00:27 server systemd[1]: Stopped LSB: SOGo server. Nov 15 00:00:27 server systemd[1]: sogo.service: Found left-over process 23446 (sogod) in control group while starting unit. Ignoring. Nov 15 00:00:27 server systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. and the sogo restart: Nov 15 00:00:27 server systemd[1]: Starting LSB: SOGo server... However this last start fails, and SOGo is no longer running after the above. Full syslogs logs are here: https://pastebin.com/344eNHAx I think the sogo.service that is used is a generated one, here: root@server:/proc/1# cat /run/systemd/generator.late/sogo.service # Automatically generated by systemd-sysv-generator [Unit] Documentation=man:systemd-sysv-generator(8) SourcePath=/etc/init.d/sogo Description=LSB: SOGo server Before=multi-user.target Before=multi-user.target Before=multi-user.target Before=graphical.target After=remote-fs.target After=network-online.target Wants=network-online.target [Service] Type=forking Restart=no TimeoutSec=5min IgnoreSIGPIPE=no KillMode=process GuessMainPID=no RemainAfterExit=yes SuccessExitStatus=5 6 ExecStart=/etc/init.d/sogo start ExecStop=/etc/init.d/sogo stop Anyone with an idea? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ActiveSync folders and mails missing
Hi, On 02/11/2020 21:52, Thomas Mager (tom.s...@tmt.at) wrote: I think I will do the same debugging with sogo-tool and logging for the Outlook problem, where also not all the folders and mails appear, tomorrow. This is a problem we also see with Outlook. It seems outlook is a more unreliable activesync client than many of the available others. (like mobile clients, thunderbird with TbSync/ActiveSync, etc) Strange perhaps, considering both outlook and activesync are MS products. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo-ealarms-notify cronjob giving "[Warning] Aborted connection" from mysql
Hi all, For the archives, I'd just like to report that inverse support has identified and fixed the problem in sogo-ealarms-notify. (Fixed: 41bbbfacd9a63d7de53273a05a4f119ebda302ba) MJ On 9/17/20 3:20 PM, mj (li...@merit.unu.edu) wrote: Hi, With MySQL4DebugEnabled = YES in sogo.conf, the following is logged: # /bin/su -s /bin/bash -c '/usr/sbin/sogo-ealarms-notify' sogo 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] MySQL4 connection established 0x0x56369b188fd0 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] -- -[MySQL4Channel openChannel]: connection=0x0x56369b188fd0> opens channel count[0] 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] MySQL4 channel 0x0x56369b1ca320 opened (connection=0x0x56369b188fd0,sogo) 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: BEGIN; 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] query has no results. 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: SELECT t1.c_alarm_number, t1.c_name, t1.c_path, t1.c_recurrence_id, t1.c_uid FROM sogo_alarms_folder t1 WHERE t1.c_alarm_date >= 1600345500 AND t1.c_alarm_date <= 1600345800; 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] query has results, entering fetch-mode. 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: ROLLBACK; 2020-09-17 14:30:24.654 sogo-ealarms-notify[24890:24890] query has no results. 2020-09-17 14:30:24 417 [Warning] Aborted connection 417 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Anyone? MJ On 9/17/20 1:05 PM, mj (li...@merit.unu.edu) wrote: Hi, We're running sogo v5 on debian. Last tuesday we upgraded from stretch to buster. Ever since, mysql started giving errors for every run of the sogo-ealarms-notify cronjob: Sep 17 11:56:01 sogo CRON[6311]: (sogo) CMD (/usr/sbin/sogo-ealarms-notify > /dev/null 2>&1) mysql [Warning] Aborted connection 148 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Database connectivity otherwise works fine: /SOGo and ActiveSync interface works, calenders/contacts are all displayed without issues. For the record: After the upgrade from we also changed to the buster SOGo repo. Today we also tried with the latest v5 nightlies to see if that fixes this, but alas: no. Buster comes with mariadb-server-10.3, which we are running, using the 'traditional' (old style) sogo database layout. Installed sogo packages: # apt-show-versions|grep -e sogo sogo:amd64/buster 5.0.0.20200917-1 uptodate sogo-activesync:amd64/buster 5.0.0.20200917-1 uptodate # apt-show-versions|grep -e sope libsope-appserver4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-core4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-gdl1-4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-ldap4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-mime4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-xml4.9:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-dbg:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-gdl1-mysql:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-libxmlsaxdriver:amd64/buster 4.9.r1664.20200915 uptodate Anyone with an idea what to look for / where to look at? Why would the sogo-ealarms-notify cause this problem, while the regular sogo components works fine? Anyone else seeing this? Hope to get some insights here! Thanks! :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] user MOVEs message, but SOGo does DELETE instead -> mail lost
Hi Christian,
On 10/21/20 2:39 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote:
Hello
I didn't see that yet.
For us it's also a first, but a very worrying first.
Does the user have privileges to add email to the destination?
If not, it should have been aborted.
It's a folder within her own mailbox. Second time, it succeeded.
Was that a move to an external email account added to SOGo?
Nope, within the same ('internal', localhost) imap dovecot mailbox.
MJ
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] user MOVEs message, but SOGo does DELETE instead -> mail lost
Hi, Some additional info: We have (and already had) dovecot mail-log-plugin enabled (https://doc.dovecot.org/settings/plugin/mail-log-plugin) and the logs show NO copy action, only the DELETE. I verified our logging, to make sure that a COPY action would be logged, and here is a sample, to prove that dovecot would log a copy action: Thunderbird copy from INBOX to Drafts: Oct 21 11:17:38 mail dovecot: imap(username)<18022>: copy from INBOX: box=Drafts, uid=7410, msgid=<0.1.4b.2d8.1d6a785a415ff0...@mta-2d567506.ip4.emsmtp.us>, from="Newpharma" , subject=... Oct 21 11:17:38 mail dovecot: imap(username)<18022>: expunge: box=INBOX, uid=72758, msgid=<0.1.4b.2d8.1d6a785a415ff0...@mta-2d567506.ip4.emsmtp.us>, from="Newpharma" , subject=... SOGo copy back from Drafts to INBOX: Oct 21 11:21:24 mail dovecot: imap(username)<10375>: copy from Drafts: box=INBOX, uid=72759, msgid=<0.1.4b.2d8.1d6a785a415ff0...@mta-2d567506.ip4.emsmtp.us>, from="Newpharma" , subject=... Oct 21 11:21:24 mail dovecot: imap(username)<10375>: delete: box=Drafts, uid=7410, msgid=<0.1.4b.2d8.1d6a785a415ff0...@mta-2d567506.ip4.emsmtp.us>, from="Newpharma" , subject=... So, it really seems that SOGo yesterday actually DELETED a message that should have been copied, basically causing loss of emails for the end user. This looks quite disturbing. MJ On 10/20/20 2:51 PM, mj (li...@merit.unu.edu) wrote: Hi, We received a complaint from one of our users, claiming she lost (and has lost before in the past) an email, while using the "move to" functionality in the SOGo webmail interface. Below is the timeline, hopfully formatting will survive: 12:18:31.554 lda(username)<28404>: save: box=INBOX, uid=9826, msgid=<33gtpcvhtkczk...@ismtpd0029p1iad2.net.sendgrid>, from="zoom" , subject= 12:19:15:000 POST /SOGo/so/username/Mail/0/folderINBOX/moveMessages HTTP/1.1 12:19:15:229 sogod [13007]: |SOGo| starting method 'POST' on uri '/SOGo/so/tomai/Mail/0/folderINBOX/moveMessages' 12:19:15:380 imap(username)<27062>: delete: box=INBOX, uid=9826, msgid=<33gtpcvhtkczk...@ismtpd0029p1iad2.net.sendgrid>, from="zoom" , subject= 12:19:15.382 sogod [13007]: 84.x.y.z "POST /SOGo/so/username/Mail/0/folderINBOX/moveMessages HTTP/1.1" 204 0/73 0.173 - - 0 - 20 12:20:26.569 imap(username)<28783>: expunge: box=INBOX, uid=9826, msgid=<33gtpcvhtkczk...@ismtpd0029p1iad2.net.sendgrid>, from="zoom" , subject= and after this, the email is gone. She signed up again for the same zoom thing, received the email again, and this time the move to folder succeeded. She claims this has happened to her before, with a completely different (internal) email. If it actually happened like this, it would of course be very rather disturbing... The logs seem to backup her story: there is a moveMessages from SOGo, but nothing move-like is logged at the imap level, only a delete. We are slightly worried. :-| I will turn on ImapDebugEnabled = YES tonight, but what else to do? How to investigate this further? Has anyone ever seen something similar? She claims the first time she noticed this, was after we upgraded from latest 2.x to 4.x. Thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] user MOVEs message, but SOGo does DELETE instead -> mail lost
Hi, We received a complaint from one of our users, claiming she lost (and has lost before in the past) an email, while using the "move to" functionality in the SOGo webmail interface. Below is the timeline, hopfully formatting will survive: 12:18:31.554lda(username)<28404>: save: box=INBOX, uid=9826, msgid=<33gtpcvhtkczk...@ismtpd0029p1iad2.net.sendgrid>, from="zoom" , subject= 12:19:15:000POST /SOGo/so/username/Mail/0/folderINBOX/moveMessages HTTP/1.1 12:19:15:229sogod [13007]: |SOGo| starting method 'POST' on uri '/SOGo/so/tomai/Mail/0/folderINBOX/moveMessages' 12:19:15:380imap(username)<27062>: delete: box=INBOX, uid=9826, msgid=<33gtpcvhtkczk...@ismtpd0029p1iad2.net.sendgrid>, from="zoom" , subject= 12:19:15.382sogod [13007]: 84.x.y.z "POST /SOGo/so/username/Mail/0/folderINBOX/moveMessages HTTP/1.1" 204 0/73 0.173 - - 0 - 20 12:20:26.569 imap(username)<28783>: expunge: box=INBOX, uid=9826, msgid=<33gtpcvhtkczk...@ismtpd0029p1iad2.net.sendgrid>, from="zoom" , subject= and after this, the email is gone. She signed up again for the same zoom thing, received the email again, and this time the move to folder succeeded. She claims this has happened to her before, with a completely different (internal) email. If it actually happened like this, it would of course be very rather disturbing... The logs seem to backup her story: there is a moveMessages from SOGo, but nothing move-like is logged at the imap level, only a delete. We are slightly worried. :-| I will turn on ImapDebugEnabled = YES tonight, but what else to do? How to investigate this further? Has anyone ever seen something similar? She claims the first time she noticed this, was after we upgraded from latest 2.x to 4.x. Thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Howto Migrating database to new database server? Mysql 5.6 => MySQL 8
On 10/15/20 10:04 PM, Götz Reinicke (goetz.reini...@filmakademie.de) wrote: So dumping the database on host „mysql-server01“ and importing it at „new-mysqlserver“ will break all entries! This would only work, if the database server dose not has an other name. (I should have created an DNS alias for it in the past) Yes, there was a relevant thread about related issues week, subject: "mass-edit sogo_folder_info for database connection details" MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Mailbox Quota
Op 10/8/20 om 2:55 PM schreef Eslam Basyouni (eslam.basyo...@yahoo.com): Hello Guys, what is the best configuration for controlling users mail quota, where i need to give user 1G mailbox and other user 2 G, and they see that in SOGo and Control sending and receiving limit, i know it's maybe not from SOGo side , but i hope to get help from you , where i have Postfix and Dovecot and SOGo 5 on Centos 7 We configure these quota on the dovecot side, and SOGo simply displays those. Read here: https://wiki.dovecot.org/Quota/Configuration You can edit maildir per-user quota in the file maildirsize: https://wiki2.dovecot.org/Quota/Maildir I'm not sure how other mailbox formats handle quota. Good luck, MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] outlook 2016 / EAS / debug mode sync issues
Hi Thomas, The posted samples were actually from sogo.conf :-) I just pasted the much smaller replies in between these requests. See: https://pad.ceph.com/p/response1 https://pad.ceph.com/p/response2 https://pad.ceph.com/p/response3 https://pad.ceph.com/p/response4 There has not been a larger reply during the whole sync day than the samples above. Do these reveil anything interesting..? MJ Op 10/6/20 om 11:46 PM schreef Thomas Führer (t...@aon.at): Hi, the samples you provided don't really help, they just contain what is requested by OL. You have to check what is logged in sogo.log <http://sogo.log> when such requests are processed. Regards, Thomas ---- mj schrieb Op 10/6/20 om 8:59 PM schreef mj (li...@merit.unu.edu): > I am currently reading this > (https://techcommunity.microsoft.com/t5/exchange-team-blog/under-the-hood-exchange-activesync-mailbox-log-analysis/ba-p/591224) > to hopefully better understand what I am looking at. On that page, it says: "Typically you will see items being added to the device in the Sync response. You can see detailed information including the sender and subject if verbose logging has been enabled on the CAS servers." It seems that compared to microsoft, SOGo's SOGoEASDebugEnabled mode is very verbose, but still not verbose enough. It would make our lives so much easier, of SOGo would also log things like sender and subject... MJ -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] outlook 2016 / EAS / debug mode sync issues
Op 10/6/20 om 8:59 PM schreef mj (li...@merit.unu.edu): I am currently reading this (https://techcommunity.microsoft.com/t5/exchange-team-blog/under-the-hood-exchange-activesync-mailbox-log-analysis/ba-p/591224) to hopefully better understand what I am looking at. On that page, it says: "Typically you will see items being added to the device in the Sync response. You can see detailed information including the sender and subject if verbose logging has been enabled on the CAS servers." It seems that compared to microsoft, SOGo's SOGoEASDebugEnabled mode is very verbose, but still not verbose enough. It would make our lives so much easier, of SOGo would also log things like sender and subject... MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] outlook 2016 / EAS / debug mode sync issues
Hi Thomas,
Thanks for taking the time to respond!
