[SOGo] BTS activities for Friday, June 26 2020

[SOGo reporter]

Title: BTS activities for Friday, June 26 2020





  
BTS Activities

  Home page: https://sogo.nu/bugs
  Project: SOGo
  For the period covering: Friday, June 26 2020

  
  
idlast updatestatus (resolution)categorysummary
	
	
	  
	
5055
	2020-06-26 11:38:15
	updated (open)
	Web Calendar
	Calendar entries always get time set to 00:00-00:00
	
	  
	
768
	2020-06-26 15:28:43
	updated (fixed)
	Web Mail
	Add multiple Identity to Imap Account
	
	  
	
5065
	2020-06-26 04:35:38
	updated (open)
	Web Mail
	Edit Area stays decreased in Safari
	
	  
	
4602
	2020-06-26 15:28:43
	resolved (fixed)
	Web Mail
	Multiple Identities
	
	  
	
  
  


-- users@sogo.nuhttps://inverse.ca/sogo/lists

Re: [SOGo] SOGo with SAML: authentication expires after short time

[Jeroen van Os]

Hi,

After some further investigations it seems that the SAML authentication 
message is stored in a cache, and SOGo needs the original SAML 
authentication message to respond to the AJAX calls. However this 
message is cleaned from the cache after 300 seconds, which gives the 
described behavior.


I can control the cleanup time with the setting SOGoCacheCleanupInterval 
in the preferences. Now my question is: is there any downside or 
security issue when setting the cleanup interval to multiple hours?


Kind regards,
Jeroen


Op 17/06/2020 om 20:28 schreef Jeroen van Os (jeroen.va...@nevel.io):

Hi,

I am using SOGo 4.3.2 with SAML authentication. I seem to have an 
issue with expiration of the SAML token, because after a few minutes 
of using the SOGo web client, it stops working, i.e. it keeps loading 
when I try to open messages or folders and it can't send emails 
anymore. A refresh of the web page (including redirect to the identity 
provider) solves the issue.


When looking at the browser debug screen, when opening a message I can 
see that the browser does a call to 
/SOGo/so//Mail/0/filerINBOX//view, which responds with an 
HTTP 302, redirecting to the identity provider. The browser 
subsequently receives an HTTP 200 from the identity provider, but 
because this is an AJAX call and not a regular web page load, nothing 
happens anymore and SOGo is stuck.


As far as I can tell, SOGo simply expires the session and thus the 
user is blocked. This is extremely inconvenient, because the session 
expires in less time than is required to type an email, so by the time 
the user has typed his email, he cannot even send it anymore.


I did not find any configuration or settings related to this. Am I 
missing something? The same identity provider is used for other 
applications so I am assuming it is not related to the identity 
provider. I will gladly provide more information if required.


Thanks in advance,
Jeroen





--
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Address book issues with sogo 4 database

[Daniel Kollmer]

Ok, I found the solution for the issue.

It appears that the table sogo_folder_info stores the complete database
url string for all calendars and address books per user, so the queries
were actually sent to the old database server.

I guess that is what's referred to in the setup documentation where it says:

"SOGo stores the database hostname together with table references inside
several database tables. To prevent possible future issues when moving
the database to another host, it is best practice to add a local alias
name to your /etc/hosts file, and using this in /etc/sogo/sogo.conf
instead of the actual name of your server or localhost."

Maybe it is advisable to note there that not only the database hostname
but also databasename, username and password are stored this way. Is
there an official way to change this without editing the database
tables? Effectively this seems to prevent a database migration where
either of those settings change.

Greetings

On 6/26/20 3:56 PM, Daniel Kollmer (dani...@nikhef.nl) wrote:
>
> Hello everyone
>
> I have upgraded a SOGo 2.2.17 database to be used with SOGo version 4
> by running the sql-update-2.2.17_to_2.3.0-mysql.sh
> and the sql-update-3.2.10_to_4.0.0-mysql.sh scripts. However, the
> address book function is not working properly. Contact entries do not
> get loaded, but they do become visible if clicked on. Contacts can be
> edited and deleted, but no new contacts can be created.
>
> When checking the logs, I only see one error:
>
>  NAME:ExecutionFailed REASON:Unknown
> column 'c_hascertificate' in 'field list'
>
> This is a new field introduced in the version 4 database, so I thought
> maybe the upgrade script did not work. However, if I look at the
> contents of the table, I do see that the entries have the
> c_hascertificate field. Even stranger, I can execute the queries which
> fail with the above error and I do get a result. Here is an example of
> a query that fails according to the logs:
>
> mysql sogo -e "SELECT c_name, c_cn, c_givenname, c_sn, c_screenname, c_o, 
> c_mail, c_telephonenumber, c_categories, c_component, c_hascertificate FROM 
> sogodanielk0010b139593_quick WHERE (c_component = 'vlist')\G"
> *** 1. row ***
>    c_name: 56F6-5EF36600-1-707F7100.vcf
>  c_cn: test
>   c_givenname: NULL
>  c_sn: NULL
>  c_screenname: NULL
>   c_o: NULL
>    c_mail: NULL
> c_telephonenumber: NULL
>  c_categories: NULL
>   c_component: vlist
>  c_hascertificate: 0
> Is this maybe a bug? Does anyone have a suggestion what to do?
> -- 
> Daniel Kollmer
> Computer Technology Group
> NIKHEF - Dutch National Institute for Sub-atomic Physics
> Science Park 105 1098 XG Amsterdam
> Phone: +31205922164 

