Re: [SOGo] SOGo/OpenChange and external domain(s)
On 2015-09-28 02:12, Harold Fines wrote:
Greetings
I have followed the Openchange cookbook and "SOGo - Installation and
Configuration Guide.pdf" as well as "SOGo Native Microsoft Outlook
Configuration.pdf" to produce a working implementation of Debian, Samba,
Dovecot, Postfix and SOGo. Kudos to all the developers involved in making
these amazing softwares!
My organization is a small non-profit. We are now using Samba as an internal
AD ("org".pri") for our workstations and all is well. The thing is, some of
our users have been using two different external domains ("org.com" and
"otherorg.fi") for our e-mail which is where I am hitting a snag:
Created users (through samba-tool and openchange_newusers) end up with
usern...@org.pri as their mail address when logging into SOGo which will of
course not work when communicating with external mail addresses.
I tried following "Multi-domains Configuration" from "SOGo - Installation and
Configuration Guide.pdf" and using different user groups as "baseDN" to
separate the users but I still end up with with "org.pri" as their mail
address.
Is it even possible to use different external domains in this setup and if
so: how? I have yet to succeed in assigning/using a single external domain so
any help with be highly appreciated :)
Maybe this will help you forward:
http://drdata.blogg.se/2013/july/get-sogo-iredmail-and-samba-4-ad-ds-in-perfect-harmony.html
http://www.iredmail.org/docs/active.directory.html
http://www.iredmail.org/forum/topic3165-iredmail-support-integration-with-windows-domain.html
Regards
Davor Vusir
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] SOGo with Openchange on a Samba3 domain
2014-06-16 19:36 GMT+02:00 Donny Brooks : > We have yet to have migrated to Samba4 or AD proper so we are still using > our OpenLDAP and Samba3 domain. However I am wanting to test the Outlook > connectivity for possible rollout. Has anyone successfully deployed > SOGo+Openchange+Samba4 while still leaving Samba3 in place? Our setup > currentlystands as: PDC, mail, webmail/SOGo etc are all separate machines > with mail being a secondary domain controller with backup LDAP. Any pointers > are very welcome. > > -- > Donny B. Does Samba3 support trusts (Windowstrust)? If so, you maybe should explore a migration path with trusts in mind. Samba4 does support trust to a certain extent (see https://wiki.samba.org/index.php/FAQ#Does_Samba_support_trust_relationship_with_AD.3F and https://wiki.samba.org/index.php/Samba/Status#Feature_Status). Microsoft, on the topic; http://technet.microsoft.com/en-us/library/cc731404.aspx. Does Samba3 support SID-history? The idea is, with a trust in place you could recreate all user account in Samba AD DC, tie the old and the new account together with SID-history and let the users log on to Samba AD DC-realm while the computer accounts still are member of the old domain during migration. Regards Davor -- users@sogo.nu https://inverse.ca/sogo/lists
Re: Re: [SOGo] preferences - save and close (error)
2014-06-15 23:39 GMT+02:00 :
> Hi,
>
> thanks for the tip with the sieve, yes I test it now, that is the reason, but
> how can I solve that? :-)
> the Mistakes occurs when I change this:
>
> SOGoSieveScriptsEnabled = YES;
> SOGoSieveServer = "sieve://127.0.0.1:2000";
>
> --to this:
>
> SOGoSieveScriptsEnabled = YES;
> SOGoSieveServer = "sieve://sogosrv:2000";
>
If you allready don't have, you might want to try the following in /etc/hosts:
127.0.0.1 sogosrv.yourdomain.tld sogosrv localhost localhost.localdomain
Regards
Davor
> (the reason is for the use of the host-name, I have installed for the external
> access a second SOGo server. these works, except sieve :-(
>
> at first I thought this is only a small entry in dovecot.conf
> so I've changed this:
>
> in -- dovecot.conf --
> passdb {
> driver = static
> args = nopassword=y allow_nets=127.0.0.1/32
> }
> -- to --
>
> passdb {
> driver = static
> args = nopassword=y allow_nets=127.0.0.1/32,192.168.1.0/24
> }
> --
> unfortunately that has not helped.
> of same error as described (same entries in sogo.log)
>
> has someone already made this? and knows what to do yet?
