Corrado Fiore | 1 Feb 2011 02:10
Picon

Re: [SOGo] Mysql source w/ crypt broken after 1.3.5a upgrade?

Dear All,

after a bit (well, several hours...) of investigation, I found that:

1)  md5 works flawlessly on my installation, while crypt does not.  So it's not a configuration problem.

2)  The code pre-1.3.5a, i.e. the one attached to bug report #703
(http://www.sogo.nu/bugs/view.php?id=703) worked fine (I've been using it on 1.3.4 without any problems).

3)  In 1.3.5 the crypt() code was modularized and moved to NSstring+Utilities.m:

> 2010-12-29  Ludovic Marcotte  <lmarcotte@...>
> 
> 	* Moved the string encryption code from SoObjects/SOGo/SQLSource.m
> 	to SoObjects/SOGo/NSString+Utilites.m

4)  Feel free to correct me if I'm wrong, but it seems to me that the new implementation doesn't use the right salt.

To perform a check against an existing md5-crypted password, you must fetch it from the DB and pass it as the
second parameter to the crypt() function (the first will be the user-provided password to validate). 
This is because the salt to use is embedded into the crypted password (if you're using md5-crypt, it's the
substring that starts with "$1$" and ends with "$"). The crypt() function will recognize the salt part
automagically and use it to encode the user provided password.  If you look at the patch code, you'll see the
following lines:

> buf = (char *) crypt([plainPassword UTF8String], [encryptedPassword UTF8String]);
> NSString *s = [NSString stringWithUTF8String: buf];
> return [s isEqualToString: encryptedPassword];

In the new code (lines 548-556 from NSString-Utilities.m), the password to check is provided also as the
(Continue reading)

SOGo reporter | 1 Feb 2011 06:01
Picon
Gravatar

[SOGo] BTS activities for Monday, January 31 2011

BTS Activities

Home page: http://www.sogo.nu/bugs
Project: SOGo
For the period covering: Monday, January 31 2011

idlast updatestatus (resolution)categorysummary
1111 2011-01-31 15:04:52 new (open) Web Mail Sieve filter - Can't file into folder with special characters
1110 2011-01-31 11:06:09 new (open) with external server Various patches for synchronizing Thunderbird address books with iPhone, iPad etc. and DAViCal
fedel | 1 Feb 2011 09:32
Picon

Re: [SOGo] Interoperability of SOGo Connector and iPhone

Hi Philip,

Last night I submitted a couple of small patches for the Sogo connector (see
http://www.sogo.nu/bugs/view.php?id=1110) which should cure the "item1." prefix
problem. I'm just cutting off those prefixes so Sogo/TB can read addresses
originated in the Apple universe. Of course, by ignoring any grouping
information TB might get the relationship of address components wrong, a home
fax number might show up at work instead. So far I didn't run into this problem
because iOS seems to also populate the type field (type=HOME, type=WORK), at
least for standard locations.

Your attached full VCARD contains more data (e.g. more phone numbers, more
email addresses) than the Sogo connector and Thunderbird contact templates can
handle. TB only supports a hard coded list of address fields, everything else
is ignored i.e. will be lost after being updated on TB. The simple workaround
for this would be to not use any such extra fields in the first place. A better
workaround would be to extend the TB contact GUI and provide matching connector
code to handle it. Any volunteers? (Just kidding...)

Frank
Alan Bover | 1 Feb 2011 10:15
Picon
Favicon

[SOGo] SOGo create calendar events & notifications

Hi, I'm just looking for if there are any way to recieve an mail notification
if someone create an event in my calendar. That user is granted into my
calendar as he can create events, so he does not need to send me an invitation,
he can create that event in my calendar directly. 

Is any way of configuring sogo for receive an email notification when that user
creates me an event in my calendar? Thanks
Alessio Fattorini | 1 Feb 2011 10:21
Picon
Gravatar

Re: [SOGo] SOGo create calendar events & notifications

Il 01/02/2011 10:15, Alan Bover ha scritto:
> Hi, I'm just looking for if there are any way to recieve an mail notification
> if someone create an event in my calendar. That user is granted into my
> calendar as he can create events, so he does not need to send me an invitation,
> he can create that event in my calendar directly.
>
> Is any way of configuring sogo for receive an email notification when that user
> creates me an event in my calendar? Thanks

Should be very useful +1
Feel a bug

--

-- 
Alessio Fattorini (alessio.fattorini@...)

nethesis srl - Via degli Olmi 16/4 - 61100 Pesaro (PU)
tel. +39 0721 405516 - fax +39 0721 268147
www.nethesis.it - info@...
C.Kaulich | 1 Feb 2011 10:22

Re: [SOGo] Thunderbird 3.1 and photo in contacts

Martin (Lists <lists <at> ...> writes:

> > 
> > Am Donnerstag, 29. Juli 2010 schrieb Ludovic Marcotte:
>> > >   On 29/07/10 1:07 PM, Martin (Lists) wrote:
>>> > > > 
>>> > > > I can add a photo to the contact, but this seems to be only local
>>> > > > (or the URL is stored in the contact). But I want to upload the
>>> > > > photo onto the contact data, so every user can see it.
>>> > > > 
>>> > > > Is this a limitation of T-Birds addressbook?
>> > > 
>> > > PHOTOs weren't supported as of an hour ago. It's now, new XPIs have
>> > > been generated.