-- 
Daniel Kollmer
Computer Technology Group
NIKHEF - Dutch National Institute for Sub-atomic Physics
Science Park 105 1098 XG Amsterdam
Phone: +31205922164 



signature.asc
Description: OpenPGP digital signature

[SOGo] Address book issues with sogo 4 database

[Daniel Kollmer]

Hello everyone

I have upgraded a SOGo 2.2.17 database to be used with SOGo version 4 by
running the sql-update-2.2.17_to_2.3.0-mysql.sh
and the sql-update-3.2.10_to_4.0.0-mysql.sh scripts. However, the
address book function is not working properly. Contact entries do not
get loaded, but they do become visible if clicked on. Contacts can be
edited and deleted, but no new contacts can be created.

When checking the logs, I only see one error:

 NAME:ExecutionFailed REASON:Unknown
column 'c_hascertificate' in 'field list'

This is a new field introduced in the version 4 database, so I thought
maybe the upgrade script did not work. However, if I look at the
contents of the table, I do see that the entries have the
c_hascertificate field. Even stranger, I can execute the queries which
fail with the above error and I do get a result. Here is an example of a
query that fails according to the logs:

mysql sogo -e "SELECT c_name, c_cn, c_givenname, c_sn, c_screenname, c_o, 
c_mail, c_telephonenumber, c_categories, c_component, c_hascertificate FROM 
sogodanielk0010b139593_quick WHERE (c_component = 'vlist')\G"
*** 1. row ***
   c_name: 56F6-5EF36600-1-707F7100.vcf
 c_cn: test
  c_givenname: NULL
 c_sn: NULL
 c_screenname: NULL
  c_o: NULL
   c_mail: NULL
c_telephonenumber: NULL
 c_categories: NULL
  c_component: vlist
 c_hascertificate: 0

Is this maybe a bug? Does anyone have a suggestion what to do?

-- 
Daniel Kollmer
Computer Technology Group
NIKHEF - Dutch National Institute for Sub-atomic Physics
Science Park 105 1098 XG Amsterdam
Phone: +31205922164 



signature.asc
Description: OpenPGP digital signature

[SOGo] AD Groups and ACL

[goetz.reini...@filmakademie.de]

Hi,

I try to use AD groups for ACLs for calendars and can’t get it to work right 
now. I added a mail attribute and in SOGo I find the group by its name to set 
an ACL.

But the users of the group don't get the calendar subscribed if I check that 
button.

Furthermore, the notification mail for subscribing and adding is send to the 
groups mal address, which is not recognised by our mailserver.

I guess, there are some more requirements than in that FAQ:

https://sogo.nu/support/faq/how-are-groups-handled-in-sogo-.html


Thanks for any help, hints and suggestions . Regards . Götz

smime.p7s
Description: S/MIME cryptographic signature

Re: [SOGo] AD Groups and ACL

[goetz.reini...@filmakademie.de]

> Am 26.06.2020 um 15:08 schrieb Götz Reinicke :
> 
> Hi,
> 
> I try to use AD groups for ACLs for calendars and can’t get it to work right 
> now. I added a mail attribute and in SOGo I find the group by its name to set 
> an ACL.
> 
> But the users of the group don't get the calendar subscribed if I check that 
> button.
> 
> Furthermore, the notification mail for subscribing and adding is send to the 
> groups mal address, which is not recognised by our mailserver.
> 
> I guess, there are some more requirements than in that FAQ:
> 
> https://sogo.nu/support/faq/how-are-groups-handled-in-sogo-.html 
> 

O.k.. got a hint; the FAQ uses groupOfNames, while the AD group I tried hasn’t 
that objectless set.


Any hints on resolving that? Workarounds?

Regards . Götz




smime.p7s
Description: S/MIME cryptographic signature