Hello Sinan Alyuruk

Am 2014-10-15 um 11:32 schrieb Sinan Alyuruk:
> 
> I am trying to map samba account names with imap mail names in mysql
> database. Our previous mailboxes exists in mysql table, which cyrus can
> authenticate from.
> 
> With the following view I can login to cyrus imap from SOGo web with
> correct md5 password
> 
> S[0x7ff174629048]: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS
> AUTH=PLAIN SASL-IR COMPRESS=DEFLATE] mail.xxx.com Cyrus IMAP
> v2.3.16-Fedora-RPM-2.3.16-6.el6_2.5 server ready
> C[0x7ff1746249b8]: 1 login "[email protected]" "test_password"
> S[0x7ff174629048]: 1 OK
> 
> +---------------------+----------------------------------+----------+---------------------+
> 
> | c_uid               | c_password                       | mail     |
> email               |
> +---------------------+----------------------------------+----------+---------------------+
> 
> | [email protected]   | 16ec1ebb01fe02ded9b7d5447d3dfc65 |test_user |
> [email protected]   |
> +---------------------+----------------------------------+----------+---------------------+
> 
> 
>   SOGoUserSources =
>     (
>       {
>         type = sql;
>         id = directory;
>         viewURL = "mysql://sogo:xxx@localhost:3306/sogo/sogo_view";
>         IMAPLoginFieldName = email;
>         canAuthenticate = YES;
>         isAddressBook = YES;
>         userPasswordAlgorithm = md5;
>       }
>     );
> 
> But from outlook login, I see that its sending some wrong fields to imap
> server and login failed.
> 
> 
> S[0x1ccab58]: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS
> AUTH=PLAIN SASL-IR COMPRESS=DEFLATE] mail.xxx.com Cyrus IMAP
> v2.3.16-Fedora-RPM-2.3.16-6.el6_2.5 server ready
> C[0x2465c08]: 1 login "[email protected]" "test_user"
> S[0x1ccab58]: 1 NO Login failed: authentication failure
> 
> I haven't seen an IMAPLoginFieldPassword option. How can I make outlook
> map correctly?
> 

I assume you use the native Outlook MAPI connectivity via openchange.

Outlook does never send the password by MAPI to SOGo.
It authenticates itself with the samba server and gets a kerberos ticket
back.
With this ticket MAPI connects to SOGo.
So neither openchange nor SOGo can use that password to authenticate to
the imap server.
So you either have to allow anonymous access from your SOGo server, or
you have to store all passwords in clear text for each Outlook user on
your SOGo server, or you have to enable kerberos authentication in your
imap server.


Kind regards,
Christian Mack

-- 
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung Basisdienste
78457 Konstanz
+49 7531 88-4416

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to