>
> (ping to hostname sogosrv is ok, Firewall is off, dovecot ist restarted)
>
> thanks for any help
>
> --- dovecot.conf -
> disable_plaintext_auth = yes
> log_path = /var/log/dovecot.message
> log_timestamp = "%Y-%m-%d %H:%M:%S "
> #auth_debug=yes
> #mail_debug=yes
> mail_location = maildir:/var/mail/%u
> first_valid_uid = 33
> mail_privileged_group = mail
> ssl = required
> ssl_cert = ssl_key = ssl_ca = passdb {
> driver = passwd-file
> args = /etc/dovecot/master-users
> master = yes
> pass = yes
> }
> passdb {
> args = /etc/dovecot/dovecot-ldap.conf
> driver = ldap
> }
> passdb {
> driver = static
> args = nopassword=y allow_nets=127.0.0.1/32
> }
> passdb {
> driver = pam
> }
> protocols = imap pop3 sieve
> service auth {
> unix_listener auth-master {
> group = vmail
> mode = 0600
> user = vmail
> }
> unix_listener auth-userdb {
> user = vmail
> }
> user = root
> }
> userdb {
> args = /etc/dovecot/dovecot-ldap.conf
> driver = ldap
> }
> userdb {
> driver = passwd
> }
> protocol lda {
> hostname = xx...xx
> log_path =
> mail_plugins = sieve quota
> postmaster_address = postmas...@..xx
> }
> protocol imap {
> mail_plugins = quota imap_quota imap_acl acl
> }
> protocol pop3 {
> pop3_uidl_format = %08Xu%08Xv
> }
> managesieve_notify_capability = mailto
> managesieve_sieve_capability = fileinto reject envelope encoded-character
> vacation subaddress comparator-i;ascii-numeric relational regex imap4flags
> copy include variables body enotify environment mailbox date ihave
> service managesieve-login {
> inet_listener sieve {
> port = 4190
> }
> inet_listener sieve_deprecated {
> port = 2000
> }
> service_count = 1
> }
> plugin {
> sieve = /var/mail/sieve/%n.sieve
> sieve_dir = /var/mail/sieve/%n/
> quota = maildir
> quota_rule2 = Trash:storage=+100M
> quota_warning = storage=95%% quota-warning 95 %u
> quota_warning2 = storage=80%% quota-warning 80 %u
> quota_warning3 = -storage=80%% quota-warning below %u
> acl_shared_dict = file:/var/mail/shared-mailboxes.db
> acl = vfile
> }
> service quota-warning {
> executable = script /usr/local/bin/quota-warning.sh
> user = vmail
> unix_listener quota-warning {
> user = vmail
> }
> }
> namespace {
> type = private
> separator = /
> prefix =
> inbox = yes
> }
> namespace {
> type = shared
> separator = /
> prefix = shared/%%u/
> location = maildir:/var/mail/%%u:INDEX=/var/mail/%u/shared/%%u
> list = children
> }
> -
> --
> users@sogo.nu
> https://inverse.ca/sogo/lists
--
users@sogo.nu
https://inverse.ca/sogo/lists
Re: [SOGo] samba4 netbios name with hyphen problems
Hi! Hyphens are not a problem. The name must not be longer then 15 charachters. See http://en.m.wikipedia.org/wiki/NetBIOS. Regards Davor Den 1 jun 2014 03:25 skrev : > Hello, > > I was lookig for a good opensource groupware suite and found SOGo. Because > my skills are limited, I was glad to find the SOGo ZEG script found here > http://www.onlinedemo.hu/32-besorolatlan/71-zeg-install-script > > But I try and try, but always failed. I did not know why, till today. The > domain I want to use is mijn-voipcentrale.nl and for some kind of reason > samba4 have problems with the netbios name "mijn-voipcentrale". > > See my logs from step 4 of the scripts. > > 4 - Openchange install and setup > Continue ... > Executing: gpg --ignore-time-conflict --no-options --no-default-keyring > --secret-keyring /tmp/tmp.I7hKjkvaSx --trustdb-name /etc/apt/trustdb.gpg > --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg > --keyserver keys.gnupg.net --recv-key 0x810273C4 > gpg: requesting key 810273C4 from hkp server keys.gnupg.net > gpg: key 810273C4: "Inverse Support (package signing) " > not changed > gpg: Total number processed: 1 > gpg: unchanged: 1 > deb http://inverse.ca/ubuntu precise precise > Hit http://us.archive.ubuntu.com precise Release.gpg > Hit http://us.archive.ubuntu.com precise-updates Release.gpg > Hit http://us.archive.ubuntu.com precise-backports Release.gpg > Hit http://us.archive.ubuntu.com precise Release > Hit http://us.archive.ubuntu.com precise-updates Release > Hit http://us.archive.ubuntu.com precise-backports Release > Hit http://us.archive.ubuntu.com precise/main Sources > Hit http://us.archive.ubuntu.com precise/restricted Sources > Hit http://us.archive.ubuntu.com precise/universe Sources > Hit http://us.archive.ubuntu.com precise/multiverse Sources > Hit http://us.archive.ubuntu.com precise/main i386 Packages > Hit http://us.archive.ubuntu.com precise/restricted i386 Packages > Hit http://us.archive.ubuntu.com precise/universe i386 Packages > Hit http://us.archive.ubuntu.com precise/multiverse i386 Packages > Hit http://us.archive.ubuntu.com precise/main TranslationIndex > Hit http://us.archive.ubuntu.com precise/multiverse TranslationIndex > Hit http://us.archive.ubuntu.com precise/restricted TranslationIndex > Hit http://us.archive.ubuntu.com precise/universe TranslationIndex > Hit http://us.archive.ubuntu.com precise-updates/main Sources > Hit http://us.archive.ubuntu.com precise-updates/restricted Sources > Hit http://us.archive.ubuntu.com precise-updates/universe Sources > Hit http://us.archive.ubuntu.com precise-updates/multiverse Sources > Hit http://us.archive.ubuntu.com