I was running with SOGoEASDebugEnabled = YES, and now I uploaded three
EAS samples here:
https://pad.ceph.com/p/sample1
https://pad.ceph.com/p/sample2
https://pad.ceph.com/p/sample3
Listfolders for this particular user is this:
sogo-tool manage-eas listfolders username AB2CD7F43DD84143A658BC0D19857D0A
listfolders for AB2CD7F43DD84143A658BC0D19857D0A
Folder Key:
AB2CD7F43DD84143A658BC0D19857D0A+folder422e6327b3c558517874e2e67d9a
Folder Name: INBOX
Folder Key:
AB2CD7F43DD84143A658BC0D19857D0A+folder4e2e6327b3c558517874e2e67d9a
Folder Name: Sent Items
Folder Key:
AB2CD7F43DD84143A658BC0D19857D0A+folder502e6327b3c558517874e2e67d9a
Folder Name: Deleted Items
But the logs remain cryptic to me. Outlook could so easily report WHAT
email/calendar item it is currently requesting, and so could SOGo.
The above logs are with SOGoMaximumSyncWindowSize = 1
Grepping (-i) the SOGoEASDebugEnabled logs for "warn" or "error" gives
no (relevant) results.
Our inverse support contract has expired (we are currently renewing it,
but with without support until somewhere next week) so any help here is
very much appreciated. :-)
I am currently reading this
(https://techcommunity.microsoft.com/t5/exchange-team-blog/under-the-hood-exchange-activesync-mailbox-log-analysis/ba-p/591224)
to hopefully better understand what I am looking at.
All the best,
MJ
Op 10/5/20 om 6:53 PM schreef Thomas Führer (t...@aon.at):
Hi, are there any errors in sogo.log?
Running sogo with
SOGoEASDebugEnabled = YES
can give more details in sogo.log
Regarding collectionid check:
sogo-tool -v manage-eas listdevices
sogo-tool -v manage-eas listfolders
Regards, Thomas
mj schrieb
Hi,
We're having an issue where outlook 2016 in EAS mode doesn't seem to
sync to SOGo anymore, and usually shows "Waiting for server response -
Connected" and occasionally says "All folders are up to date" - but all
folders are NOT up to date.
Outlook in debug mode creates endless copies of virtually identical two
kinds of files in %temp%\EASLogFiles:
* eas{2020-10-05-11-21-59-825}_2761.xml (48KB)
* eas{2020-10-05-11-21-59-825}_2760.info.xml (1KB)
The .info.xml files (1500 of them by now) are all identical:
>
>
> 0
> MoreAvailable
> outlook\pstprx\storeas\eascontentdownloader.cpp
> 128
>
and the .xml files (48KB) differ only in three specific lines:
new transaction ID:
> X-TransactionID: {3271F3C5-27C8-403C-9AE7-04D8A49588F7}
The first half of the SyncKey: (127916-296532 vs 127901-296532)
> 127901-296532
And the ServerId seems to increment +1 for each next file:
> 48430
It looks as if the process is stuck on a particular item, and is trying
again and again. (and failing..?)
So, is there a way to find out WHAT item is causing this issue?
Is there a way to translate things like into actual
plain text items?
The outlook "Sync Issues" folder is empty.
Clues, anyone?
MJ
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] mass-edit sogo_folder_info for database connection details
Hi, I think what happened with us: In sogo.conf we used to have mysql creds userorig/passorig, with matching user in mysql: 'userorig'@'localhost' A year ago, we added a user in mysql: 'usernew'@'*' with rights granted on the sogo database, and changed sogo.conf to use that new user, but did NOT remove the old user. Everything continued to work fine. Recently we decided to remove that original 'userorig'@'localhost' from mysql, and then suddenly problems arose. Checking the database contents, we noticed that recently added users had the 'newusernew'@'* connection details in their sogo_folder_info, but older users were still using the (now deleted) 'userorig'@'localhost' I cannot explain why it seemed to work for you, and did not work for us. MJ Op 10/6/20 om 8:23 AM schreef c...@brain-biotech.de: Hello all, as I have recently changed the DB Password without knowing that it needs to be changed in the DB as well I ask myself what is the impact of the wrong password there? I had no reports that something is not working. I am a bit confused. Regards Christian On 05.10.20 17:59, Francis Lachapelle (flachape...@inverse.ca) wrote: Hi mj On Oct 2, 2020, at 8:26 AM, mj (li...@merit.unu.edu) wrote: For security reasons (more stringent password requirements) we would like to change the sogo database connection credentials. However, to do that, we don't only need edit sogo.conf, but also the saved credentials in the database, per user in the sogo_folder_info. Is there a supported nice way (sogo-tool?) to do that for users that are already in the database? We're runing mysql, btw, and SOGo V5. Exactly, you need to modify three columns of the sogo_folder_info table. If you want to change the password, you would do something like this: update sogo_folder_info set \ c_location = replace(c_location, 'YOUR_OLD_PASSWORD', 'YOUR_NEW_PASSWORD'), \ c_quick_location = replace(c_quick_location, 'YOUR_OLD_PASSWORD', 'YOUR_NEW_PASSWORD'), \ c_acl_location = replace(c_acl_location, 'YOUR_OLD_PASSWORD', 'YOUR_NEW_PASSWORD'); Francis -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] outlook 2016 / EAS / debug mode sync issues
Hi,
We're having an issue where outlook 2016 in EAS mode doesn't seem to
sync to SOGo anymore, and usually shows "Waiting for server response -
Connected" and occasionally says "All folders are up to date" - but all
folders are NOT up to date.
Outlook in debug mode creates endless copies of virtually identical two
kinds of files in %temp%\EASLogFiles:
* eas{2020-10-05-11-21-59-825}_2761.xml (48KB)
* eas{2020-10-05-11-21-59-825}_2760.info.xml (1KB)
The .info.xml files (1500 of them by now) are all identical:
0
MoreAvailable
outlook\pstprx\storeas\eascontentdownloader.cpp
128
and the .xml files (48KB) differ only in three specific lines:
new transaction ID:
X-TransactionID: {3271F3C5-27C8-403C-9AE7-04D8A49588F7}
The first half of the SyncKey: (127916-296532 vs 127901-296532)
127901-296532
And the ServerId seems to increment +1 for each next file:
48430
It looks as if the process is stuck on a particular item, and is trying
again and again. (and failing..?)
So, is there a way to find out WHAT item is causing this issue?
Is there a way to translate things like into actual
plain text items?
The outlook "Sync Issues" folder is empty.
Clues, anyone?
MJ
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] mass-edit sogo_folder_info for database connection details
Hi, Op 10/2/20 om 2:26 PM schreef mj (li...@merit.unu.edu): However, to do that, we don't only need edit sogo.conf, but also the saved credentials in the database, per user in the sogo_folder_info. Is there a supported nice way (sogo-tool?) to do that for users that are already in the database? Does the new database layout (that we are not yet using) make it any easier to change the sogo mysql database credendials? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] mass-edit sogo_folder_info for database connection details
Hi, For security reasons (more stringent password requirements) we would like to change the sogo database connection credentials. However, to do that, we don't only need edit sogo.conf, but also the saved credentials in the database, per user in the sogo_folder_info. Is there a supported nice way (sogo-tool?) to do that for users that are already in the database? We're runing mysql, btw, and SOGo V5. Thanks and have a nice weekend! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Wrong build of sogo?
