[SOGo] BTS activities for Friday, October 21 2022
Title: BTS activities for Friday, October 21 2022 BTS Activities Home page: https://bugs.sogo.nu Project: SOGo For the period covering: Friday, October 21 2022 idlast updatestatus (resolution)categorysummary 5511 2022-10-21 07:24:07 confirmed (open) Packaging (Debian) Build packages for Ubuntu 22.04 LTS 5594 2022-10-21 12:10:32 assigned (open) Web Mail Cut&Paste of email addresses not possible
Re: [SOGo] kerberos sogo
You can let your webserver do the authentication, there it can do
krb5/gssapi authentication.
In sogo.conf st:
SOGoTrustProxyAuthentication = YES;
In Apache conf put something like:
AuthName "Login"
AuthType GSSAPI
GssapiSSLonly On
GssapiLocalName On
GssapiUseSessions On
GssapiSessionKey file:/var/lib/apache2/secrets/gssapi_session.key
GssapiCredStore keytab:/etc/keytab/apache.keytab
GssapiDelegCcacheDir /run/apache2/krb5
GssapiBasicAuth on
GssapiAllowedMech krb5
GssapiBasicAuthMech krb5
Session On
SessionCookieName gssapi_session path=/private;httponly;secure;
Require valid-user
SetEnv proxy-nokeepalive 1
RewriteEngine On
RewriteRule .* - [E=SOGO_REMOTE_USER:%{REMOTE_USER}]
If you also want authorization with ldap group-membership then that can
simply be added to the Apache config. Replace "Require valid-user" with:
AuthLDAPURL "ldap://dc1.example.com
dc2.example.com/DC=example,DC=com?sAMAccountName?sub?(objectClass=user)"
AuthLDAPRemoteUserAttribute sAMAccountName
Require valid-user
Require ldap-attribute userAccountControl="512"
Require ldap-filter
memberof:1.2.840.113556.1.4.1941:=CN=,OU=,DC=example,DC=com
This example is for Samba4 (or AD).
There is one side-effect of webserver authentication: the user's
password is not available in Sogo. This means that you must have
password-less login from Sogo to imap and smtp/submission.
For example run Sogo on the same machine as Dovecot and add this to the
dovecot config:
passdb {
args = nopassword=y allow_nets=127.0.0.1/32
driver = static
}
- Kees
On 21-10-2022 11:04, Christian Mack (christian.m...@uni-konstanz.de) wrote:
Hello
SOGo itself does not know about Kerberos.
But you can use its SAML interface in order to use it.
For that to work you have to setup an "Identity Provider" which
delivers Kerberos Tickets and a "Service Provider" for SOGo which
handles authentication for it.
Also your mail servers (IMAP + SMTP) have to either use kerberos for
authentication, or you have to allow not authenticated access from the
SOGo server.
SAML settings are documented in the Installation Documentation of
SOGo, but how to set up Identity and Service Providers is not.
You will need additional expertise for that.
How to enable and use Kerberos authentication with your mail server,
you have to check on its documentation.
Kind regards,
Christian Mack
Am 20.10.22 um 13:10 schrieb mich (supp...@foxnet.be):
Hello
Is this solution "kerberos sogo" still actuality?
Is also if it works online and not locally is there any documentation
on the subject?
Michel
Re: [SOGo] - Sogo 5.7.1 and FreeBSD
Hello, Thanks for your answer i'll ask to him Best regards, Le 21/10/2022 à 09:23, mich (supp...@foxnet.be) a écrit : https://www.esup-portail.org/wiki/display/SOGO/Installation+SOGo++v5+sur+Debian+buster Or to compile it manually, I saw a tutorial under debian taking the current version ... Best regards, Michel Le 21/10/22 08:47, « Ganael Laplanche(ganael.laplan...@centralesupelec.fr) » a écrit : On Thursday, October 20, 2022 9:31:50 PM CEST mich wrote: Hello Philippe, > https://www.freshports.org/www/sogo > > https://www.freshports.org/www/sogo#history > > 5.7.0_2 version ... You should probably ask the port maintainer (Alonso Cárdenas Márquez ) if he has plans for an update. Best regards, -- Ganael Laplanche Unix Systems Engineer @CentraleSupelec Rennes - DISI
Re: [SOGo] - Sogo 5.7.1 and FreeBSD
Do not attempt to compile SOGo manually on FreeBSD. You will end up with a very dirty system. On Fri, Oct 21, 2022 at 10:29 AM mich wrote: > > https://www.esup-portail.org/wiki/display/SOGO/Installation+SOGo++v5+sur+Debian+buster > > Or to compile it manually, I saw a tutorial under debian taking the > current version ... > > Best regards, > > Michel > > Le 21/10/22 08:47, « Ganael Laplanche( > ganael.laplan...@centralesupelec.fr) » users@sogo.nu> a écrit : > > On Thursday, October 20, 2022 9:31:50 PM CEST mich wrote: > > Hello Philippe, > > > https://www.freshports.org/www/sogo > > > > https://www.freshports.org/www/sogo#history > > > > 5.7.0_2 version ... > > You should probably ask the port maintainer (Alonso Cárdenas Márquez > ) if he has plans for an update. > > Best regards, > > -- > Ganael Laplanche > Unix Systems Engineer @CentraleSupelec Rennes - DISI > > > > > -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
Re: [SOGo] kerberos sogo
Hello SOGo itself does not know about Kerberos. But you can use its SAML interface in order to use it. For that to work you have to setup an "Identity Provider" which delivers Kerberos Tickets and a "Service Provider" for SOGo which handles authentication for it. Also your mail servers (IMAP + SMTP) have to either use kerberos for authentication, or you have to allow not authenticated access from the SOGo server. SAML settings are documented in the Installation Documentation of SOGo, but how to set up Identity and Service Providers is not. You will need additional expertise for that. How to enable and use Kerberos authentication with your mail server, you have to check on its documentation. Kind regards, Christian Mack Am 20.10.22 um 13:10 schrieb mich (supp...@foxnet.be): Hello Is this solution "kerberos sogo" still actuality? Is also if it works online and not locally is there any documentation on the subject? Michel -- Christian Mack Universität Konstanz Kommunikations-, Informations-, Medienzentrum (KIM) Abteilung IT-Dienste Forschung, Lehre, Infrastruktur 78457 Konstanz +49 7531 88-4416 smime.p7s Description: S/MIME Cryptographic Signature
Re: [SOGo] - Sogo 5.7.1 and FreeBSD
https://www.esup-portail.org/wiki/display/SOGO/Installation+SOGo++v5+sur+Debian+buster Or to compile it manually, I saw a tutorial under debian taking the current version ... Best regards, Michel Le 21/10/22 08:47, « Ganael Laplanche(ganael.laplan...@centralesupelec.fr) » a écrit : On Thursday, October 20, 2022 9:31:50 PM CEST mich wrote: Hello Philippe, > https://www.freshports.org/www/sogo > > https://www.freshports.org/www/sogo#history > > 5.7.0_2 version ... You should probably ask the port maintainer (Alonso Cárdenas Márquez ) if he has plans for an update. Best regards, -- Ganael Laplanche Unix Systems Engineer @CentraleSupelec Rennes - DISI