precise-updates/main i386 Packages > Hit http://us.archive.ubuntu.com precise-updates/restricted i386 Packages > Hit http://us.archive.ubuntu.com precise-updates/universe i386 Packages > Hit http://us.archive.ubuntu.com precise-updates/multiverse i386 Packages > Hit http://us.archive.ubuntu.com precise-updates/main TranslationIndex > Hit http://us.archive.ubuntu.com precise-updates/multiverse > TranslationIndex > Hit http://us.archive.ubuntu.com precise-updates/restricted > TranslationIndex > Hit http://us.archive.ubuntu.com precise-updates/universe TranslationIndex > Hit http://us.archive.ubuntu.com precise-backports/main Sources > Hit http://us.archive.ubuntu.com precise-backports/restricted Sources > Hit http://us.archive.ubuntu.com precise-backports/universe Sources > Hit http://us.archive.ubuntu.com precise-backports/multiverse Sources > Hit http://us.archive.ubuntu.com precise-backports/main i386 Packages > Hit http://us.archive.ubuntu.com precise-backports/restricted i386 > Packages > Hit http://us.archive.ubuntu.com precise-backports/universe i386 Packages > Hit http://us.archive.ubuntu.com precise-backports/multiverse i386 > Packages > Hit http://us.archive.ubuntu.com precise-backports/main TranslationIndex > Hit http://us.archive.ubuntu.com precise-backports/multiverse > TranslationIndex > Hit http://us.archive.ubuntu.com precise-backports/restricted > TranslationIndex > Hit http://us.archive.ubuntu.com precise-backports/universe > TranslationIndex > Hit http://us.archive.ubuntu.com precise/main Translation-en > Hit http://us.archive.ubuntu.com precise/multiverse Translation-en > Hit http://us.archive.ubuntu.com precise/restricted Translation-en > Hit http://us.archive.ubuntu.com precise/universe Translation-en > Hit http://us.archive.ubuntu.com precise-updates/main Translation-en > Hit http://us.archive.ubuntu.com precise-updates/multiverse Translation-en > Hit http://us.archive.ubuntu.com precise-updates/restricted Translation-en > Hit http://us.archive.ubuntu.com precise-updates/universe Translation-en > Hit http://us.archive.ubuntu.com precise-backports/main Translation-en > Hit http://us.archive.ubuntu.com precise-backports/multiverse > Translation-en > Hit http://us.archive.ubuntu.com precise-backports/restricted > Translation-en > Hit http://us.archive.ubuntu.com prec
Re: [SOGo] Feature request: central signature distribution
** Skickat från mobilusken! ** Den 8 feb 2014 15:37 skrev "T.B." : > > Hi, > > I'd like to discuss a feature request regarding a central mail-signature distribution for SOGo web interface, Thunderbird (with SOGo Integrator) and Outlook. > Some people may ask, why would you do that? > Short answer: The uniform appearance is a matter of "Corporate Identity", which is very important for many companies. And it simplifies admins job, too. > Some companies even use mail signatures for advertisement or announcements (e.g. new products, exhibitions, ...). > In many countries companies are forced by law that their e-mails and their business letters contain legal information about the company like CEO, members of the board, address, tax-ID, Commercial Register Number, legal entity number and so on. > Therefore a central management is necessary. > And for Inverse, it's an sales argument. > > > To explain how this could work, let me introduce the discontinued freeware "Outlook Signature": > Outlook Signature is an Windows executable which is executed by the user-logon-script. > It takes templates, fills in custom user data (name, phone nr., mail address, job title, ...) and places the signature files in the appropriate location where Outlook expects them. Even if the user is allowed to change the signatures, they will get overwritten by the logon script at next boot. > > > Feature list: > Generate any number of signatures based on custom templates (HTM, RTF and TXT), > Use of data from any database source, > Using data from the Active Directory in a Windows Server environment (+ LDAP), > Automatic distribution of all signature files, > Automatic setting of Outlook signature options, > Set different signatures for new messages and for replies, > Support for Outlook 2000, XP, 2003, 2007, > Automatic detection of the version of Outlook, > Central configuration via INI file (s), > Debug mode > > Old Website: > > German (from Internet Archive): > https://web.archive.org/web/20130224064509/http://zerbit.de/projekte/outlooksignature.aspx > > Google Translate English (from Internet Archive): > http://translate.google.de/translate?hl=de&sl=de&tl=en&u=https%3A%2F%2Fweb.archive.org%2Fweb%2F20130224064509%2Fhttp%3A%2F%2Fzerbit.de%2Fprojekte%2Foutlooksignature.aspx > > The download is still available from the Internet Archive: > https://web.archive.org/web/20130224064509/http://zerbit.de/download/outlooksignature1902.zip > > --- > > For SOGo this could be designed as follows: > > An SOGo administrator creates signature templates (HTM, RTF and TXT) and saves them preferably to a database. > SOGo server provides a service where Thunderbird Integrator and an possible executable like "Outlook Signature" gets the updated signatures. This service should fill in