Hi, I guess you only add the deb-src line? Perhaps read this page: https://sogo.nu/support/faq/how-to-install-sogo-on-ubuntu.html You need a line like: deb http://packages.inverse.ca/SOGo/nightly/5/ubuntu/ focal focal (depending on your version of ubuntu) Good luck, MJ Op 9/25/20 om 9:44 PM schreef Brandon Roa (bran...@bitlagoon.com): Okay, so I added the line "deb-src |http://packages.inverse.ca/SOGo/nightly/5/ubuntu/ bionic bionic" and now I can see more packages available for install in /var/lib/apt/lists/packages.inverse.ca_SOGo_nightly_5_ubuntu_dists_bionic_bionic_source_Sources| |That being said, when I run sudo apt-cache showpkg sogo, it still only shows the 3.2.10 build. | On 9/25/2020 11:53 AM, Brandon Roa (bran...@bitlagoon.com) wrote: I was dealing with an issue with our current installation of SOGo, but I started to realize that I may not actually have the latest version of SOGo installed, which is confusing since I followed all of the directions for installing SOGo on Ubuntu listed here: https://sogo.nu/support/faq/how-to-install-nightly-sogo-versions-on-ubuntu.html#/faq Here is the output from apt-cache showpkg sogo (after adding the nightly build repository to my sources.list file and running apt update): Package: sogo Versions: 3.2.10-1build1 (/var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_bionic_universe_binary-i386_Packages) Description Language: File: /var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_bionic_universe_binary-i386_Packages MD5: afc73cd48b910e30a2e5d91a4be9fc2e Description Language: en File: /var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_bionic_universe_i18n_Translation-en MD5: afc73cd48b910e30a2e5d91a4be9fc2e Reverse Depends: Dependencies: 3.2.10-1build1 - gnustep-base-runtime (2 1.25.0) libc6 (2 2.7) libcurl3-gnutls (2 7.16.2) libgcc1 (2 1:3.0) libglib2.0-0 (2 2.14.0) libgnustep-base1.25 (2 1.25.0) libgnutls30 (2 3.5.0) liblasso3 (2 2.5.0) libmemcached11 (0 (null)) libobjc4 (2 4.6) libsbjson2.3 (0 (null)) libsope1 (2 3.2.10) tmpreaper (16 (null)) systemd (0 (null)) sogo-common (5 3.2.10-1build1) adduser (0 (null)) zip (0 (null)) lsb-base (2 3.0-6) memcached (0 (null)) postgresql (16 (null)) default-mysql-server (16 (null)) virtual-mysql-server (0 (null)) Provides: 3.2.10-1build1 - Reverse Provides: And here is my output from apt-get update: Hit:1 http://us.archive.ubuntu.com/ubuntu bionic InRelease Hit:2 http://packages.inverse.ca/SOGo/nightly/5/ubuntu bionic InRelease Hit:3 http://us.archive.ubuntu.com/ubuntu bionic-updates InRelease Hit:4 http://security.ubuntu.com/ubuntu bionic-security InRelease Hit:5 http://us.archive.ubuntu.com/ubuntu bionic-backports InRelease Reading package lists... Done Am I missing some crucial step in adding the nightly build repo? Or is this the right build of sogo? Thanks in advance for any help! -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo-ealarms-notify cronjob giving "[Warning] Aborted connection" from mysql
Hi, No replies meaning: "No, we all don't see this issue happening", or there is really nobody here running V5 under debian 10? MJ On 9/21/20 5:26 PM, mj (li...@merit.unu.edu) wrote: Hi, Anyone else here running sogo v5 on debian 10, and willing to confirm or not? Are you seeing the same Aborted connection 417 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) each time sogo-ealarms-notify runs? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo-ealarms-notify cronjob giving "[Warning] Aborted connection" from mysql
Hi, Anyone else here running sogo v5 on debian 10, and willing to confirm or not? Are you seeing the same Aborted connection 417 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) each time sogo-ealarms-notify runs? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo-ealarms-notify cronjob giving "[Warning] Aborted connection" from mysql
It looks like this sogo bug, but this is said to be closed in v5: https://sogo.nu/bugs/view.php?id=4684 The same problem is also reported (on debian) here: https://sogo.nu/bugs/view.php?id=4872 Anyone else here running sogo on debian 10? Are you seeing this too? MJ On 9/17/20 3:20 PM, mj (li...@merit.unu.edu) wrote: Hi, With MySQL4DebugEnabled = YES in sogo.conf, the following is logged: # /bin/su -s /bin/bash -c '/usr/sbin/sogo-ealarms-notify' sogo 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] MySQL4 connection established 0x0x56369b188fd0 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] -- -[MySQL4Channel openChannel]: connection=0x0x56369b188fd0> opens channel count[0] 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] MySQL4 channel 0x0x56369b1ca320 opened (connection=0x0x56369b188fd0,sogo) 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: BEGIN; 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] query has no results. 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: SELECT t1.c_alarm_number, t1.c_name, t1.c_path, t1.c_recurrence_id, t1.c_uid FROM sogo_alarms_folder t1 WHERE t1.c_alarm_date >= 1600345500 AND t1.c_alarm_date <= 1600345800; 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] query has results, entering fetch-mode. 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: ROLLBACK; 2020-09-17 14:30:24.654 sogo-ealarms-notify[24890:24890] query has no results. 2020-09-17 14:30:24 417 [Warning] Aborted connection 417 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Anyone? MJ On 9/17/20 1:05 PM, mj (li...@merit.unu.edu) wrote: Hi, We're running sogo v5 on debian. Last tuesday we upgraded from stretch to buster. Ever since, mysql started giving errors for every run of the sogo-ealarms-notify cronjob: Sep 17 11:56:01 sogo CRON[6311]: (sogo) CMD (/usr/sbin/sogo-ealarms-notify > /dev/null 2>&1) mysql [Warning] Aborted connection 148 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Database connectivity otherwise works fine: /SOGo and ActiveSync interface works, calenders/contacts are all displayed without issues. For the record: After the upgrade from we also changed to the buster SOGo repo. Today we also tried with the latest v5 nightlies to see if that fixes this, but alas: no. Buster comes with mariadb-server-10.3, which we are running, using the 'traditional' (old style) sogo database layout. Installed sogo packages: # apt-show-versions|grep -e sogo sogo:amd64/buster 5.0.0.20200917-1 uptodate sogo-activesync:amd64/buster 5.0.0.20200917-1 uptodate # apt-show-versions|grep -e sope libsope-appserver4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-core4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-gdl1-4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-ldap4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-mime4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-xml4.9:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-dbg:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-gdl1-mysql:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-libxmlsaxdriver:amd64/buster 4.9.r1664.20200915 uptodate Anyone with an idea what to look for / where to look at? Why would the sogo-ealarms-notify cause this problem, while the regular sogo components works fine? Anyone else seeing this? Hope to get some insights here! Thanks! :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] sogo-ealarms-notify cronjob giving "[Warning] Aborted connection" from mysql
Hi, With MySQL4DebugEnabled = YES in sogo.conf, the following is logged: # /bin/su -s /bin/bash -c '/usr/sbin/sogo-ealarms-notify' sogo 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] MySQL4 connection established 0x0x56369b188fd0 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] -- -[MySQL4Channel openChannel]: opens channel count[0] 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] MySQL4 channel 0x0x56369b1ca320 opened (connection=0x0x56369b188fd0,sogo) 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: BEGIN; 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] query has no results. 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: SELECT t1.c_alarm_number, t1.c_name, t1.c_path, t1.c_recurrence_id, t1.c_uid FROM sogo_alarms_folder t1 WHERE t1.c_alarm_date >= 1600345500 AND t1.c_alarm_date <= 1600345800; 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] query has results, entering fetch-mode. 2020-09-17 14:30:24.653 sogo-ealarms-notify[24890:24890] SQL: ROLLBACK; 2020-09-17 14:30:24.654 sogo-ealarms-notify[24890:24890] query has no results. 2020-09-17 14:30:24 417 [Warning] Aborted connection 417 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Anyone? MJ On 9/17/20 1:05 PM, mj (li...@merit.unu.edu) wrote: Hi, We're running sogo v5 on debian. Last tuesday we upgraded from stretch to buster. Ever since, mysql started giving errors for every run of the sogo-ealarms-notify cronjob: Sep 17 11:56:01 sogo CRON[6311]: (sogo) CMD (/usr/sbin/sogo-ealarms-notify > /dev/null 2>&1) mysql [Warning] Aborted connection 148 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Database connectivity otherwise works fine: /SOGo and ActiveSync interface works, calenders/contacts are all displayed without issues. For the record: After the upgrade from we also changed to the buster SOGo repo. Today we also tried with the latest v5 nightlies to see if that fixes this, but alas: no. Buster comes with mariadb-server-10.3, which we are running, using the 'traditional' (old style) sogo database layout. Installed sogo packages: # apt-show-versions|grep -e sogo sogo:amd64/buster 5.0.0.20200917-1 uptodate sogo-activesync:amd64/buster 5.0.0.20200917-1 uptodate # apt-show-versions|grep -e sope libsope-appserver4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-core4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-gdl1-4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-ldap4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-mime4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-xml4.9:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-dbg:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-gdl1-mysql:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-libxmlsaxdriver:amd64/buster 4.9.r1664.20200915 uptodate Anyone with an idea what to look for / where to look at? Why would the sogo-ealarms-notify cause this problem, while the regular sogo components works fine? Anyone else seeing this? Hope to get some insights here! Thanks! :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] sogo-ealarms-notify cronjob giving "[Warning] Aborted connection" from mysql
Hi, We're running sogo v5 on debian. Last tuesday we upgraded from stretch to buster. Ever since, mysql started giving errors for every run of the sogo-ealarms-notify cronjob: Sep 17 11:56:01 sogo CRON[6311]: (sogo) CMD (/usr/sbin/sogo-ealarms-notify > /dev/null 2>&1) mysql [Warning] Aborted connection 148 to db: 'sogo-db' user: 'sogo-user' host: 'localhost' (Got an error reading communication packets) Database connectivity otherwise works fine: /SOGo and ActiveSync interface works, calenders/contacts are all displayed without issues. For the record: After the upgrade from we also changed to the buster SOGo repo. Today we also tried with the latest v5 nightlies to see if that fixes this, but alas: no. Buster comes with mariadb-server-10.3, which we are running, using the 'traditional' (old style) sogo database layout. Installed sogo packages: # apt-show-versions|grep -e sogo sogo:amd64/buster 5.0.0.20200917-1 uptodate sogo-activesync:amd64/buster 5.0.0.20200917-1 uptodate # apt-show-versions|grep -e sope libsope-appserver4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-core4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-gdl1-4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-ldap4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-mime4.9:amd64/buster 4.9.r1664.20200915 uptodate libsope-xml4.9:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-dbg:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-gdl1-mysql:amd64/buster 4.9.r1664.20200915 uptodate sope4.9-libxmlsaxdriver:amd64/buster 4.9.r1664.20200915 uptodate Anyone with an idea what to look for / where to look at? Why would the sogo-ealarms-notify cause this problem, while the regular sogo components works fine? Anyone else seeing this? Hope to get some insights here! Thanks! :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Sogo - Lemonldap - Saml
Hi Kenny,
In the past, we also setup a PoC with SOGo / keycloak / SAML2. For IMAP
authentication, we used:
https://github.com/ck-ws/pam-script-saml
But because of the SAML2 sessions timeing out, we went back to regular
LDAP auth. We would like to move to SAML2, so we're following the recent
SAML2 list threads with interest.
MJ
On 7/19/20 2:02 PM, Jeroen van Os (jeroen.va...@nevel.io) wrote:
Hi Kenny,
I have been trying to get SAML to work with SOGo as well. In Keycloak
the following configuration works:
Client scopes: none
Mappers: fill in "email" and "username" with information from your
credentials provider
Set scope to "full scope allowed"
In the SOGo config file we have this line, the rest is similar to what
you provided:
SOGoSAML2LoginAttribute = username;
Don't forget to take into account that even if you get SAML to work, the
connection to your IMAP and SMTP server may not work. Because SOGo has
no knowledge of the user's password, it cannot authenticate against
regular IMAP and SMTP servers that expect user credentials for
authorization. So you will need to find a way to authenticate without
knowing the user's password.
Kind regards,
Jeroen
Op 18/07/2020 om 22:19 schreef "la.jolie@paquerette"
(la.jo...@paquerette.org):
Going on with my attemps to connect Sogo to LemonLdap, I tried also with
the SAML protocol.
Few weeks ago, I first tried with Keycloak
(https://www.mail-archive.com/users@sogo.nu/msg29805.html), but I didn't
find a solution.
Unfortunately, with LemonLdap, I have the same error:
|SOGo| starting method 'POST' on uri '/SOGo/saml2-signon-post'
|SOGo| traverse(acquire): SOGo => saml2-signon-post
|SOGo| do traverse name: 'SOGo'
|SOGo| do traverse name: 'saml2-signon-post'
|SOGo| set clientObject:
sogod[8630:8630] EXCEPTION:
NAME:NSInvalidArgumentException REASON:Tried to add nil value for key
'login' to dictionary INFO:{}
|SOGo| request took 0.013806 seconds to execute
<0x0x563823b8f410[WOResponse]> Zipping of response disabled
127.0.0.1 "POST /SOGo/saml2-signon-post HTTP/1.1" 501 0/7289 0.019 - -
692K
I'm back to the post https://sogo.nu/bugs/view.php?id=4441
Alas, no clue what Sogo is waiting.
I attached a saml token example LemonLdap send back to Sogo.
For the attribute with my mail (for the login), I tried the name mail,
email & login, but same error.
What is the attribute name Sogo wants for the key 'login'?
Is something wrong with the Saml token Sogo is receiving from LemonLdap?
