Re: [SOGo] Help with Resources in SOGo

2017-07-24 Thread Christian Mack
Am 24.07.2017 um 16:16 schrieb Tobias Brunner (tob...@tobru.ch):
> Hi,
> 
> I'm trying to configure resource booking in SOGo like described here:
> http://wiki.sogo.nu/ResourceConfiguration. I've managed to add the
> calendarResource schema to 389DS and the example resource as entry to
> the LDAP directory.
> 
> In sogo.conf I added the location where the resources are stored in LDAP
> to SOGoUserSources:
> 
>   SOGoUserSources = (
> {
>   type = ldap;
>   CNFieldName = cn;
>   UIDFieldName = uid;
>   IDFieldName = uid;
>   MailFieldNames = (mail, alias);
>   bindFields = (uid, mail);
>   baseDN = "ou=SOGo,ou=Service Access,ou=Views,dc=example,dc=com";
>   bindDN = "uid=sogo-service,ou=Special Users,dc=example,dc=com";
>   bindPassword = HIDDEN;
>   canAuthenticate = YES;
>   displayName = "Users";
>   hostname = ldaps://ldap.example.com:636;
>   id = public;
>   isAddressBook = YES;
>   listRequiresDot = NO;
> {
>   type = ldap;
>   CNFieldName = cn;
>   UIDFieldName = cn;
>   IDFieldName = cn;
>   MultipleBookingsFieldName = Multiplebookings;
>   KindFieldName = Kind;
>   baseDN = "ou=Resources,dc=example,dc=com";
>   bindDN = "uid=sogo-service,ou=Special Users,dc=example,dc=com";
>   bindPassword = HIDDEN;
>   canAuthenticate = NO;
>   displayName = "Resources";
>   hostname = ldaps://ldap.example.com:636;
>   id = vshn_resources;
>   isAddressBook = YES;
>   listRequiresDot = NO;
> }
>   );
> 
> At least I can see the defined resource in the address book. But in the
> new event view it doesn't appear as resource. I can add it in the
> "Invite Attendees" field, but it shows as regular user. Shouldn't it be
> displayed as resource?
> 

No, there is no visible difference between normal accounts and resource
accounts.
This is by design, and some users depend on that, as they use normal
user accounts with resource attributes, in order to automatically accept
invitations when free.


> In the documentation I read "Be sure that the resource has set at
> MINIMUM "View Time and Date" for "All Authenticated Users" is set in
> ACL". How can I do that? The resource is not able to login to SOGo as
> there is no password set.
> 

You could do that as Super User (see SOGoSuperUsernames) in the web
frontend, or using sogo-tool manage-acl on the command line.

If you have set your default privileges in your sogo.conf (see
SOGoCalendarDefaultRoles), then perhaps you do not have to do anything.
Those default roles are inherited when creating a calendar.


> Does the resource need a mailbox? Or is this handled internally in SOGo?
> If the resource needs a mailbox, does SOGo query the Inbox regularly? If
> yes, how do I set this up? (password, schedule).
> 

Yes, it needs a mailbox for invitation emails.

This mailbox is not processed by SOGo in any way.
And it can not, as SOGo does not know your IMAP passwords.

If you receive invitations from within the same SOGo instance, those
emails are not needed, it will autoaccept those invitations internally.

But when you receive invitations from outside, SOGo will not see them.
They have to be added manually from someone logging in as resource user.


> Thanks for any help as I can't find more documentation than the above
> linked Wiki page. Or maybe I miss something. Any links are appreciated.
> 

Some of those questions where handeled in this mailing list, but it is
not easy to search and find things here.


Kind regards,
Christian Mack

-- 
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung Basisdienste
78457 Konstanz
+49 7531 88-4416



smime.p7s
Description: S/MIME Cryptographic Signature


[SOGo] Help with Resources in SOGo

2017-07-24 Thread Tobias Brunner
Hi,

I'm trying to configure resource booking in SOGo like described here:
http://wiki.sogo.nu/ResourceConfiguration. I've managed to add the
calendarResource schema to 389DS and the example resource as entry to
the LDAP directory.

In sogo.conf I added the location where the resources are stored in LDAP
to SOGoUserSources:

  SOGoUserSources = (
{
  type = ldap;
  CNFieldName = cn;
  UIDFieldName = uid;
  IDFieldName = uid;
  MailFieldNames = (mail, alias);
  bindFields = (uid, mail);
  baseDN = "ou=SOGo,ou=Service Access,ou=Views,dc=example,dc=com";
  bindDN = "uid=sogo-service,ou=Special Users,dc=example,dc=com";
  bindPassword = HIDDEN;
  canAuthenticate = YES;
  displayName = "Users";
  hostname = ldaps://ldap.example.com:636;
  id = public;
  isAddressBook = YES;
  listRequiresDot = NO;
{
  type = ldap;
  CNFieldName = cn;
  UIDFieldName = cn;
  IDFieldName = cn;
  MultipleBookingsFieldName = Multiplebookings;
  KindFieldName = Kind;
  baseDN = "ou=Resources,dc=example,dc=com";
  bindDN = "uid=sogo-service,ou=Special Users,dc=example,dc=com";
  bindPassword = HIDDEN;
  canAuthenticate = NO;
  displayName = "Resources";
  hostname = ldaps://ldap.example.com:636;
  id = vshn_resources;
  isAddressBook = YES;
  listRequiresDot = NO;
}
  );

At least I can see the defined resource in the address book. But in the
new event view it doesn't appear as resource. I can add it in the
"Invite Attendees" field, but it shows as regular user. Shouldn't it be
displayed as resource?

In the documentation I read "Be sure that the resource has set at
MINIMUM "View Time and Date" for "All Authenticated Users" is set in
ACL". How can I do that? The resource is not able to login to SOGo as
there is no password set.

Does the resource need a mailbox? Or is this handled internally in SOGo?
If the resource needs a mailbox, does SOGo query the Inbox regularly? If
yes, how do I set this up? (password, schedule).

Thanks for any help as I can't find more documentation than the above
linked Wiki page. Or maybe I miss something. Any links are appreciated.

Best,
Tobias



signature.asc
Description: OpenPGP digital signature