the data from the databases into the templates - server side! Therefore the user source database should get extended. > Maybe there could be a additional possibility that an user can edit specific data fields for his signature in the Web Interface and Thunderbird Integrator - controlled by ACLs. > Or a mechanism where a user can make an direct request (not by e-mail) to the admin to change specific fields like job title or phone number. > > Currently we are using different signatures for people with and without mobile phone numbers. The sales people also use different signatures. > But not every user should be able to use every available signature. > > > > What do other people here and at Inverse think about this? > > Kind regards > > T.B. > -- > users@sogo.nu > https://inverse.ca/sogo/lists +1 -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Active Sync Support
Bravo! Den 21 jan 2014 18:02 skrev "Ludovic Marcotte" : > Hello, > > The current nightly builds of SOGo offer Active Sync support. > > To enable it, simply add the following line to your Apache configuration: > > ProxyPass /Microsoft-Server-ActiveSync > http://127.0.0.1:2/SOGo/Microsoft-Server-ActiveSync retry=0 > > You'll also have to make sure you run the latest SOPE packages, and you > install the "sogo-activesync" package. > > If you want email synchronization to work properly, your IMAP server must > have the UIDPLUS, SORT and QRESYNC extensions enabled. > > Most of the stuff should work pretty well, but we're now in the final > stages of development and testing, which include: > >1. event invitations > 2. recurring events >3. Outlook 2013 support >4. handle all contact/email/event/task properties > > Full support will be included in SOGo v2.2 - expected to be released by > the end of the month. > > Thanks, > > -- > Ludovic marcottelmarco...@inverse.ca :: +1.514.755.3630 :: > http://inverse.ca > Inverse inc. :: Leaders behind SOGo (http://sogo.nu) and PacketFence > (http://packetfence.org) > > -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Samba4 & anonymous bind
On 2013-12-30 18:30, Ben wrote: Can Samba4 + SOGo be configured for anonymous bind? Looking at the documentation in http://www.sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuration.pdf the proceedure is to set an admin password for samba4 and then configure SOGo's SOGoUserSouces to bind to this Administrator account for doing logins, etc. I'd rather not store the domain password in plaintext in a file (chmod 600 for root, but still). Can SOGo be configured to do an anonymous bind (as I currently do against my own ldap server, not using samba4 or openchange) when using Samba4? If not, can I have it bind as some less privileged user than Administarator? Thanks, Ben You needn't use an account with administrative rights to bind to Samba 4 AD DC (or Microsoft AD DS). It is a common misconception (or plain laziness) that an administrator account has to be used for this kind of operations. It is perfectly good with an account that is a member of the Domain Users group (ordinary domain user account). However, I don't know whether the password changing ability is affected. If so, make the bind user account member of the Account Operators group. That way you give the account sufficient rights to manipulate S4 ADDC-accounts but the Administrator account. And maintain some level of security. Regards Davor -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo + Internet Explorer 11
-- Skickat från mobilusken! -- Den 6 dec 2013 14:10 skrev "Jean Raby" : > > On 13-12-05 10:38 AM, Szládovics Péter wrote: >> >> 2013-12-05 16:24 keltezéssel, Francis Lachapelle írta: >>> >>> Note that full support for IE11 won’t be available until next release even >>> though it has been improved in 2.1.1b. >> >> >> Could you please tell us about the status of activesync support? >> > It should be production ready by friday. > > (but I'm not telling you which ;) :) > -- > users@sogo.nu > https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] iRedMail Mysql with sogo
Hi Jonathan! Yeah, iRedMail is the Linux equivalent to a Next-Next-Finish-installation on Windows. But it is a really fine product! Just as SOGo is. I'm using this combination and I think it works fine. Setup with MySQL: http://www.wynni.com/howto-iredmail-sogo-mysql-authentication-ubuntu-11-10-oneiric-ocelot/ LDAP: http://www.tribalchicken.com.au/?p=56 MS AD/Samba 4 AD: http://www.iredmail.org/wiki/index.php?title=Integration/Active.Directory.iRedMail MS AD/Samba 4 AD with multi domain support:http://www.iredmail.org/forum/topic3165-iredmail-support-integration-with-windows-domain.html or http://drdata.blogg.se/2013/july/get-sogo-iredmail-and-samba-4-ad-ds-in-perfect-harmony.html Earlier SOGo Team announced that they will support ActiveSync. That is great news, I think. Later on they announced that thay will also use Samba 4.1 with the next release. Also great news. The two put together and a few weeks wait: http://www.zentyal.org/2013/10/zentyal-launches-the-only-native-microsoft-exchange-replacement/. I'm pretty much waiting for the release. I think it will really be a "killer". Personally I hope SOGo