Thanks,
Kenny
My Sogo config:
SOGoProfileURL =
"mysql://yyy:x@127.0.0.1:3306/sogo/sogo_user_profile";
OCSFolderInfoURL =
"mysql://yyy:x@127.0.0.1:3306/sogo/sogo_folder_info";
OCSSessionsFolderURL =
"mysql://yyy:x@127.0.0.1:3306/sogo/sogo_sessions_folder";
OCSEMailAlarmsFolderURL =
"mysql://yyy:x@127.0.0.1:3306/sogo/sogo_alarms_folder";
SOGoLanguage = English;
SOGoAppointmentSendEMailNotifications = YES;
SOGoMailingMechanism = smtp;
SOGoSMTPServer = 127.0.0.1;
SOGoTimeZone = UTC;
SOGoSentFolderName = Sent;
SOGoTrashFolderName = Trash;
SOGoDraftsFolderName = Drafts;
SOGoIMAPServer = "imap://localhost:143/";
SOGoSieveServer = "sieve://localhost:4190/";
SOGoIMAPAclConformsToIMAPExt = YES;
SOGoVacationEnabled = NO;
SOGoForwardEnabled = NO;
SOGoSieveScriptsEnabled = NO;
SOGoFirstDayOfWeek = 0;
SOGoMailMessageCheck = manually;
SOGoMailAuxiliaryUserAccountsEnabled = NO;
SOGoMemcachedHost = 127.0.0.1;
SOGoCacheCleanupInterval = 3600;
SOGoAuthenticationType = saml2;
NGImap4AuthMechanism = PLAIN; # tried without the option too
SOGoSAML2PrivateKeyLocation = "/etc/sogo/saml.pem";
SOGoSAML2CertificateLocation = "/etc/sogo/saml.crt";
SOGoSAML2IdpMetadataLocation = "/etc/sogo/idp-metadata.xml";
SOGoSAML2IdpPublicKeyLocation = "/etc/sogo/idp-public.key";
SOGoSAML2IdpCertificateLocation = "/etc/sogo/idp-public.key";
SOGoSAML2LoginAttribute = mail;
SOGoSAML2LogoutEnabled = YES;
SOGoSAML2LogoutURL = "https://;;
WOWorkersCount = 10;
SOGoEASDebugEnabled = YES;
GCSFolderDebugEnabled = YES;
GCSFolderStoreDebugEnabled = YES;
LDAPDebugEnabled = YES;
MySQL4DebugEnabled = YES;
NGImap4DisableIMAP4Pooling = YES;
ImapDebugEnabled = YES;
OCSFolderManagerSQLDebugEnabled = YES;
PGDebugEnabled = YES;
SOGoDebugRequests = YES;
SOGoMailKeepDraftsAfterSend = YES;
SOGoUIxDebugEnabled = YES;
SoDebugObjectTraversal = YES;
SoSecurityManagerDebugEnabled = YES;
WODontZipResponse = YES;
WODebugZipResponse = YES;
}
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 FreeBusy lookup
On 7/14/20 5:17 PM, armin.v...@mmlab.de wrote: Then I assume that the %Name% placeholder works with Outlook but not with the webbrowser. True, a webbrowser would have no idea what to replace %Name% with, and outlook does. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 FreeBusy lookup
On 13/07/2020 11:38, armin.v...@mmlab.de wrote: Conclusion: Outlook won't be able to lookup the ifb file, if you do not use the real username but the %Name% placeholder. Well my conclusion is different. We use the url with %Name% in it, and it works. We see that outlook replaces the %Name% placeholder at lookup time with the appropriate localpart of the email address, and thus locates freebuzy info for all users on that domain. You could even use the %SERVER% placeholder, to access different servers for different domains. But anyway: if your config works for you, then there we have no problem, I guess. :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 FreeBusy lookup
Hi, On 7/8/20 2:18 PM, armin.v...@mmlab.de wrote: I think that I made the mistake not to replace the %Name% string in No you should keep the %Name%. Outlook will replace it with the localpart(@) of the provided email address. https://myserver.mydomain.mytld/SOGo/dav/public/%Name%/freebusy.ifb by the real username. I assumed that this variable will be resolved automatically. It will. The test with the webbrowser shows that the freebusy.ifb file will be generated without any issue. Then normally it should also work with the %Name% placeholder. Could you tell me if you are also running Thunderbird Lightning clients in your environment? I'm wondering if the Freebusy lookup will work between users using Thunderbird Lightning and Outlook users because the mail clients use different mechanisms for it. We were running straight caldav/lightning, but are more and more moving towards TbSync with CalDAV and ActiveSync. Best, MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 FreeBusy lookup
Hi Armin, I have just checked, and it seems to work here, Outlook 2016, imap mode, with the freebuzy url configured. Just for the record: you don't need the CalDAV synchonizer for this config. The freebuzy lookup works of the provided .ifb url. Perhaps the CalDAV Synchronizer is getting in the way? The file freebusy.ifb is nowhere on your system, as it is generated dynamically on the fly by SOGo, specific for each user's freebuzy info. So no: don't create it. Suppose you invite username@mydomain.mytld, try access in a browser: https://myserver.mydomain.mytld/SOGo/dav/public/username/freebusy.ifb It should give you the generated file with freebuzy info. (note the matching mydomain.mytld in the url and the email address) Best, MJ On 06/07/2020 08:34, armin.v...@mmlab.de wrote: Hi! FreeBusy lookups with Outlook do not work in my environment (black-white hatched bar which indicates that the FreeBusy info is not available). The environment consists of the following: - Server: SOGo 4.3.1 - E-Mail-Client: Outlook 2016 (16.0.11929.20836) - CalDAV Synchronizer: 3.8.0.0 I followed this guide https://sogo.nu/files/docs/SOGoOutlookConnectorConfigurationGuide.html and can confirm that synchronisation of both personal SOGo calendar and SOGo global address book work fine. In the SOGo config file sogo.conf I added the following FreeBusy related lines and restarted the sogod service: SOGoEnablePublicAccess = YES; SOGoFreeBusyDefaultInterval = (7, 365); In Outlook's FreeBusy settings I entered the URL https://myserver.mydomain.mytld/SOGo/dav/public/%Name%/freebusy.ifb accordingly (path for publication and lookup path). I was wondering where the file called "freebusy.ifb" would be located on the SOGo server and searched its entire filesystem, but couldn't detect it. Do I have to create it manually as an empty file and if so, where would I have to create it exactly (local path on the server)? Regarding the users personal calendars' sharing settings I configured them for public access with "See Date & Time" by the SOGo WebGUI. Apparently the above mentioned configuration guide is not complete. Sth. is missing there. Could so. point me into the right direction, please? Maybe the first thing to clarify is whether the file called "freebusy.ifb" has to be created manually. Thank you very much! BTW: FreeBusy lookup using Thunderbird Lightning works perfectly. Kind regards Armin __ Information from mm-lab IT security __The message was checked by ESET Mail Security. -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] freebuzy SOGo to ms exchange
Hi, We are using SOGo's freebuzy information lookup from MS exchange, using the Exchange Web Services (/ews) interface. Our partner started talking about migrating their on-prem exchange setup into a O365 hosted exchange environment. Thinking about our freebuzy lookup, I started googled a bit and found this page from 2018: https://techcommunity.microsoft.com/t5/exchange-team-blog/upcoming-changes-to-exchange-web-services-ews-api-for-office-365/ba-p/608055 Reading this, it seems that /ews funtionality is on it's way out, and users are asked to move to "Graph"..? We're bit unsure what the above means for the SOGo scheduling <-> MS exchange. Could anyone comment on this, please? -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] scheduling over activesync
Hi, I must apologise, it DOES seem to work in thunderbird..! I had simply selected the wrong mailbox / emailadress. :-| So...the fact that it does not work in NineFolders is then probably also not SOGo's fault. Sorry! MJ On 6/24/20 8:55 AM, mj (li...@merit.unu.edu) wrote: Hi, A question: many of our users nowadays are using ActiveSync, on mobile on thunderbird for contacts/calendars and on Outlook. Question: using the SOGo web access, you can schedule appointments, and invite users, find timeslots where all are available, etc. Is the above functionality also expected work over ActiveSync? Reason I ask: - Using NineFolders on android over ActiveSync, schedule appointment, invite another SOGo user: "Calendar cannot be shown" - Using Thunderbird, (with TbSync using ActieSync) schedule appointment, invite another (local) SOGo user: His/her entire schedule is displayed as grey = Free. FYI: using the same users to schedule an appointment over the SOGo webaccess works as expected, including free/buzy lookup. So it seems NOT to work over ActiveSync. Is this a known issue? And if it is, is being adressed? Or a misconfiguration of some sort on our end? For the record: this is latest SOGo V4 running on debian. Thanks for any pointers! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] scheduling over activesync
Hi, A question: many of our users nowadays are using ActiveSync, on mobile on thunderbird for contacts/calendars and on Outlook. Question: using the SOGo web access, you can schedule appointments, and invite users, find timeslots where all are available, etc. Is the above functionality also expected work over ActiveSync? Reason I ask: - Using NineFolders on android over ActiveSync, schedule appointment, invite another SOGo user: "Calendar cannot be shown" - Using Thunderbird, (with TbSync using ActieSync) schedule appointment, invite another (local) SOGo user: His/her entire schedule is displayed as grey = Free. FYI: using the same users to schedule an appointment over the SOGo webaccess works as expected, including free/buzy lookup. So it seems NOT to work over ActiveSync. Is this a known issue? And if it is, is being adressed? Or a misconfiguration of some sort on our end? For the record: this is latest SOGo V4 running on debian. Thanks for any pointers! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Login successful, but immediate return to login page
Hi,
With us, the page after login is: http://my.site/SOGo/so/my_username
Seems you're missing /so/
Does it work better when adding that manually?
MJ
On 5/22/20 4:32 PM, MI (mi.li...@alma.ch) wrote:
Hi,
I'm new to Sogo, so sorry if I just missed something obvious.
After setting up Sogo, I can login at http://my.site/SOGo/ and I briefly
see the "Welcome ..." screen. Then it is immediately replaced by the
same logon page, but with http://my.site/SOGo/my_username as the URL.
I'm using the Debian sogo v. 4.0.7 package with Debian 10.3 (buster),
and a PostgreSQL (v. 11) db.
Below are my sogo.conf and sogo.log files.
Thanks for any help,
MI
This is my sogo.conf file :
# cat /etc/sogo/sogo.conf
{
SOGoProfileURL
="postgresql://sogo:sogo@127.0.0.1:5433/sogo/sogo_user_profile";
OCSFolderInfoURL
="postgresql://sogo:sogo@127.0.0.1:5433/sogo/sogo_folder_info";
OCSSessionsFolderURL
="postgresql://sogo:sogo@127.0.0.1:5433/sogo/sogo_sessions_folder";
OCSEMailAlarmsFolderURL
="postgresql://sogo:sogo@127.0.0.1:5433/sogo/sogo_alarms_folder";
SOGoLanguage = English;
SOGoAppointmentSendEMailNotifications = YES;
SOGoMailingMechanism = smtp;
SOGoSMTPServer = 127.0.0.1;
SOGoTimeZone = Europe/Zurich;
SOGoSentFolderName = Sent;
SOGoTrashFolderName = Trash;
SOGoDraftsFolderName = Drafts;
SOGoIMAPServer = "imaps://localhost:143/?tls=YES";
SOGoSieveServer = "sieve://localhost:4190/?tls=YES";
SOGoIMAPAclConformsToIMAPExt = YES;
SOGoVacationEnabled = NO;
SOGoForwardEnabled = NO;
SOGoSieveScriptsEnabled = NO;
SOGoFirstDayOfWeek = 1;
SOGoMailMessageCheck = manually;
SOGoMailAuxiliaryUserAccountsEnabled = NO;
SOGoMemcachedHost = 127.0.0.1;
SOGoUserSources =
(
{
type = sql;
id = directory;
viewURL ="postgresql://sogo:sogo@127.0.0.1:5433/sogo/sogo_users";
canAuthenticate = YES;
isAddressBook = YES;
userPasswordAlgorithm = md5;
}
);
GCSFolderDebugEnabled = YES;
GCSFolderStoreDebugEnabled = YES;
ImapDebugEnabled = YES;
LDAPDebugEnabled = YES;
OCSFolderManagerSQLDebugEnabled = YES;
PGDebugEnabled = YES;
SoDebugBaseURL = YES;
SoDebugObjectTraversal = YES;
SOGoDebugRequests = YES;
SOGoUIxDebugEnabled = YES;
SoSecurityManagerDebugEnabled = YES;
WODontZipResponse = YES;
WOLogFile = /var/log/sogo/sogo.log;
}
And this is the sogo.log :
May 22 15:09:03 sogod [17195]: |SOGo| starting method 'GET' on uri '/SOGo'
May 22 15:09:03 sogod [17195]: |SOGo| traverse(acquire): SOGo
May 22 15:09:03 sogod [17195]: |SOGo| do traverse name: 'SOGo'
May 22 15:09:03 sogod [17195]: |SOGo| set clientObject:
May 22 15:09:03 sogod [17195]: |SOGo| request took 0.006445 seconds to
execute
May 22 15:09:03 sogod [17195]: 85.0.245.86 "GET /SOGo HTTP/1.1" 302 0/0
0.008 - - 0
May 22 15:09:03 sogod [17195]: |SOGo| starting method 'GET' on uri '/SOGo/'
May 22 15:09:03 sogod [17195]: |SOGo| traverse(acquire): SOGo
May 22 15:09:03 sogod [17195]: |SOGo| do traverse name: 'SOGo'
May 22 15:09:03 sogod [17195]: |SOGo| set clientObject:
May 22 15:09:03 sogod [17195]: |SOGo| constructed root-url: /SOGo/
May 22 15:09:03 sogod [17195]: |SOGo| setting root-url in context: /SOGo/
May 22 15:09:03 sogod [17195]: |SOGo| ROOT baseURL(no container,
name=(null)):
own: /SOGo/
May 22 15:09:03 sogod [17195]: |SOGo| request took 0.020625 seconds to
execute
May 22 15:09:03 sogod [17195]: 85.0.245.86 "GET /SOGo/ HTTP/1.1" 200
27149/0 0.022 - - 0
May 22 15:09:21 sogod [17195]: |SOGo| starting method 'POST' on uri
'/SOGo/connect'
May 22 15:09:21 sogod [17195]: |SOGo| traverse(acquire): SOGo => connect
May 22 15:09:21 sogod [17195]: |SOGo| do traverse name: 'SOGo'
May 22 15:09:21 sogod [17195]: |SOGo| do traverse name: 'connect'
May 22 15:09:21 sogod [17195]: |SOGo| set clientObject:
2020-05-22 15:09:21.974 sogod[17195:17195] PostgreSQL72 connection established:
<0x0x55931bdbcee0[PGConnection]: connection=0x0x55931be56720>
2020-05-22 15:09:21.974 sogod[17195:17195] PostgreSQL72 channel 0x0x55931bdaaa40
opened (connection=<0x0x55931bdbcee0[PGConnection]:
connection=0x0x55931be56720>)
2020-05-22 15:09:21.974 sogod[17195:17195] PG0x0x55931bdaaa40 SQL: SELECT
c_password FROM sogo_users WHERE c_uid = 'mi'
May 22 15:09:21 sogod [17195]: SOGoRootPage successful login from
'85.0.245.86' for user 'mi' - expire = -1 grace = -1
2020-05-22 15:09:21.977 sogod[17195:17195] PG0x0x55931bdaaa40 SQL: SELECT *
FROM sogo_users WHERE (c_uid = 'mi') OR (mail = 'mi')
2020-05-22
Re: [SOGo] observations after upgrading to v4
Hi, On 11/05/2020 16:09, infoomatic (infooma...@gmx.at) wrote: Thanks for the info. I am planning to upgrade but I might wait a little bit... Are you now on V3, or still on V2? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] observations after upgrading to v4
Hi, We received some feedback of our users on sogo V4 (4.3.1) that we recently deployed. This mail is not to complain, but just to see if someone here has encountered these things as well, and perhaps someone has tips or suggestions for us..? - After forwarding an email, the standard focus is no longer in the "To" area, but in the bodytext field. This is different than v2 and thunderbird. The users say they prefer the focus in the "To" field. But perhaps there is a good reason for it? - We received feedback from some users about the post-login white-screen delay before the actual Mail component fills the browserscreen. The Address Book opens immediately, Calendar has a one-sec blank-screen delay, but the Mail windows can take up to 4-5 secs to open. (seems to depend on the mailbox size) - We have some Grammarly users at the institute, and the Grammarly browser extensions severly impacts mail composition speed. (they have to stop typing, waiting for the characters to appear on screen) Turning the browser extension off solves this. - Firefox keeps asking if we want to add webmail.company.com as an application for mailto links. You can click it away, but it re-appears each time you change back to the Mail module or login again. - Mails occasionally have tags like "junk" or "nonjunk". Looking at the message source, we have no idea where these tags come from. For the rest they like it very much, thanks, inverse team! Greetings, MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] v4 mysql combined format still optional?
