[SOGo] 2-Factzor Authentication

2016-10-20 Thread Andreas Altenburg
Hi,

I wonder if there any plans for implementation of a 2FA into SOGo Web
Interface. We got it running with an LDAP-Proxy (and DUO, so there was
no need to enter a token but to accept a push message on your phone).
Cavecat is obviously that with this setup a 2FA is also needed for
mobile users with caldav etc.

Did anybody have an idea for realizing that?


Thanks,

Andreas
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Invitations to external users using Outlook are shown as not supported calendar message

2016-10-19 Thread Andreas Altenburg
Sorry, problem is already solved. Possible reason was a different sender
address. I reconfigured everything and now it's working.


Am Mi, 19. Okt 2016, um 09:35, schrieb Andreas Altenburg:
> Hi,
>
> I’ve seen that this question was discussed before and as far as I’ve
> understood it should be already solved. Nevertheless the problem
> occurs in our setup again (we are using SOGo 3 from the latest
> nightly build).
>
> When sending meeting invitations to external users who are using
> Outlook, they won’t see any RSVP buttons (no matter if outlook.com in
> Browser, Outlook 2016 on Mac with Office365 or Outlook 2016 on Windows
> on an inhouse Exchange server). Instead of this the attachment has the
> name „not supported calendar message.ics“.
>
> The invitation was sent from SOGo Web Interface. Below you’ll find the
> mail headers and the ics content (I replaced the origin domain with
> „test“).
>
> I understand that Microsoft often does not respect any standards, but
> many users are on Exchange/Office365 and we need to be able to send
> invitations to them.
>
> If there is anything we can contribute for further debugging please
> let uns know.
>
>
> Andreas
>
>
> ===
>
> Received: from AM4PR01MB1810.eurprd01.prod.exchangelabs.com
> (10.167.85.20) by
>  HE1PR01MB1819.eurprd01.prod.exchangelabs.com (10.165.228.21) with
>  Microsoft
>  SMTP Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.16 via
>  Mailbox
>  Transport; Wed, 19 Oct 2016 07:19:56 +
> Received: from AM4PR0101CA0051.eurprd01.prod.exchangelabs.com
> (10.165.22.147)
>  by AM4PR01MB1810.eurprd01.prod.exchangelabs.com (10.167.85.20) with
>  Microsoft
>  SMTP Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.12;
>  Wed, 19
>  Oct 2016 07:19:54 +
> Received: from AM1FFO11FD042.protection.gbl
> (2a01:111:f400:7e00::198) by
>  AM4PR0101CA0051.outlook.office365.com (2603:10a6:200:41::19) with
>  Microsoft