Team will wait for the 4.1.1 release of Samba 4 because it will contain some bug fixes for SMB3 support (Windows 8/2012 uses SMB3 primarily). And I hope SOGo Team have had a smooth time programming the 2.1 version and that the release isn't that far away. I think they'll really nail it this time. Good product gets better! Regards Davor From: Jonathan Collins Selnt: Thursday, November 07, 2013 4:10 PM To: users@sogo.nu Subject: [SOGo] iRedMail Mysql with sogo I have done a search on the mail list and i am finding nothing on intergreation with iredmail. I have tried several tutorials i have found but most of them are kind of old. I like iredmail because the ease of setup and adding accounts. I could use some help on what the best setup is for Ubuntu and a mail client. If anyone has some direction or can point me to a good article on setting up both mail and sogo i would appreciate it. I am not against using something besides iredmail. Iredmail also has other options such as ldap instead of using mysql. Thanks <>
Re: [SOGo] Samba 4.1
Bravo! -- Skickat från mobilusken! -- > 14 okt 2013 kl. 04:26 skrev "Szládovics Péter" : > > Hi Guys, > > The Samba 4.1 has been released (Oct. 11.). > It will be supported in the next release of SOGo? > At the moment the Samba 4 release used from the SOGo repository. > > Thanks your answer, > > -- > Szládovics, Péter > > Onlinedemo.HU > Any sufficiently advanced technology is indistinguishable from magic. > Arthur C. Clarke -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] Active Sync support in SOGo
Bravo! -- Skickat från mobilusken! -- > 18 sep 2013 kl. 23:23 skrev "Ludovic Marcotte" : > > Hello, > > We've been pretty silent when it came to Active Sync support in SOGo for > multiple reasons. > > First of all, there are licensing implications with Microsoft Active Sync. > Moreover, there's a plethora of Active Sync implementations out there. We > also wanted to see how vendors would adopt CalDAV/CardDAV, how down the drain > Funambol would go and the market's impact of the new Windows/Blackberry > phones. > > After digesting all the above for a few weeks, we came to the conclusion we > should most likely add Active Sync support to SOGo. > > Over the past few days, I've been (and still are) in contact with an IP > Licensing person at Microsoft. We had interesting discussions which led us to > believe we could: > create an Active Sync bundle in SOGo for synchronization > license it under a free but non-GPL (BSD, for example) > distribute it for free > We can't use the GPL because of patents restrictions. Z-Push/OPush/Synchotron > are all using patented technologies without a license and Microsoft > currently does not license to GPL implementations - so using these is not an > option. > > Since the addition of Active Sync support in SOGo would be a server-side > implementation, there would be a per-mailbox fee to use it. That fee, would > have to be paid to Microsoft directly. On our end, everything would be free > of use. > > Evidently, if we start working on Active Sync support in SOGo, we'll > definitively drop Funambol support - which is probably even more exciting > then adding Active Sync support. > > Thanks! > -- > Ludovic Marcotte > lmarco...@inverse.ca :: +1.514.755.3630 :: http://inverse.ca > Inverse inc. :: Leaders behind SOGo (http://sogo.nu) and PacketFence > (http://packetfence.org) -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] dpkg error while processing sogo-package (2.0.6b)
This one was sent somewhat too early... Continued below. -- From: "Davor Vusir" Sent: Wednesday, July 03, 2013 12:31 PM To: Subject: Re: [SOGo] dpkg error while processing sogo-package (2.0.6b) -- From: "Jean Raby" Sent: Tuesday, July 02, 2013 11:50 PM To: Subject: Re: [SOGo] dpkg error while processing sogo-package (2.0.6b) On 13-07-02 11:06 AM, Davor Vusir wrote: New install. No go. No ideas. Regards Davor --- root@mail:~# apt-get install sogo sope4.9-gdl1-mysql Reading package lists... Done Building dependency tree Reading state information... Done sope4.9-gdl1-mysql is already the newest version. new install, yet sope4.9-gdl1-mysql is already installed? Suggested packages: nginx The following NEW packages will be installed: sogo 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/3,954 kB of archives. After this operation, 12.9 MB of additional disk space will be used. Do you want to continue [Y/n]? Y (Reading database ... 