Hi Christian, On 4/28/20 6:11 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Yes, it is still optional. And the later database update script works for both. Thanks for confirming! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] v4 mysql combined format still optional?
Hi, Just a quick question: Is with sogo V4 the 'new' combined database still optional? We realise that "sql-update-3.2.10_to_4.0.0.sh" is mandatory. We just want to make sure that sql-update-3.0.0-to-combined-mysql.sh is still optional, is that right? (yes: it says "it complies to the new optional 9-table model" in the file, but I'd just like to make sure here...) Thanks! -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Delete users with emails from LDAP and SOGo
Hi! Not really what you're asking, but sharing it anyway. I wrote a little script to remove users mailboxes that no longer exist. (meaning: can no longer be resolved though the postfix postmap tool) What this does: - it traverses through all directories in the /var/vmail dir, these should all be valid mailboxes - it asks postmap if that address can be delivered to - if not, it writes to a bash file that you could run, to move the longer-longer valid email directories to another location. Sharing it below, I hope it will help you, or perhaps someone else. If anyone has something similar for the SOGo database entries for no longer existing users, I would like to see it. :-) Here is the little script that I put under /etc/cron-daily #!/bin/bash # init variables, customize below # send notifications to EMAIL="notificati...@company.com" # what domain to use to check deliverability DOMAIN="domain.org" # output for bash cleanup commands-file COMMANDS="/var/vmail-orphaned/orphan-mailboxes" # file to email STATUS="/var/vmail-orphaned/orphaned-status" # where mailboxes are stored MAILBOXES_UNDER="/var/vmail" # where to move mailboxes to, to generate the bash cleanup file MAILBOXES_ORPHANED="/var/vmail-orphaned" # postfix ldap config file POSTFIX_LDAP="ldap:/etc/postfix/ad-mailboxes.cf" # no need to customize below here POSTMAP=$(which postmap) # init the bash cleanup run file echo "# " $(date) > $COMMANDS echo "# remove the following safety exit, if you actually want to run the file:" >> $COMMANDS echo "exit" >> $COMMANDS echo "" >> $COMMANDS # init the email status file rm -f $STATUS touch $STATUS cd $MAILBOXES_UNDER # traverse all email folders for DIR in */ ; do # convert directory name into an emailaddress # first remove the trailing slash: LOCALPART=$(echo $DIR | sed 's:/*$::') # convert to email address TEST_EMAIL="$LOCALPART@$DOMAIN" # check if postfix can deliver to that mailbox, using the postmap utility # returns empty if undeliverable DELIVERABLE=$(eval "$POSTMAP -q $TEST_EMAIL $POSTFIX_LDAP") # then action, based on deliverability if [ -z "$DELIVERABLE" ] # no output: meaning not deliverable then echo "Postmap says: NOT deliverable: $TEST_EMAIL ($DIR)" >> $STATUS echo "mv $MAILBOXES_UNDER/$LOCALPART $MAILBOXES_ORPHANED" >> $COMMANDS fi done # send email if [ -s $STATUS ]; then cat $STATUS | mail -s "Daily overview of orphaned mailboxes" $EMAIL fi -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] create appointment
Hi! Aah! I see now :-) Thanks Christian! On 11/19/19 5:09 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hello Am 19.11.19 um 16:15 schrieb lists (li...@merit.unu.edu): Hi, In SOGo V4.1.1, it is really not possible to create an appointment by clicking at the desired time in your calendar, and then in a popup, set the meeting details, save? It works this way in android, thunderbird, google calendar, etc, etc. Is something not working correctly in our config, or is this functionality simply not (yet) there? Just clicking is not enough. You have to click and drag a timeframe to do that. Kind regards, Christian Mack -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] outlook 365 / activesync
Hi! Thanks for your reactions! :-) MJ On 11/14/19 7:18 AM, Thomas Führer (t...@aon.at) wrote: Hi MJ, maybe this will help you : https://support.microsoft.com/en-us/help/3189194/how-to-disable-simplified-account-creation-in-outlook Cheers, Thomas mj schrieb Hi, Recently a user came to us, asking dor help configuring her outlook with SOGo / ActiveSync. Turned out that our instructions no longer work for office365, as they seem to have removed ActiveSync support..? (or at least the configuration part of it?) Are we missing something, or is this really the case? And of course next: how do you guys here solve this new problem..? Is this the way to go: https://caldavsynchronizer.org/ combined with imap..? Or is there a way to make outlook365 *still* do regular ActiveSync? Life was so good when SOGo started supporting ActiveSync as a method to access mails and calendar like exchange... MJ -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] outlook 365 / activesync
Hi, Recently a user came to us, asking dor help configuring her outlook with SOGo / ActiveSync. Turned out that our instructions no longer work for office365, as they seem to have removed ActiveSync support..? (or at least the configuration part of it?) Are we missing something, or is this really the case? And of course next: how do you guys here solve this new problem..? Is this the way to go: https://caldavsynchronizer.org/ combined with imap..? Or is there a way to make outlook365 *still* do regular ActiveSync? Life was so good when SOGo started supporting ActiveSync as a method to access mails and calendar like exchange... MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SSO SAML
Hi, We have had several PoC setups with SAML2 authentication. It works, but there were some issues that proved difficult to address: - sessions timed out after a while - how to handle authentication/access to the imap server. Checkout https://github.com/ck-ws/pam-script-saml/ But in the end, we are still using regular LDAP authentication here. Good luck and please keep us informed of your findings..! :-) MJ On 10/11/19 3:23 PM, "Daniel Carlos Silva" (daniel.car...@prodemge.gov.br) wrote: Hi folks I'd like to know which Single Sign On solutions do you have successfully used with SOGo. thanks -- Daniel Carlos Silva -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo 4 performance issues
Hi, On 10/2/19 6:16 PM, Florian Unger (florian.un...@intego.de) wrote: The webinterface is working well but Thunderbird integration is very slow although I am testing with a single active user only. In the beginning I got [ERROR] <0x0x557e240888d0[WOWatchDog]> No child available to handle incoming request! in the log. I increased the RAM to 4GB and workers to 10 and got rid of the "No child available" errors, but the performance did not improve. But the above error is also likely not related to your thunderbird performance issue. You could try another imap client and another client workstation to check if your issue is thunderbird specific, client workstation specific, or generally all imap is so slow. Thunderbird does not respond to user input for about a minute after each program start. Does anybody have ideas ? That is unusually slow. I would check what your server is doing during that minute. You could try things like: iostat, atop / top. Having said all that: actually the SOGo web interface also uses imap to connect to your mailboxes, so if /SOGo is fast and thunderbird (using the same imap settings) is THAT slow, I would really look into the client workstation as well. Good luck, MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Thunderbird 68
Hi Ludo, On 8/30/19 9:37 PM, Ludovic Marcotte (lmarco...@inverse.ca) wrote: Hi, Quick update on this. I've made good progress yesterday and today but the next step would likely be to merge both SOGo Connector and Integrator into singe extension due to changes in the XUL loader in TB 68. That is great news! :-) Is the custom packaging still required, or will we also be able to configure the extension manually from within thunderbuid? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Donations
Hi, On 4/3/19 8:26 AM, André Rodier (an...@rodier.me) wrote: Is there some kind of two factors authentication available or planned in SOGo? What you perhaps could do: use SAML / CAS for sogo authentication, and configure 2FA on your CAS/saml2 IdP. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Question regarding OpenChange package on Xenial
Hi, That guide is about connecting outlook through MAPI, which requires OpenChange etc. But seems to be a path that is going nowhere, and we never used/tried it. The better way to connect outlook is over ActiveSync, and after setting that up, you will also be able to use ActiveSync on all kinds of mobile devices. Plus activesync in sogo is very actively maintained. MJ On 3/7/19 11:23 AM, Carsten Pieper (i...@carstenpieper.com) wrote: Hi mj, hi all, referring to https://sogo.nu/files/docs/v3/SOGoNativeOutlookConfigurationGuide.html#_installation, it says in Chapter 5 I have to install sogo-openchange and several more. I do not find anything regarding sogo-activesync there. So, am I right with the following thesis: "SOGo v4 supports Outlook/ExchangeActiveSync via installing the package sogo-activesync, i.e. following https://sogo.nu/files/docs/SOGoInstallationGuide.html. It is not necessary to follow the NativeOutlookConfigurationGuide, neither for v3 nor v4, to have Outlook connected to SOGo without any plugin." But for what do I than need the Native Outlook Configuration Guide? Regards, Carsten Am 07.03.19 um 11:05 schrieb mj (li...@merit.unu.edu): Hi, But are you not looking for the package sogo-activesync? That way outlook can connect to sogo using activesync. MJ On 3/7/19 9:45 AM, Carsten Pieper (i...@carstenpieper.com) wrote: Ok, then, I need some more explanation. I was running SOGO 3 on Ubuntu 14 without having openchange installed. SOGO was working fine, with Outlook and Exchange ActiveSync. But because of some performance troubles, I had the idea to upgrade to SOGo 4. The performance problems have not been solved, and I cannot connect from Outlook anymore. Am I right, that SOGo v4 needs openchange to connect to Outlook, but SOGo v3 not? If so, would it be better to install SOGo 3 on the new server with ubuntu 16? I have already installed v4 there, can I downgrade without troubles? Will SOGo v3 be supported in the future or am I riding a dead horse? Thanks a lot, Carsten Am 06.03.19 um 22:08 schrieb Ludovic Marcotte (lmarco...@inverse.ca): On 2019-03-06 3:37 p.m., Markus Winkler (m...@irmawi.de) wrote: AFAIK there's no sogo-openchange package for SOGo 4 and I assume there never will be one, as to my knowledge the OpenChange project is rather dead. Right on buddy. -- CARSTEN PIEPER Dyckburgheide 1 48157 Münster Deutschland Fon: +49 251 3997257 Fax: +49 251 3997256 Mobil: +49 151 46673961 E-Mail: i...@carstenpieper.com Internet: www.carstenpieper.com -- users@sogo.nu https://inverse.ca/sogo/lists -- CARSTEN PIEPER Dyckburgheide 1 48157 Münster Deutschland Fon:+49 251 3997257 Fax:+49 251 3997256 Mobil: +49 151 46673961 E-Mail: i...@carstenpieper.com Internet: www.carstenpieper.com -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Question regarding OpenChange package on Xenial
