Re: [SOGo] ldap group auth, missing something?

[Sascha Kasch]

Am 15.12.2014 um 15:59 schrieb Sascha Kasch:

dear listmembers,

what once worked does not work anymore and i can not find the missing link.

i would like to grant calender- or addressbook-permissions to groups.
i created a group:

dn: cn=testgruppe,ou=groups,ou=machine-users,o=company,dc=domain,dc=com
objectClass: posixGroup
objectClass: top
cn: testgruppe
gidNumber: 1174
mail: testgru...@domain.com
memberUid: testuser

and a testuser:

dn: cn=toni testuser,ou=people,ou=machine-users,o=company,dc=domain,dc=com

objectClass: shadowAccount
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
cn: toni testuser
gidNumber: 65534
mail: testu...@domain.com
sn: testuser
uid: testuser
uidNumber: 1150
gecos: toni testuser
givenName: toni
loginShell: /bin/bash

here is my sogo conf:

{
    NGUseUTF8AsURLEncoding = YES;

OCSFolderInfoURL = "postgresql://user:password@localhost:5432/sogo/sogo_folder_info"; OCSSessionsFolderURL = "postgresql://user:password@localhost:5432/sogo/sogo_sessions_folder"; SOGoProfileURL = "postgresql://user:password@localhost:5432/sogo/sogo_user_profile";

    SOGoAppointmentSendEMailNotifications = YES;
    SOGoCacheCleanupInterval = 60;
    SOGoDraftsFolderName = Drafts;
    SOGoFirstDayOfWeek = 1;
    SOGoFoldersSendEMailNotifications = NO;
    SOGoForceIMAPLoginWithEmail = NO;
    SOGoForwardEnabled = YES;
    SOGoIMAPAclConformsToIMAPExt = YES;
    SOGoIMAPServer = "imap://mail.domain.com:143/?tls=YES";
    SOGoLDAPQueryLimit = 300;
    SOGoLDAPUserManagerCleanupInterval = 120;
    SOGoLanguage = German;
    SOGoLoginModule = Calendar;
    SOGoMailAuxiliaryUserAccountsEnabled = YES;
    SOGoMailDomain = domain.com;
    SOGoMailingMechanism = smtp;
    SOGoSMTPServer = mail.domain.com;
    SOGoSentFolderName = Sent;
    SOGoMemcachedHost = 127.0.0.1;
    SOGoSuperUsernames = (
        sogo
    );
    SOGoSupportedLanguages = (
    German
    );
    SOGoTimeZone = Europe/Berlin;
    SOGoTrashFolderName = Trash;
    SOGoUserSources = (
        {
            CNFieldName = cn;
            IDFieldName = cn;
            UIDFieldName = mail;
            baseDN = "dc=domain,dc=com";
            bindDN = "cn=sogo,dc=domain,dc=com";
            bindFields = (
               mail
            );
            bindPassword = "password";
            canAuthenticate = YES;
            encryption = STARTTLS;
            hostname = "server1.domain.com server2.domain.com";
            id = auth;
            isAddressBook = NO;
            port = 389;
            type = ldap;
        },
        {
            baseDN = "dc=domain,dc=com";
            bindDN = "cn=sogo,dc=domain,dc=com";
            bindPassword = "password";
            canAuthenticate = NO;
            displayName = domain;
            encryption = STARTTLS;

filter = "(o='member_fab1' OR o='member_fab2' OR description='mailgroup')";

            hostname = "server1.domain.com server2.domain.com";
            id = addresses;
            isAddressBook = YES;
            port = 389;
            type = ldap;
        }
    );
    SOGoVacationEnabled = YES;
    SxVMemLimit = 2048;
    WOUseRelativeURLs = YES;
    WOWorkersCount = 10;
}

i am able to find my group and to grant permissions. but whenever a member of that group tries to subscribe the calender or addressbook it states

that there is nothing to subscribe to.

what am i doing wrong here? any advice would be great

tia,
sascha

hi,

to answer my own question:

my bind fields parameter had be extended to also bind with uid:

            bindFields = (
                mail,uid
            );

cheers,
sascha
--
users@sogo.nu
https://inverse.ca/sogo/lists