69845 files and directories currently installed.) Unpacking sogo (from .../sogo_2.0.6b-1_amd64.deb) ... install: invalid group `sogo' somehow the sogo group wasn't created. The code is pretty simple: if [ "$1" == "install" ] || [ "$1" == "upgrade" ]; then if ! id sogo 1> /dev/null 2>&1; then groupadd -f -r sogo useradd -d /var/lib/sogo -g sogo -c "SOGo daemon" -s /usr/sbin/nologin -r sogo fi ... The sogo user exists and the sogo group doesn't. create it and it should just work. On new installs, it should work since the sogo user won't exist. It turns out that compiling Samba4 and activating Winbind (using instructions from https://wiki.samba.org/index.php/Samba4/Winbind and http://iabsis.com/EN/article/35-2/Samba4-installation) before installing SOGo triggers the above error. and a user 'sogo' exists in the Samba4 AD. root@mail:/# getent passwd EXAMPLE\sogo:*:318:100::/home/EXAMPLE/sogo:/bin/bash Turning off Samba4 root@mail:/# /etc/init.d/samba4 stop * Stopping Samba 4 daemon samba [ OK ] and run the installation again root@mail:/# apt-get install sogo mysql-server sope4.9-gdl1-mysql Reading package lists... Done Building dependency tree Reading state information... Done mysql-server is already the newest version. sope4.9-gdl1-mysql is already the newest version. Suggested packages: nginx The following NEW packages will be installed: sogo 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 21 not fully installed or removed. . . . Setting up sogo (2.0.6b-1) ... * Starting SOGo sogo[ OK ] Processing triggers for libc-bin ... ldconfig deferred processing now taking place root@mail:/# fixes it. With a running Samba4 and no user 'sogo' in Samba4 AD does it too. Cool, huh! /Davor -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] dpkg error while processing sogo-package (2.0.6b)
-- From: "Jean Raby" Sent: Tuesday, July 02, 2013 11:50 PM To: Subject: Re: [SOGo] dpkg error while processing sogo-package (2.0.6b) On 13-07-02 11:06 AM, Davor Vusir wrote: New install. No go. No ideas. Regards Davor --- root@mail:~# apt-get install sogo sope4.9-gdl1-mysql Reading package lists... Done Building dependency tree Reading state information... Done sope4.9-gdl1-mysql is already the newest version. new install, yet sope4.9-gdl1-mysql is already installed? Suggested packages: nginx The following NEW packages will be installed: sogo 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/3,954 kB of archives. After this operation, 12.9 MB of additional disk space will be used. Do you want to continue [Y/n]? Y (Reading database ... 69845 files and directories currently installed.) Unpacking sogo (from .../sogo_2.0.6b-1_amd64.deb) ... install: invalid group `sogo' somehow the sogo group wasn't created. The code is pretty simple: if [ "$1" == "install" ] || [ "$1" == "upgrade" ]; then if ! id sogo 1> /dev/null 2>&1; then groupadd -f -r sogo useradd -d /var/lib/sogo -g sogo -c "SOGo daemon" -s /usr/sbin/nologin -r sogo fi ... The sogo user exists and the sogo group doesn't. create it and it should just work. On new installs, it should work since the sogo user won't exist. It turns out that compiling Samba4 and activating Winbind (using instructions from https://wiki.samba.org/index.php/Samba4/Winbind and http://iabsis.com/EN/article/35-2/Samba4-installation) before installing SOGo triggers the above error. -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] dpkg error while processing sogo-package (2.0.6b)
-- From: "Jean Raby" Sent: Tuesday, July 02, 2013 11:50 PM To: Subject: Re: [SOGo] dpkg error while processing sogo-package (2.0.6b) On 13-07-02 11:06 AM, Davor Vusir wrote: New install. No go. No ideas. Regards Davor --- root@mail:~# apt-get install sogo sope4.9-gdl1-mysql Reading package lists... Done Building dependency tree Reading state information... Done sope4.9-gdl1-mysql is already the newest version. new install, yet sope4.9-gdl1-mysql is already installed? Suggested packages: nginx The following NEW packages will be installed: sogo 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/3,954 kB of archives. After this operation, 12.9 MB of additional disk space will be used. Do you want to continue [Y/n]? Y (Reading database ... 69845 files and directories currently installed.) Unpacking sogo (from .../sogo_2.0.6b-1_amd64.deb) ... install: invalid group `sogo' somehow the sogo group wasn't created. The code is pretty simple: if [ "$1" == "install" ] || [ "$1" == "upgrade" ]; then if ! id sogo 1> /dev/null 2>&1; then groupadd -f -r sogo useradd -d /var/lib/sogo -g sogo -c "SOGo daemon" -s /usr/sbin/nologin -r sogo fi ... The sogo user exists and the sogo group doesn't. create it and it should just work. On new installs, it should work since the sogo user won't exist. Thank you. Worked fine! -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
[SOGo] dpkg error while processing sogo-package (2.0.6b)
New install. No go. No ideas. Regards Davor --- root@mail:~# apt-get install sogo sope4.9-gdl1-mysql Reading package lists... Done Building dependency tree Reading state information... Done sope4.9-gdl1-mysql is already the newest version. Suggested packages: nginx The following NEW packages will be installed: sogo 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/3,954 kB of archives. After this operation, 12.9 MB of additional disk space will be used. Do you want to continue [Y/n]? Y (Reading database ... 69845 files and directories currently installed.) Unpacking sogo (from .../sogo_2.0.6b-1_amd64.deb) ... install: invalid group `sogo' dpkg: error processing /var/cache/apt/archives/sogo_2.0.6b-1_amd64.deb (--unpack): subprocess new pre-installation script returned error exit status 1 Errors were encountered while processing: /var/cache/apt/archives/sogo_2.0.6b-1_amd64.deb E: Sub-process /usr/bin/dpkg returned an error code (1) root@mail:~# -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] LDAP weirdness!