Hi, But are you not looking for the package sogo-activesync? That way outlook can connect to sogo using activesync. MJ On 3/7/19 9:45 AM, Carsten Pieper (i...@carstenpieper.com) wrote: Ok, then, I need some more explanation. I was running SOGO 3 on Ubuntu 14 without having openchange installed. SOGO was working fine, with Outlook and Exchange ActiveSync. But because of some performance troubles, I had the idea to upgrade to SOGo 4. The performance problems have not been solved, and I cannot connect from Outlook anymore. Am I right, that SOGo v4 needs openchange to connect to Outlook, but SOGo v3 not? If so, would it be better to install SOGo 3 on the new server with ubuntu 16? I have already installed v4 there, can I downgrade without troubles? Will SOGo v3 be supported in the future or am I riding a dead horse? Thanks a lot, Carsten Am 06.03.19 um 22:08 schrieb Ludovic Marcotte (lmarco...@inverse.ca): On 2019-03-06 3:37 p.m., Markus Winkler (m...@irmawi.de) wrote: AFAIK there's no sogo-openchange package for SOGo 4 and I assume there never will be one, as to my knowledge the OpenChange project is rather dead. Right on buddy. -- CARSTEN PIEPER Dyckburgheide 1 48157 Münster Deutschland Fon:+49 251 3997257 Fax:+49 251 3997256 Mobil: +49 151 46673961 E-Mail: i...@carstenpieper.com Internet: www.carstenpieper.com -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Signing into sogo redirects you to login again
Hi, Here is what we have set, and things are working nicely here: SetEnvIf Host (.*) HTTP_HOST=$1 RequestHeader set "x-webobjects-server-port" "443" RequestHeader set "x-webobjects-server-name" "webmail" env=HTTP_HOST RequestHeader set "x-webobjects-server-url" "https://ourwebmail.url.com; env=HTTP_HOST Perhaps this helps, specially the last line is different from yours. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] next available timeslot
Hi all, For the archives: But I cannot find a way to skip to the 'next slot' and 'previous slot', and when you found a time that you like, an 'accept' button to select the found timeslot. Is this planned..? We would like to upgrade from sogo2, and use this functionality a lot. Inverse said they were planning to start implementation of this feature this week. :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Alias for all mailboxes
Hi, On 1/25/19 3:37 AM, Pedro Antunes (pantu...@suroot.pt) wrote: Hi, how i can create an distribution list (alias) that contain all mailboxes of one domain? its possible? It’s possible restrict who can send emails to one alias? We do this in our accounts backend (ldap/AD) by creating a group, give it an email address, and add users to it. Then in sogo.conf we add a specific user source, something like: type = ldap; CNFieldName = displayName; IDFieldName = cn; UIDFieldName = uid; baseDN = "CN=Groups,DC="; canAuthenticate = NO; bindDN = "cn=sogo-groups,cn=."; bindPassword = ; displayName = "Our groups"; listRequiresDot = NO; MailFieldNames =(mail, otherMailbox, proxyAddresses); id = ad-mail-groups; isAddressBook = YES; port = 389; scope = "SUB"; filter = "(objectClass=group)"; You also need to configure postfix to handle these same groups. About restrictions: I guess I'd look at the postfix side of things for restrictions. But I don't have an answer ready for you. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] AD LDAP SOGoUserSources
Hi Matthew,
Did you set:
SOGoAuthenticationMethod = LDAP;
Best,
MJ
On 1/24/19 10:28 PM, Matthew Valdez (maval...@ludlums.com) wrote:
Hello,
I am trying to setup the SOGoUserSources by using Active Directory and
LDAP and for some reason I cannot seem to get it to work. I am able to
login if I use the type SQL, but cannot seem to get it to work with
ldap. Any help would be appreciate, this is what I have for
SOGoUserSources, of course modified a little to share with you all.
SOGoUserSources = (
{
type = ldap;
CNFieldName = cn;
IDFieldName = uid;
UIDFieldName = uid;
baseDN = "cn=Users,dc=domain,dc=local";
bindDN = "cn=sogo,cn=Users,dc=domain,dc=local";
bindPassword = password;
canAuthenticate = YES;
displayName = "Shared Addresses";
hostname = "ldap://dns.dc.local:389;;
id = public;
isAddressBook = YES;
}
);
Thanks,
-Matthew
--
users@sogo.nu
https://inverse.ca/sogo/lists
[SOGo] next available timeslot
Hi, Just tried sogo4 on a test install, and noticed that with a group appointment, availability of participants is now displayed. Nice. But I cannot find a way to skip to the 'next slot' and 'previous slot', and when you found a time that you like, an 'accept' button to select the found timeslot. Is this planned..? We would like to upgrade from sogo2, and use this functionality a lot. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] strange log entries
A last update: Inverse has changed this situation is logged to a more meaningful message. See this commit: https://github.com/inverse-inc/sogo/commit/8734ee74861f8ec0498d78a1a39c3d1f1718df4d MJ On 11/9/18 5:47 PM, mj (li...@merit.unu.edu) wrote: An update on this, for the archives. SOGo support is telling me: If the IP addresses are legit, it them means their session has expired. So the entires in both memcached/the database for the user session are gone, while the user tries to use it again. There's nothing to worry about, it just means the user was brought back to the login script of SOGo. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] strange log entries
An update on this, for the archives. SOGo support is telling me: If the IP addresses are legit, it them means their session has expired. So the entires in both memcached/the database for the user session are gone, while the user tries to use it again. There's nothing to worry about, it just means the user was brought back to the login script of SOGo. -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] strange log entries
Hi Christian, Thanks for taking the time to repy. Inverse is suggesting that they might perhaps be timed-out SAML sessions. (we have been trying sogo with SAML auth in a test setup) Are you by any chance also using saml auth? (or have you been using it?) Reassuring that you see them as well, though. Again: thanks. MJ On 11/2/18 4:50 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hi We also get those several dozen times a day. They are normal. A friend of mine hinted, that these are access checks from the great chinese firewall. Kind regards, Christian Mack -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] strange log entries
:56 sogod [25992]: 185.186.207.1 "GET /SOGo/so/user_wa/Mail/0/folderDeleted_SP_Items/unseenCount HTTP/1.1" 200 4506/0 0.014 13947 67% 0 Nov 01 06:01:56 sogod [25992]: |SOGo| starting method 'GET' on uri '/SOGo/so/user_wa/Mail/0/folderDrafts/unseenCount' Nov 01 06:01:56 sogod [25992]: <0x0x55e5cfe56bb0[SOGoWebAuthenticator]> tried wrong password for user 'MrJ54LE+7X6anHUhvquAveMgjYnUBkJm8EamFiQiOyEH/O6cATAqcXHJlVuyXVjJqepwNAePata192iGmBMSWPDEwlzmq32s2cgXwmAoQ7e6+3DWAcVFmwfa0Fs0g0CvdsxeryIozk216wgC1gplbErOzeKLwLo+m3cWK1iVjVVUSS0OOuY0yg6iYCHklo9C0YQFiaWejubJNQj4/oWaHg=='! Nov 01 06:01:56 sogod [25992]: |SOGo| request took 0.009721 seconds to execute Nov 01 06:01:56 sogod [25992]: 185.186.207.1 "GET /SOGo/so/user_wa/Mail/0/folderDrafts/unseenCount HTTP/1.1" 200 4506/0 0.012 13947 67% 0 Nov 01 06:01:59 sogod [25952]: [WARN] <0x0x55e5d017c7e0[WOWatchDogChild]> pid 26098 has been hanging in the same request for 4 minutes And this same minute from apache's point of view: 198.54.173.196 - - [01/Nov/2018:06:01:03 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync=user_av=SEC1EFA48B85=SAMSUNGSMT805 HTTP/1.1" 200 904 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:22 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync=user_av=SECC1EFA48B85=SAMSUNGSMT805 HTTP/1.1" 200 904 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:35 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync=user_av=SECC1EFA48B85=SAMSUNGSMT805 HTTP/1.1" 200 904 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:35 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16EFA48B85=SAMSUNGSMT805 HTTP/1.1" 503 790 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:03 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16EFA48B85=SAMSUNGSMT805 HTTP/1.1" 200 816 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:16 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16EFA48B85=SAMSUNGSMT805 HTTP/1.1" 503 791 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:42 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16EFA48B85=SAMSUNGSMT805 HTTP/1.1" 200 815 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:46 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync=user_av=SEC1EFA48B85=SAMSUNGSMT805 HTTP/1.1" 200 904 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:47 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16FC48B85=SAMSUNGSMT805 HTTP/1.1" 200 815 "-" "Android-SAMSUNG-SM-T805/101.60001" 198.54.173.196 - - [01/Nov/2018:06:01:50 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Sync=user_av=SEC16FC48B85=SAMSUNGSMT805 HTTP/1.1" 200 815 "-" "Android-SAMSUNG-SM-T805/101.60001" 185.186.207.1 - - [01/Nov/2018:06:01:56 +0100] "POST /SOGo/so/user_wa/Mail/0/folderINBOX/uids HTTP/1.1" 200 10168 "https://webmail.merit.unu.edu/SOGo/so/user_wa/Mail/view; "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.186.207.1 - - [01/Nov/2018:06:01:56 +0100] "GET /SOGo/so/user_wa/Mail/0/folderINBOX/unseenCount HTTP/1.1" 200 10110 "https://webmail.merit.unu.edu/SOGo/so/user_wa/Mail/view; "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.186.207.1 - - [01/Nov/2018:06:01:56 +0100] "GET /SOGo/so/user_wa/Mail/0/folderSent_SP_Items/unseenCount HTTP/1.1" 200 9994 "https://webmail.merit.unu.edu/SOGo/so/user_wa/Mail/view; "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.186.207.1 - - [01/Nov/2018:06:01:56 +0100] "GET /SOGo/so/user_wa/Mail/0/folderDeleted_SP_Items/unseenCount HTTP/1.1" 200 9994 "https://webmail.merit.unu.edu/SOGo/so/user_wa/Mail/view; "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.186.207.1 - - [01/Nov/2018:06:01:56 +0100] "GET /SOGo/so/user_wa/Mail/0/folderDrafts/unseenCount HTTP/1.1" 200 10052 "https://webmail.merit.unu.edu/SOGo/so/user_wa/Mail/view; "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 52.125.140.40 - - [01/Nov/2018:06:01:28 +0100] "POST /Microsoft-Server-ActiveSync?User=user_sa%40merit.unu.edu=7C3DB6844DD55=Outlook=Ping HTTP/1.1" 502 5747 "-" "Outlook-iOS-Android/1.0" 41.238.138.36 - - [01/Nov/2018:06:01:38 +0100] "POST /Microsoft-Server-ActiveSync?Cmd=Ping=user_ta=androidc175124=Android HTTP/1.1" 502 5595 "-" "Android/7.0-EAS-2.0" Seems to me that apache is not noticing anything special... Anyone with an idea to get some additional logs...? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] strange log entries