>  SMTP Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.16 via
>  Frontend Transport; Wed, 19 Oct 2016 07:19:54 +
> Authentication-Results: spf=neutral (sender IP is 46.101.171.41)
>  smtp.mailfrom=test.me; test.onmicrosoft.com; dkim=none (message not
>  signed) header.d=none;test.onmicrosoft.com; dmarc=none action=none
>  header.from=test.me;test.onmicrosoft.com; dkim=none (message not
>  signed) header.d=none;
> Received-SPF: Neutral (protection.outlook.com: 46.101.171.41 is
> neither
>  permitted nor denied by domain of test.me)
> Received: from mail.0-1.io (46.101.171.41) by
>  AM1FFO11FD042.mail.protection.outlook.com (10.174.64.231) with
>  Microsoft SMTP
>  Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
>  15.1.669.7 via Frontend Transport; Wed, 19 Oct 2016 07:19:53 +
> Received: from localhost (localhost [127.0.0.1])
> by mail.0-1.io (Postfix) with ESMTP id 6993A1011EA
> for ; Wed, 19 Oct 2016 07:19:53
> + (UTC)
> To: 
> boundary="=_=-_OpenGroupware_org_NGMime-16826-1476861593.299262-
> 0--"
> MIME-Version: 1.0
> Date: Wed, 19 Oct 2016 09:19:53 +0200
> Subject: =?utf-8?q?Termineinladung=3A?==?utf-8?q?_=22Test?==?utf-
> 8?q?_3=22?=
> Message-ID: <41ba-58071e80-5-1d2ef960@226569200>
> x-sogo-message-type: calendar:invitation
> From: Andreas test 
> Return-Path: t...@test.me
> X-MS-Exchange-Organization-Network-Message-Id: 8453ee62-eb58-4872-ddb1-
> 08d3f7f052a4
> X-EOPAttributedMessage: 0
> X-EOPTenantAttributedMessage: b1db80d6-370b-4805-862d-0c5eb0a42997:0
> X-MS-Exchange-Organization-MessageDirectionality: Incoming
> X-Forefront-Antispam-Report: CIP:46.101.171.41;IPV:NLI;CTRY:RU;EFV:NL-
> I;SFV:SPM;SFS:(6009001)(8196002)(298032)(4040300010)(429037)(-
> 189002)(37854004)(199003)(461011)(92566002)(281071)(111005000-
> 01)(512874002)(97736004)(86362001)(110136003)(236004)(74482002)(77096-
> 005)(2476003)(7846002)(81156014)(8676002)(7576002)(81166006)(19580405-
> 001)(19580395003)(324072)(107886002)(5593021)(9686002)(189998-
> 001)(84326002)(500205012)(54356999)(1096003)(50986999)(57986006)(-
> 105586002)(76506005)(8896002)(45011)(586003)(106466001)(56603-
> 1)(356003)(229853001)(33716001)(68736007)(626004)(104016004)(33646002-
> )(6916009)(500011)(2351001)(7126002)(512934002)(7099028)(18360200-
> 002);DIR:INB;SFP:;SCL:5;SRVR:AM4PR01MB1810;H:mail.0-
> 1.io;FPR:;SPF:Neutral;PTR:InfoDomainNonexistent;MX:1;A:0;CAT:SPM;LANG-
> :de;SFTY:9.11;
> X-Microsoft-Exchange-Diagnostics: 1;AM1FFO11FD042;1:sYJobpL4IgoeHczOv-
> yCWjghAHqvac62JZ0iwGRUTObTTOyfxG3D9kBo34L0GFjvTB/FHlYcotwzEPVGRvqBx8W-
> 2ASBqr+j2F