It seems that Samba Team made a design decision with the release of Samba 4.0 RC5 that created this issue. With Samba v4.0.3 Samba Team reverted the settings. If you add ‘acl:search=false’ to the global section of smb.conf it works to authenticate “on behalf of”. Regards Davor Vusir vi /etc/samba/smb.conf: #acl:read = false acl:search=false root@mail:~# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . login da...@example.com Pa$$w0rd . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA] Logged in . examine inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1364971765] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest . OK [READ-ONLY] Select completed. samba -d5 -i -M single: filter=(&(userPrincipalName=da...@example.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) auth_check_password_send: Checking password for unmapped user [EXAMPLE]\[davor]@[(null)] auth_check_password_send: mapped user is: [EXAMPLE]\[davor]@[(null)] [] 4C 9B BA 1D B7 17 19 27L..' authsam_account_ok: Checking SMB password for user davor logon_hours_ok: No hours restrictions for user davor auth_check_password_recv: sam_ignoredomain authentication for user [EXAMPLE\davor] succeeded /var/log/dovecot.log: Apr 03 08:49:13 imap-login: Info: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2410, secured Apr 03 08:50:36 imap(da...@example.com): Info: Connection closed bytes=17/559 From: Davor Vusir Sent: Wednesday, March 27, 2013 6:33 AM To: users@sogo.nu Subject: [SOGo] LDAP weirdness! Hi all! Thank you, SOGo Team, for a great product and the convinient installation and configuration of several complex techniques that SOGo contains. Great work! It's a bliss. I have also found iRedmail (www.iredmail.org). Great stuff too. And recepie to combine the two: https://www.tribalchicken.com.au/?p=56. But how about combining Samba4 AD DS, iRedmail with Openchange/SOGo on top? An all-in-one package with mailwash and IMAP authentication, amongst other good things. Unfortunately, I can't get this combination to work; packaged Samba (v4.0.1), provided by Inverse, and iRedmail. All install fine and the Postfix authentication and and LDAP lookup works fine but IMAP/Dovecot authentication against Samba fails with a "Authentication failed." response. Same goes for Samba v 4.0.1 downloaded from Samba Team. With version 4.0.4 it works fine though. In short, I start with installing iRedmail, continue with Samba and modify the iRedmail configuration to work with an Active Directory (http://www.iredmail.org/wiki/index.php?title=Integration/Active.Directory.iRedMail). Has anybody experienced this? Solutions? Am I missing something or is it rather a bug in Samba v4.0.1 than LDAP weirdness? Thank you Davor Vusir -- Inverse, Samba: Postfix: root@mail:~# samba-tool user add vmailer Pa$$w0rd --description="Postfix/Dovecot LDAP Account" User 'vmailer' created successfully root@mail:~# samba-tool user add davor Pa$$w0rd --surname=Vusir --given-name=Davor User 'davor' created successfully root@mail:~# samba-tool group add test --mail-address=t...@example.com Added group test root@mail:~# samba-tool group addmembers test davor Added members to group test root@mail:~# postmap -q da...@example.com ldap:/etc/postfix/ad_sender_login_maps.cf da...@example.com root@mail:~# postmap -q da...@example.com ldap:/etc/postfix/ad_virtual_mailbox_maps.cf example.com/davor/Maildir/ root@mail:~# postmap -q t...@example.com ldap:/etc/postfix/ad_virtual_group_maps.cf da...@example.com root@mail:~# Dovecot: root@mail:~# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . login da...@example.com Pa$$w0rd . NO [AUTHENTICATIONFAILED] Authentication failed. ^[^] telnet> q /var/log/dovecot.log: Mar 26 10:38:43 anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Mar 26 10:38:43 log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Mar 26 10:43:40 master: Info: Dovecot v2.0.19 starting up (core dumps disabled) Mar 26 10:56:52 imap-login: Info: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured -- Samba Team, Samba v 4.0.1: Postfix: root@mail:~# postmap -q da...@
[SOGo] LDAP weirdness!
Hi all! Thank you, SOGo Team, for a great product and the convinient installation and configuration of several complex techniques that SOGo contains. Great work! It's a bliss. I have also found iRedmail (www.iredmail.org). Great stuff too. And recepie to combine the two: https://www.tribalchicken.com.au/?p=56. But how about combining Samba4 AD DS, iRedmail with Openchange/SOGo on top? An all-in-one package with mailwash and IMAP authentication, amongst other good things. Unfortunately, I can't get this combination to work; packaged Samba (v4.0.1), provided by Inverse, and iRedmail. All install fine and the Postfix authentication and and LDAP lookup works fine but IMAP/Dovecot authentication against Samba fails with a "Authentication failed." response. Same goes for Samba v 4.0.1 downloaded from Samba Team. With version 4.0.4 it works fine though. In short, I start with installing iRedmail, continue with Samba and modify the iRedmail configuration to work with an Active Directory (http://www.iredmail.org/wiki/index.php?title=Integration/Active.Directory.iRedMail). Has anybody experienced this? Solutions? Am I missing something or is it rather a bug in Samba v4.0.1 than LDAP weirdness? Thank you Davor Vusir -- Inverse, Samba: Postfix: root@mail:~# samba-tool user add vmailer Pa$$w0rd --description="Postfix/Dovecot LDAP Account" User 'vmailer' created successfully root@mail:~# samba-tool user add davor Pa$$w0rd --surname=Vusir --given-name=Davor User 'davor' created successfully root@mail:~# samba-tool group add test --mail-address=t...