Hi, We have noticed lines like the following in our sogo logs: Wed Oct 31 12:22:22 CET 2018 Oct 31 12:22:22 sogod [25985]: <0x0x55e5d01df1a0[SOGoWebAuthenticator]> tried wrong password for user 'XBlOMdQZDvM5f86H7iBtmUiCFCxPrvGxVW25E3BHqzga7DU7Kh62fRJ/8hRQ/lwJvJlnygErqla35o8qv3DADhZ85cVGzJIXy+JXqckSn+IZsHlKIf5Tv47Ed5f6JOG+dQby0wd3zUJoWskxpvyPzwNIbKvg9l5BDGGMQlojzPHIvcerv82XEx2RWbRknvqxWYVH+ScREBMvvOGO0PzbOA=='! Wed Oct 31 12:29:40 CET 2018 Oct 31 12:29:40 sogod [26053]: <0x0x55e5cfe82c40[SOGoWebAuthenticator]> tried wrong password for user '+AxMdDC6NgthqY1iIgxWEp8C0fjzXtRVHzN175GP/C0AW6r5d3K5hpSdICSYPoEOgnGWv78AvSU5VmmVx3B39BMKkwBmtFnjd66o0+U1A5mJqs82d0KQU8Qqo/mZ410QJkDbel8BEjs24g98lGAffOdFATpeUkawOK52s9vymkdZGThKwjqMtY36Z0j3P0407x3aEfja+LeMSaFwpexT6w=='! Wed Oct 31 12:33:06 CET 2018 Oct 31 12:33:06 sogod [25987]: <0x0x55e5d005b120[SOGoWebAuthenticator]> tried wrong password for user '+xIpPJifKpSoK0Yez1t6b3G/5wmx7uWGx7RbDKRof+7gcXgU4vK1++l/NG4YGKZNbryHUf9cNdsKPahmogY6cD1O37hK9klMQe9T8vJ9H860n7vq+p3yIgQu01pSp+N6WyxGxu1pCtTu6dWk85wRT/fOZWTi+bE339XmGQZUsKOmKRzWVCjQ4nsZ+Mr0GfSAFCSWJy6EeCYujPcEyC42cQ=='! SOGo works beautifully, but we wonder what hese log lines mean. The username is obviously so strange, that it is very unlikely someone mistyping his/her username. Does anyone recognise this as something SOGo-internal, perhaps..? We are using SOGo for regular (email/calendar) web access, plus ActiveSync and some carddav/caldav. Unfortunately, no IP is logged with the lines. (they appear at irregular times/frequencies) Ideas? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SAML2 + Keyclock
Hi, We have been trying this as well. I will send you the notes I kept, hopefully this will get you going. First two links: https://lists.inverse.ca/sogo/arc/users/2016-10/msg00100.html https://sogo.nu/bugs/view.php?id=3933 In keycloak, make sure to configure: NameID format: username select FORCE NameID format mappers user property uid = uid / uid /uid (nasic) user property mail = mail / email (property) / mail (basic) in sogo.conf: SOGoCacheCleanupInterval = 3600; SOGoAuthenticationType = saml2; NGImap4AuthMechanism = PLAIN; SOGoSAML2PrivateKeyLocation = "/etc/sogo/key.pem"; SOGoSAML2CertificateLocation = "/etc/sogo/cert.pem"; SOGoSAML2IdpMetadataLocation = "/etc/sogo/id-metadata.xml"; SOGoSAML2IdpPublicKeyLocation = "/etc/sogo/id.crt"; //SOGoSAML2IdpCertificateLocation = "/etc/sogo/idp.crt"; SOGoSAML2LoginAttribute = "mail"; SOGoSAML2LogoutEnabled = YES; SOGoSAML2LogoutURL = "https://www.company.com;; id-metadata.xml contains the generic keycloak metadata from https://id.merit.unu.edu/auth/realms/merit/protocol/saml/descriptor Then, for dovecot you can use a non-auth listener on localhost, or configure dovecot to respond to saml auth: https://github.com/ck-ws/pam-script-saml/ The author of this last script is also on this mailinglist. Hopefully this will get you going. MJ On 10/11/2018 03:41 PM, "Conta de Administracao Expresso" (expresso.supo...@dpf.gov.br) wrote: Hello everyone, I need to configure SOGo 3.2.1 to authenticate with SAML2 in Keycloak 3.4. Does anyone know how to do this setup? If so, can you send me the steps? Thanks, Eugenio -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Lost administration account
Hi, You normally change user passwords in your authentication backend, could be Active Directory, ldap, mysql, anything really, depends on your configuration. MJ On 08/24/2018 03:18 PM, Andrew Gilfrid Day (andrew@gilfrid.com) wrote: Thanks for that Christian. I added myself to the superuser list in sogo.conf and indeed I can access the administration tab but all that offers me is the ability to add users to other users calendars and address books. :-( What I'm trying to do is change the password for several sogo users. How do I go about that? I do have root access. Many thanks. Best regards Andrew Gilfrid Day Calle Cruz de San Antonio 30 38600 Granadilla de Abona Tenerife España Tlf: +34 922 771 355 On 24/08/2018 14:14, Christian Mack (christian.m...@uni-konstanz.de) wrote: Hello That means you do not have any super user defined. Therefore there is no user, which can use the administration tab in the sogo web frontend. Your sogo user is usually a local account on that machine. Check /etc/passwd and /etc/shadow. If you have root access, then you can change the password for local user sogo with: passwd sogo If you have sudo privileges, instead use: sudo passwd sogo Kind regards, Christian Mack Am 24.08.2018 um 13:12 schrieb Andrew Gilfrid Day (andrew@gilfrid.com): Hi Paul, Thanks for your reply. That line is commented out :-( What does that mean then? Best regards Andrew Gilfrid Day On 24/08/2018 11:48, Paul Zillmann (p...@zil.li) wrote: Hello Andrew, take a look at your /etc/sogo/sogo.conf there should be a parameter 'SOGoSuperUsernames' Am 24.08.2018 um 10:28 schrieb Andrew Gilfrid Day (andrew@gilfrid.com): Due to the death of my partner I have no record of usernames/password for our sogo installation. I believe that if I can change the password of the administration account then I should be able to administer the installation myself. Having used slapcat to look at all the LDAP entries, I can see that there is no uid:sogo, so how can I identify the sogo admin account? And when I have done that, how do I change it's password. That depends on your user backend. When sogo pulls the users from LDAP - that LDAP server would be the place to change passphrases. All help gratefully received. -- Best regards Andrew Gilfrid Day <https://www.avast.com/sig-email?utm_medium=email_source=link_campaign=sig-email_content=emailclient> Virus-free.www.avast.com <https://www.avast.com/sig-email?utm_medium=email_source=link_campaign=sig-email_content=emailclient> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> -- users@sogo.nu https://inverse.ca/sogo/lists - Paul -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] OTP ( one time password ) for SOGo
Well, as SOGo supports SAML2 authentication, you could try an IdP with support for OTP. (perhaps checkout keycloak) MJ On 06/27/2018 12:40 AM, devteam (devt...@alpeinsoft.ch) wrote: Hi! May be have news two year later?) On 08/03/2016 08:56 PM, devteam wrote: Hi. Somebody integrated OTP (One Time Password) authorization in SOGo? May be have ideas/solutions? Thx! -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] v2 on stretch
Hi Slávek, Thanks for your reply and insight. Strange that we are using the official apt repo, and have a lesser user experience than with your alternative repo. (which i did not know that existed, btw) Anyway, thanks again! MJ On 04/25/2018 02:36 AM, Slávek Banko (slavek.ba...@axis.cz) wrote: Hi, the problem is that in Debian Stretch, SOGo v3 packages are included in the official Debian distribution. If you select SOGo v2 packages from official Inverse repository, they will be updated to distribution packages and will cause conflicts. The solution would be if packages for SOGo v2 were set to "epoch" - in this way packages will be "newer" than SOGo v3 in Stretch - see packages in my alternative repository. Another solution is to modify the apt configuration to 'pin' packages for desired version or to set a higher priority for the Inverse repository. Cheers -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] webmail login attacks - captcha?
On 04/24/2018 09:48 PM, Sergio Cesar winc (ser...@winc.net) wrote: I wonder if one could user the webserver authentication and pass it to SOGo or roundcube. Than fail2ban will catch the ip from the http log. SC Yes, or perhaps use saml2 auth, and have your IdP take care of this. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] saml2
Hi, We're playing again with sogo / dovecot / saml and would like some feedback. We have everything (sogo, keycloak IdP, dovecot with pam-script-saml) working just fine, with one remaining issue: After a while the sogo web interface stops working, unless you change 'module' (from mail module to calendar or addressbook) at which point we are redirected to the IdP, logon again, and then things work again. While sogo has stopped working, and I change imap folder, nothing happens, and apache logs two 302 lines like this: Apr 10 13:24:21 sogod [15166]: ip.4.address.com "GET /SOGo/so/testuser/Mail/0/folderINBOX/folderfb/unseenCount HTTP/1.1" 302 0/0 0.007 - - 0 Apr 10 13:24:21 sogod [15165]: ip.4.address.com "POST /SOGo/so/testuser/Mail/0/folderINBOX/folderfb/uids HTTP/1.1" 302 0/75 0.008 - - 0 I have set SOGoCacheCleanupInterval to 3600, should I set it higher..? Are others using saml auth also seeing this? This is on a fresh stretch install, sogo version 2.3.23-1 Any use in tryting with sogo v3 or v4? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Change "Links to this Calendar" from http to https ?
On 04/06/2018 04:09 PM, "albert.solana" (albert.sol...@upcnet.es) wrote: Removing "env=HTTP_HOST" causes a general Sogo website malfunction. ok, strange, because: not for us. But the other fix (setting the env variable) works here too. Didn't know it, learned about it just now. Thanks, MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Change "Links to this Calendar" from http to https ?
Hi,
On 04/02/2018 06:15 PM, Pierre Fumet (p...@zdn.fr) wrote:
RequestHeader set "x-webobjects-server-port" "443"
RequestHeader set "x-webobjects-server-name" "%{HTTP_HOST}e"
env=HTTP_HOST
RequestHeader set "x-webobjects-server-url" "https://%{HTTP_HOST}e;
env=HTTP_HOST
RequestHeader unset "x-webobjects-remote-user"
Perhaps remove "env=HTTP_HOST" after both lines..?
MJ
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] SOGoWebAuthenticator, wrong passwords
On 03/21/2018 02:09 PM, Christian Mack (christian.m...@uni-konstanz.de) wrote: Someone is trying to authenticate with an invalid user password pair. We have those too. It is always a base64 encoded string. I read somewhere, that the big chinese firewall is using such strings to test services with encrypted communication. Not sure if that is true, but we get those all the time. Nothing to worry about. Good, thanks! MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Sogo and samba 4 AD authentification
Hi, On 03/20/2018 06:05 PM, Goetz Reinicke (goetz.reini...@filmakademie.de) wrote: So haproxy is Talking encrypted to the samba servers? With the option of failover this sounds interesting. How hard is the haproxy configuration? Yes, like that. Config not very complicated, and it works very nicely. In fact we do this on all servers that require ldap connections. Relevant bits from haproxy.cfg: frontend ldap_service_front mode tcp bind localhost:389 description LDAP Service optionsocket-stats optiontcpka timeout client5s default_backend ldaps_service_back backend ldaps_service_back mode tcp balance roundrobin serverdc2 ldap.server.ip.1:636 check fall 1 rise 1 inter 2s verify none check check-ssl ssl serverdc3 ldap.server.ip.2:636 check fall 1 rise 1 inter 2s verify none check check-ssl ssl serverdc4 ldap.server.ip.3:636 check fall 1 rise 1 inter 2s verify none check check-ssl ssl optionlog-health-checks optionldap-check timeout server2s timeout connect 2s As you can see, we are currently not checking the certificates, which is not good. This is still on our to-do list. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] ANN: SOGo v4 released!