What about the photos iI have first in the web version, are they synced back to
Thunderbird? What do I have to do , to get photos, added by my colleagues into
my thunderbird?

Christoph 

Marco Bencivenni | 1 Feb 2011 10:38
Picon

Re: [SOGo] kerberos authentication

Dear all,

excuse me but I prevoiulsy posted an incorrect configuration.
The problem is that I tru to use a kerberos authentication but I got a blank page withe the only word "Unauthorized"

The configuration apache-kerberos is correct, but there is something in SOGo configuration in order to use kerberos credentials.
I hope that someone has already faced this type of problem.
Thanks in advance,
Marco B


In my SOGo.conf  I uncomment:

<Location /SOGo>
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate Off
  KrbMethodK5Passwd On
  KrbAuthRealms ####.IT
  KrbServiceName HTTP/###.it <at> ####.IT
  Krb5KeyTab /etc/httpd/conf/keytab
  require valid-user
  Order allow,deny
  Allow from all
</Location>
 
and

  RequestHeader set "x-webobjects-remote-user" "%{REMOTE_USER}e"


My .GNUstepDefaults is

        <key>OCSFolderInfoURL</key>
        <string>mysql://sogo:sogo <at> localhost:3306/sogo/sogo_folder_info</string>
        <key>SOGoACLsSendEMailNotifications</key>
        <string>YES</string>
        <key>SOGoAppointmentSendEMailNotifications</key>
        <string>YES</string>
        <key>SOGoDraftsFolderName</key>
        <string>Drafts</string>
        <key>SOGoFoldersSendEMailNotifications</key>
        <string>YES</string>
        <key>SOGoIMAPServer</key>
        <string>imaps://###.it:993/?tls=YES</string>
        <key>SOGoLanguage</key>
        <string>Italian</string>
        <key>SOGoMailDomain</key>
        <string>cnaf.infn.it</string>
        <key>SOGoProfileURL</key>
        <string>mysql://sogo:sogo <at> localhost:3306/sogo/sogo_user_profile</string>
        <key>SOGoSentFolderName</key>
        <string>Sent</string>
        <key>SOGoTimeZone</key>
        <string>Europe/Rome</string>
        <key>SOGoTrashFolderName</key>
        <string>Trash</string>
        <key>SOGoTrustProxyAuthentication</key>
        <string>YES</string>
        <key>SOGoUserSources</key>
        <array>
            <dict>
                <key>CNFieldName</key>
                <string>cn</string>
                <key>IDFieldName</key>
                <string>uid</string>
                <key>UIDFieldName</key>
                <string>uid</string>
                <key>baseDN</key>
                <string>ou=people,ou=cnaf,o=infn,c=it</string>
                <key>canAuthenticate</key>
                <string>YES</string>
                <key>displayName</key>
                <string>Shared Addresses</string>
                <key>hostname</key>
                <string>131.154.128.32</string>
                <key>id</key>
                <string>public</string>
                <key>isAddressBook</key>
                <string>YES</string>
                <key>port</key>
                <string>389</string>
                <key>type</key>
                <string>ldap</string>
            </dict>
        </array>
    </dict>
</dict>
</plist>



2011/1/26 <escoreal-BGeptl67XyCzQB+pC5nmwQ@public.gmane.org>
Hi Marco,

to use external authentication like Kerberos you have to use HTTP Header in
front of SOGo:
http://www.sogo.nu/english/support/faq/article/how-to-use-webauth-with-sogo-2.html

There are a lot of examples in the Web for doing that. But the exact
configuration steps depend on your setup. Especially for Apache and Kerberos
there are a lot of how-tos.

esco

Brian Lockwood | 1 Feb 2011 10:45
Picon

[SOGo] Timeout after 1.35 upgrade

After the upgrade to 1.35 I am getting com plaints of the web interface
timing out. Is there a setting?
Marco Bencivenni | 1 Feb 2011 11:44
Picon

Re: [SOGo] kerberos authentication

I don't have any information in sogo log but I have something in apache error log:

[Tue Feb 01 11:40:43 2011] [debug] src/mod_auth_kerb.c(1432): [client 131.154.7.18] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
[Tue Feb 01 11:40:43 2011] [debug] src/mod_auth_kerb.c(915): [client 131.154.7.18] Using HTTP/####.it <at> ####.IT as server principal for password verification
[Tue Feb 01 11:40:43 2011] [debug] src/mod_auth_kerb.c(655): [client 131.154.7.18] Trying to get TGT for user mbenci <at> ####.IT
[Tue Feb 01 11:40:43 2011] [debug] src/mod_auth_kerb.c(569): [client 131.154.7.18] Trying to verify authenticity of KDC using principal HTTP/####.it <at> ###.IT
[Tue Feb 01 11:40:43 2011] [debug] src/mod_auth_kerb.c(994): [client 131.154.7.18] kerb_authenticate_user_krb5pwd ret=0 user=mbenci <at> ####.IT authtype=Basic
[Tue Feb 01 11:40:43 2011] [debug] mod_proxy_http.c(56): proxy: HTTP: canonicalising URL //127.0.0.1:20000/SOGo/
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(1488): [client 131.154.7.18] proxy: http: found worker http://127.0.0.1:20000/SOGo for http://127.0.0.1:20000/SOGo/
[Tue Feb 01 11:40:43 2011] [debug] mod_proxy.c(966): Running scheme http handler (attempt 0)
[Tue Feb 01 11:40:43 2011] [debug] mod_proxy_http.c(1976): proxy: HTTP: serving URL http://127.0.0.1:20000/SOGo/
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(2044): proxy: HTTP: has acquired connection for (127.0.0.1)
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(2102): proxy: connecting http://127.0.0.1:20000/SOGo/ to 127.0.0.1:20000
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(2195): proxy: connected /SOGo/ to 127.0.0.1:20000
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(2347): proxy: HTTP: fam 2 socket created to connect to 127.0.0.1
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(2449): proxy: HTTP: connection complete to 127.0.0.1:20000 (127.0.0.1)
[Tue Feb 01 11:40:43 2011] [debug] mod_proxy_http.c(1753): proxy: start body send
[Tue Feb 01 11:40:43 2011] [debug] mod_proxy_http.c(1842): proxy: end body send
[Tue Feb 01 11:40:43 2011] [debug] proxy_util.c(2062): proxy: HTTP: has released connection for (127.0.0.1)


Marco B

2011/2/1 Marco Bencivenni <marco.bencivenni-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Dear all,

excuse me but I prevoiulsy posted an incorrect configuration.
The problem is that I tru to use a kerberos authentication but I got a blank page withe the only word "Unauthorized"
The configuration apache-kerberos is correct, but there is something in SOGo configuration in order to use kerberos credentials.
I hope that someone has already faced this type of problem.
Thanks in advance,
Marco B


In my SOGo.conf  I uncomment:

<Location /SOGo>
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate Off
  KrbMethodK5Passwd On
  KrbAuthRealms ####.IT
  KrbServiceName HTTP/###.it <at> ####.IT
  Krb5KeyTab /etc/httpd/conf/keytab
  require valid-user
  Order allow,deny

  Allow from all
</Location>
 
and

  RequestHeader set "x-webobjects-remote-user" "%{REMOTE_USER}e"


My .GNUstepDefaults is


        <key>OCSFolderInfoURL</key>
        <string>mysql://sogo:sogo <at> localhost:3306/sogo/sogo_folder_info</string>
        <key>SOGoACLsSendEMailNotifications</key>
        <string>YES</string>
        <key>SOGoAppointmentSendEMailNotifications</key>
        <string>YES</string>
        <key>SOGoDraftsFolderName</key>
        <string>Drafts</string>
        <key>SOGoFoldersSendEMailNotifications</key>
        <string>YES</string>
        <key>SOGoIMAPServer</key>
        <string>imaps://###.it:993/?tls=YES</string>
        <key>SOGoLanguage</key>
        <string>Italian</string>
        <key>SOGoMailDomain</key>
        <string>cnaf.infn.it</string>
        <key>SOGoProfileURL</key>
        <string>mysql://sogo:sogo <at> localhost:3306/sogo/sogo_user_profile</string>
        <key>SOGoSentFolderName</key>
        <string>Sent</string>
        <key>SOGoTimeZone</key>
        <string>Europe/Rome</string>
        <key>SOGoTrashFolderName</key>
        <string>Trash</string>
        <key>SOGoTrustProxyAuthentication</key>
        <string>YES</string>
        <key>SOGoUserSources</key>
        <array>
            <dict>
                <key>CNFieldName</key>
                <string>cn</string>
                <key>IDFieldName</key>
                <string>uid</string>
                <key>UIDFieldName</key>
                <string>uid</string>
                <key>baseDN</key>
                <string>ou=people,ou=cnaf,o=infn,c=it</string>
                <key>canAuthenticate</key>
                <string>YES</string>
                <key>displayName</key>
                <string>Shared Addresses</string>
                <key>hostname</key>
                <string>131.154.128.32</string>
                <key>id</key>
                <string>public</string>
                <key>isAddressBook</key>
                <string>YES</string>
                <key>port</key>
                <string>389</string>
                <key>type</key>
                <string>ldap</string>
            </dict>
        </array>
    </dict>
</dict>
</plist>



2011/1/26 <escoreal-BGeptl67XyCzQB+pC5nmwQ@public.gmane.org>

Hi Marco,

to use external authentication like Kerberos you have to use HTTP Header in
front of SOGo:
http://www.sogo.nu/english/support/faq/article/how-to-use-webauth-with-sogo-2.html

There are a lot of examples in the Web for doing that. But the exact
configuration steps depend on your setup. Especially for Apache and Kerberos
there are a lot of how-tos.

esco


Brian Lockwood | 1 Feb 2011 12:33
Picon

[SOGo] Timeout after 1.35 upgrade

I get a timeout after 5 minutes in the wbe interface, even if it is being
used?

Gmane