Hello all, I'm deploying a SOGo with SQL user source and multi-domains. I'm facing two problems, one is critical (security).
1/ Critical : With SQL user source, the domains isolation does not seem to work. When I'm connected with a user from domain1.tld, I can see the users of all domains (domain1.tld and domain2.tld) in the sharing dialog and in the subscription dialog. 2/ The shared address book does not work in multi-domains configuration Setting "isAddressBook = YES" for a SOGoUserSources works fine in a simple configuration. When setting the same parameter in a SOGoUserSources in a domain, it does not work (the shared address book does not appear in the webui). Are they know problems ? I attache my configuration. Thanks for your help.
{
NSGlobalDomain = {
};
"sogo-slapd-sockd" = {
};
sogod = {
NGImap4ConnectionStringSeparator = "/";
NGImap4DisableIMAP4Pooling = YES;
NGUseUTF8AsURLEncoding = YES;
OCSEMailAlarmsFolderURL =
"mysql://sogo:****@localhost:5432/sogo/sogo_alarms_folder";
OCSFolderInfoURL =
"mysql://sogo:****@localhost:5432/sogo/sogo_folder_info";
OCSSessionsFolderURL =
"mysql://sogo:****@localhost:5432/sogo/sogo_sessions_folder";
SOGoACLsSendEMailNotifications = YES;
SOGoAppointmentSendEMailNotifications = YES;
SOGoAuthenticationMethod = LDAP;
SOGoCalendarDefaultRoles = (
PublicViewer
);
SOGoDebugRequests = YES;
SOGoDraftsFolderName = Brouillons;
SOGoEnableEMailAlarms = YES;
SOGoEnablePublicAccess = NO;
SOGoFoldersSendEMailNotifications = NO;
SOGoForceIMAPLoginWithEmail = NO;
SOGoForwardEnabled = YES;
SOGoIMAPServer = imap://localhost:60143;
SOGoLanguage = French;
SOGoMailingMechanism = smtp;
SOGoMemcachedHost = localhost;
SOGoOtherUsersFolderName = "Other Users";
SOGoProfileURL =
"mysql://sogo:****@localhost:5432/sogo/sogo_user_profile";
SOGoSMTPServer = 127.0.0.1;
SOGoSentFolderName = Envoyes;
SOGoSharedFolderName = "Shared Folders";
SOGoSieveScriptsEnabled = YES;
SOGoTimeZone = Europe/Paris;
SOGoTrashFolderName = Corbeille;
domains = {
domain1.tld = {
SOGoMailDomain = domain1.tld;
SOGoUserSources = (
{
canAuthenticate = YES;
displayName = "Annuaire d'entreprise";
id = dbmail-domain1;
isAddressBook = YES;
type = sql;
userPasswordAlgorithm = none;
viewURL =
"mysql://dbmail:****@localhost:3306/dbmail/sogo_view_domain1";
}
);
};
domain2.tld = {
SOGoMailDomain = domain2.tld;
SOGoUserSources = (
{
canAuthenticate = YES;
displayName = "Annuaire d'entreprise";
id = dbmail-domain2;
isAddressBook = YES;
type = sql;
userPasswordAlgorithm = none;
viewURL =
"mysql://dbmail:****@localhost:3306/dbmail/sogo_view_domain2";
}
);
};
};
SOGoVacationEnabled = YES;
SxVMemLimit = 512;
WOMessageUseUTF8 = YES;
WOParsersUseUTF8 = YES;
WOPort = "127.0.0.1:20000";
WOUseRelativeURLs = YES;
};
}
smime.p7s
Description: S/MIME cryptographic signature