Congratulations the the inverse team! On 03/07/2018 09:26 PM, Ludovic Marcotte (lmarco...@inverse.ca) wrote: The Inverse Team is pleased to announce the immediate availability of SOGo v4.0.0. This is a major release of SOGo which focuses on new features and improved stability over previous versions. What is SOGo SOGo is a free and modern scalable groupware server. It offers shared calendars, address books and emails through your favorite Web browser or by using a native client such as Mozilla Thunderbird and Lightning, Apple Calendar and Address Book (macOS and iOS) and Microsoft Outlook. SOGo is standard-compliant and supports CalDAV, CardDAV and reuses existing IMAP, SMTP and database servers - making the solution easy to deploy and interoperable with many applications. SOGo features: * Scalable architecture suitable for deployments from dozen to many thousand users * Rich, responsive Web-based interface aligned with Google Material Design guidelines * Improved integration with Mozilla Thunderbird and Lightning by using the SOGo Connector and the SOGo Integrator * Compatibility for Microsoft Outlook 2007, 2010, 2013 and 2016 * Two-way synchronization support with any Microsoft ActiveSync-capable devices (Apple iOS, Android, Windows Phone, BlackBerry 10) or Outlook 2013/2016 * Excellent native integration with Apple software (macOS and iOS) and Android-based devices and many more! SOGo and our connectors are completely free. Changes from the previous release *New features* * [core] full S/MIME support * [core] can now invite attendees to exceptions only (#2561) * [core] add support for module constraints in SQL sources * [core] add support for listRequiresDot in SQL sources * [web] add support for SearchFieldNames in SQL sources * [web] display freebusy information of owner in appointment editor * [web] register SOGo as a handler for the mailto scheme (#1223) * [web] new events list view where events are grouped by day * [web] user setting to always show mail editor inside current window or in popup window * [web] add support for events with recurrence dates (RDATE) *Enhancements* * [web] follow requested URL after user authentication * [web] added Simplified Chinese (zh_CN) translation - thanks to Thomas Kuiper * [web] now also give modify permission when selecting all calendar rights * [web] allow edition of IMAP flags associated to mail labels * [web] search scope of address book is now respected * [web] avoid redirection to forbidden module (via ModulesConstraints) * [web] lower constraints on dates range of auto-reply message (#4161) * [web] sort categories in event and task editors (#4349) * [web] show weekday in headers of day view * [web] improve display of overlapping events wi *Bug fixes* * [core] yearly repeating events are not shown in web calendar (#4237) * [core] increased column size of settings/defaults for MySQL (#4260) * [core] fixed yearly recurrence calculator with until date * [core] generalized HTML sanitization to avoid encoding issues when replying/forwarding mails * [core] don't expose web calendars to other users (#4331) * [web] fixed display of error when the mail editor is in a popup * [web] attachments are not displayed on IOS (#4150) * [web] fixed parsing of pasted email addresses from Spreadsheet (#4258) * [web] messages list not accessible when changing mailbox in expanded mail view (#4269) * [web] only one postal address of same type is saved (#4091) * [web] improve handling of email notifications of a calendar properties * [web] fixed XSRF cookie path when changing password (#4139) * [web] spaces can now be inserted in address book names * [web] prevent the creation of empty contact categories * [web] fixed mail composition from message headers (#4335) * [web] restore messages selection after automatic refresh (#4330) * [web] fixed path of destination mailbox in Sieve filter editor * [web] force copy of dragged contacts from global address books * [web] removed null characters from JSON responses * [web] fixed advanced mailbox search when mailbox name is very long * [web] fixed handling of public access rights of Calendars (#4344) * [web] fixed server-side CSS sanitization of messages (#4366) * [web] cards list not accessible when changing address book in expanded card view * [web] added missing subject to junk/not junk reports * [web] fixed file uploader URL in mail editor * [web] fixed decoding of spaces in URL-encoded parameters (+) * [web] fixed scrolling of message with Firefox (#4008, #4282, #4398) * [web] save original username in cookie when remembering login (#4363) * [eas] hebrew folders encoding problem using EAS (#4240) * [eas] avoid sync requests for shared folders every second (#4275) * [eas] we skip the organizer from the attendees list (#4402)
Re: [SOGo] "next available time slot" feature in sogo 3 ?
On 02/15/2018 03:02 PM, Thomas Imbreckx (thomas.imbre...@unamur.be) wrote: Is it still possible in SOGo3 ? I can't find it in the UI, and haven't readily found info about this online. This is also what is holding us back from upgrading to v3. It seems to missing still, unfortunately... MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Calendar - Allow Event Creation on Day Click
Hi, On 11/10/2017 12:43 AM, Jay Lepore (j...@compumatter.com) wrote: What sayeth the group? We are not 'the group', but we agree with you :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 autodiscovery
On 10/20/2017 03:45 PM, "Thomas Fuehrer" (t...@aon.at) wrote: Hi, following solution worked for me to get back the "old" gui which allows to configure EAS manually: https://support.microsoft.com/en-us/help/3189194/how-to-disable-simplified-account-creation-in-outlook-2016 So that is great news..! Thanks for sharing! :-) MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Problems logging on to the server with Outlook 2010/2013
On 10/04/2017 06:59 PM, init (26196...@web.de) wrote: How can I check the subsequent imap login? Check your imap server logs. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 autodiscovery
On 09/29/2017 02:47 PM, Gerald Brandt (g...@majentis.com) wrote: That is the old GUI and is no longer available. Does the automx autodiscovery still work, also in the newer version? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Does anyone have freebusy url lookup problems with repeated events (for outlook users)?
Hi raimondo, We're on 2.3.22, and we cannot reproduce this. I have several infinite weekly appointments in my own calendar, without an end-date and such. And downloading my ifb works without an issue. The full-day weekly repeating appointment looks like this: FREEBUSY;FBTYPE=BUSY:20171006T10Z/20171006T11Z FREEBUSY;FBTYPE=BUSY:20171013T10Z/20171013T11Z At least... that matches the date, not sure about the full-day part. (perhaps T10Z - T11Z means full day) Our SOGoFreeBusyDefaultInterval is set to (7, 365) And yours? You're on a nightly? Perhaps try a newer one? MJ On 09/28/2017 04:58 PM, "Raimondo Giammanco" (raimondo.giamma...@vki.ac.be) wrote: Hello there, Thank you, trying to answer your email provided me another strange thing that could help to elucidate the issue, see below. At least in my installation, it is very easy to reproduce the issue 100% of the time. I take a newly generated account, with an empty calendar, and I download the freebusy.ifb via wget (after giving to Public permission to view Date & Time for public and confidential events). No problems, it downloads a file with no events: BEGIN:VCALENDAR PRODID:-//Inverse inc./SOGo 3.2.10//EN VERSION:2.0 BEGIN:VFREEBUSY ATTENDEE:mailto:ciccio@domain DTSTAMP:20170928T144057Z DTSTART:117612381011T00Z DTEND:20171027T22Z END:VFREEBUSY END:VCALENDAR If I put a single event tomorrow, with weekly repetition and no end, one sogo worker starts taking 100% cpu and hoarding memory. I have now a script that checks every 5 seconds if a sogod process takes more than 1GB of ram and kills it, so I get rather rapidly: HTTP request sent, awaiting response... 502 Proxy Error 2017-09-28 16:43:31 ERROR 502: Proxy Error. If I limit the repetition to 4 times only, it downloads exactly the same ifb file then before, the only difference being the DTSTAMP field. So the freebusy file seems not built correctly. If I put a simple, not repeating event tomorrow (just before the event being repeated 4 times), I get a freebusy ifb that only mention the non repeating event: BEGIN:VCALENDAR PRODID:-//Inverse inc./SOGo 3.2.10//EN VERSION:2.0 BEGIN:VFREEBUSY ATTENDEE:mailto:ciccio@domain DTSTAMP:20170928T145040Z DTSTART:117612381011T00Z DTEND:20171027T22Z FREEBUSY;FBTYPE=BUSY:20170929T124500Z/20170929T134500Z END:VFREEBUSY END:VCALENDAR Maybe this could shed some light on the issue? I will maybe try a virtual machine of some ready to deploy server, like iRedMail or Nethserver with SOGo to see if I can reproduce the same behaviour.. as it stands, I use SOGo from the nightly rpms since I try to customize amavis, dovecot and postfix... Cheers Raimondo On Thursday, September 28, 2017 15:45 CEST, "mj" (li...@merit.unu.edu) <users@sogo.nu> wrote: Hi, We are using ifb, but not for many users, just a few. I had no complains like yours, but it could very well mean that I might have them as well. Can I do something to try trigger it? (something with repeated events or so?) MJ On 09/28/2017 02:55 PM, "Raimondo Giammanco" (raimondo.giamma...@vki.ac.be) wrote: > Hello, > > Does any of you use the freebusy urls > (/http:///SOGo/dav/public/%NAME%@%SERVER%/freebusy.ifb/) to > co-operate with outlook users? > > Is it working for you without issues for all users? > > Is there someone affected to something similar to bug 4289 > <https://sogo.nu/bugs/view.php?id=4289>? > > Trying to understand if it is a problem of only my installation or > not, sorry for the bother .. > > Regards > > Raimondo > -- > users@sogo.nu > https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- Dr. Raimondo Giammanco HPCC & IT Service Head von Karman Institute Chee De Waterloo 72 B-1640 Rhode-St-Genese Belgium http://www.vki.ac.be <http://www.vki.ac.be/> TEL: +3223599764 FAX: +3223599600 -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Outlook 2016 autodiscovery
Hi, On 09/28/2017 06:28 PM, Gerald Brandt (g...@majentis.com) wrote: Figures. Just when I decide to use it since it's been in two releases. I really hate Microsoft. I'm using OutlookCalDavSynchronizer to sync contacts and calendar to Outlook. Some users are complaining of issues with the calendar (specifically moving a single appt of a recurring meeting). How is everyone else connecting Outlook to SOGo? This is bad news. It was so nice to be able to say: Yes, outlook is supported and functional, including calendaring and contacts, etc. Microsoft is SO stupid for disabling that. :-( Anyway, to answer your question: we have only very few outlook clients, mostly everybody uses thunderbird, mobile devices with ActiveSync or imap, or the /SOGo web access. Some of our users use OutlookCalDavSynchronizer, but you know that one already. For the rest...dunno how to proceed... MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Does anyone have freebusy url lookup problems with repeated events (for outlook users)?
Hi, We are using ifb, but not for many users, just a few. I had no complains like yours, but it could very well mean that I might have them as well. Can I do something to try trigger it? (something with repeated events or so?) MJ On 09/28/2017 02:55 PM, "Raimondo Giammanco" (raimondo.giamma...@vki.ac.be) wrote: Hello, Does any of you use the freebusy urls (/http:///SOGo/dav/public/%NAME%@%SERVER%/freebusy.ifb/) to co-operate with outlook users? Is it working for you without issues for all users? Is there someone affected to something similar to bug 4289 <https://sogo.nu/bugs/view.php?id=4289>? Trying to understand if it is a problem of only my installation or not, sorry for the bother .. Regards Raimondo -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] V2 Web Interface
On 09/21/2017 03:20 PM, init (26196...@web.de) wrote: Thank you for your answer. Can I just add the following source for the installation: https://packages.inverse.ca/SOGo/nightly/2/ Just follow instructions here: https://sogo.nu/nc/support/faq/article/how-to-install-nightly-sogo-versions-on-debian.html Do you know about any Problems in V2 or V3 regarding IOS11 and ActiveSync? No idea about IOS11, but we're using AS a lot. And love it. MJ -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] V2 Web Interface
Hi Marc, You can install the current: - V2: 2.3.22 or - V3: 3.2.10 https://sogo.nu/files/docs/SOGoInstallationGuide.html Both are current and supported, unless I misunderstand your question...? MJ On 09/21/2017 07:38 AM, init (26196...@web.de) wrote: Hello everyone, is it possible to install the V2 Web Interface in the current SOGo version? I would be very happy to receive an answer. Many greetings Marc -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Searching for a fail2ban filter configlet that checks the authentication of CardDAV/CalDAV
On 09/14/2017 08:31 PM, "Philippe Eveleigh" (sogo...@cognoquest.com) wrote: I could be wrong but I believe the fail2ban sogo-auth.conf was only designed for the SOGo Login Page? And how about ActiveSync access..? Does anyone know? MJ -- users@sogo.nu https://inverse.ca/sogo/lists