[SOGo] Invitations to external users using Outlook are shown as not supported calendar message

2016-10-19 Thread Andreas Altenburg
Hi,

I’ve seen that this question was discussed before and as far as I’ve
understood it should be already solved. Nevertheless the problem occurs
in our setup again (we are using SOGo 3 from the latest nightly build).

When sending meeting invitations to external users who are using
Outlook, they won’t see any RSVP buttons (no matter if outlook.com in
Browser, Outlook 2016 on Mac with Office365 or Outlook 2016 on Windows
on an inhouse Exchange server). Instead of this the attachment has the
name „not supported calendar message.ics“.

The invitation was sent from SOGo Web Interface. Below you’ll find
the mail headers and the ics content (I replaced the origin domain
with „test“).

I understand that Microsoft often does not respect any standards, but
many users are on Exchange/Office365 and we need to be able to send
invitations to them.

If there is anything we can contribute for further debugging please
let uns know.


Andreas


===

Received: from AM4PR01MB1810.eurprd01.prod.exchangelabs.com (10.167.85.20) by
 HE1PR01MB1819.eurprd01.prod.exchangelabs.com (10.165.228.21)
 with Microsoft
 SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.16
 via Mailbox
 Transport; Wed, 19 Oct 2016 07:19:56 +
Received: from AM4PR0101CA0051.eurprd01.prod.exchangelabs.com (10.165.22.147)
 by AM4PR01MB1810.eurprd01.prod.exchangelabs.com (10.167.85.20)
 with Microsoft
 SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.1.669.12; Wed, 19
 Oct 2016 07:19:54 +
Received: from AM1FFO11FD042.protection.gbl (2a01:111:f400:7e00::198) by
 AM4PR0101CA0051.outlook.office365.com (2603:10a6:200:41::19)
 with Microsoft
 SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.16 via
 Frontend Transport; Wed, 19 Oct 2016 07:19:54 +
Authentication-Results: spf=neutral (sender IP is 46.101.171.41)
 smtp.mailfrom=test.me; test.onmicrosoft.com; dkim=none (message not
 signed) header.d=none;test.onmicrosoft.com; dmarc=none action=none
 header.from=test.me;test.onmicrosoft.com; dkim=none (message not
 signed) header.d=none;
Received-SPF: Neutral (protection.outlook.com: 46.101.171.41 is neither
 permitted nor denied by domain of test.me)
Received: from mail.0-1.io (46.101.171.41) by
 AM1FFO11FD042.mail.protection.outlook.com (10.174.64.231) with
 Microsoft SMTP
 Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.1.669.7 via Frontend Transport; Wed, 19 Oct 2016 07:19:53 +
Received: from localhost (localhost [127.0.0.1])
 by mail.0-1.io (Postfix) with ESMTP id 6993A1011EA
 for ; Wed, 19 Oct 2016 07:19:53
 + (UTC)
To: 
 boundary="=_=-_OpenGroupware_org_NGMime-16826-
 1476861593.299262-0--"
MIME-Version: 1.0
Date: Wed, 19 Oct 2016 09:19:53 +0200
Subject: =?utf-8?q?Termineinladung=3A?==?utf-8?q?_=22Test?==?utf-8?q?_3=22?=
Message-ID: <41ba-58071e80-5-1d2ef960@226569200>
x-sogo-message-type: calendar:invitation
From: Andreas test 
Return-Path: t...@test.me
X-MS-Exchange-Organization-Network-Message-Id: 
8453ee62-eb58-4872-ddb1-08d3f7f052a4
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: b1db80d6-370b-4805-862d-0c5eb0a42997:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: 
CIP:46.101.171.41;IPV:NLI;CTRY:RU;EFV:NLI;SFV:SPM;SFS:(6009001)(8196002)(298032)(4040300010)(429037)(189002)(37854004)(199003)(461011)(92566002)(281071)(1110051)(512874002)(97736004)(86362001)(110136003)(236004)(74482002)(77096005)(2476003)(7846002)(81156014)(8676002)(7576002)(81166006)(19580405001)(19580395003)(324072)(107886002)(5593021)(9686002)(189998001)(84326002)(500205012)(54356999)(1096003)(50986999)(57986006)(105586002)(76506005)(8896002)(45011)(586003)(106466001)(566031)(356003)(229853001)(33716001)(68736007)(626004)(104016004)(33646002)(6916009)(500011)(2351001)(7126002)(512934002)(7099028)(1836022);DIR:INB;SFP:;SCL:5;SRVR:AM4PR01MB1810;H:mail.0-1.io;FPR:;SPF:Neutral;PTR:InfoDomainNonexistent;MX:1;A:0;CAT:SPM;LANG:de;SFTY:9.11;
X-Microsoft-Exchange-Diagnostics: 
1;AM1FFO11FD042;1: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
X-MS-Office365-Filtering-Correlation-Id: 8453ee62-eb58-4872-ddb1-08d3f7f052a4
X-Microsoft-Exchange-Diagnostics: 
1;AM4PR01MB1810;2:5ieMBPFQOE/23/aTw03zkpvscHMUjnRsliGtUhmSqSQm94MZXVn+nRaY443cTivMO7Fr0sC2RAd9Ggv4fW+Vx6v7ZrjohGiLP/9u68UkwE+I65fF3zwkaGfEaBlQg0YvaaWb/MyoXlWhN2+U1KjOjwDFZqtp