@example.com Added group test root@mail:~# samba-tool group addmembers test davor Added members to group test root@mail:~# postmap -q da...@example.com ldap:/etc/postfix/ad_sender_login_maps.cf da...@example.com root@mail:~# postmap -q da...@example.com ldap:/etc/postfix/ad_virtual_mailbox_maps.cf example.com/davor/Maildir/ root@mail:~# postmap -q t...@example.com ldap:/etc/postfix/ad_virtual_group_maps.cf da...@example.com root@mail:~# Dovecot: root@mail:~# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . login da...@example.com Pa$$w0rd . NO [AUTHENTICATIONFAILED] Authentication failed. ^[^] telnet> q /var/log/dovecot.log: Mar 26 10:38:43 anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Mar 26 10:38:43 log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Mar 26 10:43:40 master: Info: Dovecot v2.0.19 starting up (core dumps disabled) Mar 26 10:56:52 imap-login: Info: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured -- Samba Team, Samba v 4.0.1: Postfix: root@mail:~# postmap -q da...@example.com ldap:/etc/postfix/ad_sender_login_maps.cf da...@example.com root@mail:~# postmap -q da...@example.com ldap:/etc/postfix/ad_virtual_mailbox_maps.cf example.com/davor/Maildir/ root@mail:~# postmap -q t...@example.com ldap:/etc/postfix/ad_virtual_group_maps.cf da...@example.com root@mail:~# Samba (root@mail:/usr/local/samba/sbin/samba -d5 -i -M single): postmap -q da...@example.com ldap:/etc/postfix/ad_sender_login_maps.cf: ldb_request SUB dn=cn=users,dc=example,dc=com filter=(&(userPrincipalName=da...@example.com)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) Terminating connection - 'ldapsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' imessaging: cleaning up /usr/local/samba/private/smbd.tmp/msg/msg.0.78 single_terminate: reason[ldapsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED] postmap -q da...@example.com ldap:/etc/postfix/ad_virtual_mailbox_maps.cf: ldb_request SUB dn=cn=users,dc=example,dc=com filter=(&(objectclass=person)(userPrincipalName=da...@example.com)) Terminating connection - 'ldapsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' imessaging: cleaning up /usr/local/samba/private/smbd.tmp/msg/msg.0.78 single_terminate: reason[ldapsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED] postmap -q t...@example.com ldap:/etc/postfix/ad_virtual_group_maps.cf: ldb_request SUB dn=cn=users,dc=example,dc=com filter=(&(objectClass=group)(mail=t...@example.com)) ldb_request BASE dn=CN=Davor Vusir,CN=Users,DC=example,DC=com filter=(objectclass=*) Terminating connection - 'ldapsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED auth_check_password_send: Checking password for unmapped user [EXAMPLE]\[vmailer]@[(null)] auth_check_password_send: mapped user is: [EXAMPLE]\[vmailer]@[(null)] [] 69 CD CE 3F 71 65 C9 CCi..?qe.. authsam_account_ok: Checking SMB password for user vmailer logon_hours_ok:
Re: [SOGo] Re: New Samba4/OpenChange/Sogo tutorial
Number 2 is of course: edit /etc/fstab. Add acl, user_xattr to root mountpoint. From: Davor Vusir Sent: Monday, March 04, 2013 7:32 PM To: users@sogo.nu Subject: Re: [SOGo] Re: New Samba4/OpenChange/Sogo tutorial Olivier, thank you for your hard work putting this tutorial together! And iGestis looks really promising. Keep up the good work! I will for certain keep an eye open for your product. Regarding Tims error; I ran in to the same errors. And I think it is a product of installing both Samba3 and Samba4. As Ubuntu has chosen to start Samba3 with "Upstart" and so has Inverse, both packages seem to collide and Samba3 gets precedence. I think the errors originates from Samba3 not recognising certain Samba4 parameters. During my installation I skipped installing Samba3-packages and went for Samba4. No errors. The "vfs acl_attr.so" error during domain provision is not present after following your instructions regarding "Impossible to access in Samba4 shares". Thank you! And the correction of /etc/init.d/sogo works like a charm. Thank you. In your tutorial, I think you can skip the part about Samba3 and replace it with: apt-get install samba4 winbind4 krb5-user. And stress the fact to reprovision the Samba4 AD. My steps: 1. Install acl and attr: apt-get install acl attr 2. Edit /etc/fstab: add acl,user_xattr to root mountpoint. Reboot. 3. Install samba4 according to your "known issues". 4. Stop Samba4. 5. Delete /etc/samba/smb.conf, rm -R /var/lib/samba/private/*, rm -R /var/lib/samba/sysvol/* 6. Provision a new AD: samba-tool domain provision --domain=EXAMPLE --adminpass=Pa$$w0rd --dns-backend=SAMBA_INTERNAL --server-role=dc --function-level=2008_R2 --use-xattr=yes --use-rfc2307 --realm=EXAMPLE.COM 7. Stop Samba4 and install Samba4 from Inverse: apt-get install samba4 winbind4 krb5-user 8. Start Samba4. Regards Davor Vusir From: Olivier Bitsch Sent: Sunday, March 03, 2013 8:54 PM To: users@sogo.nu Subject: Re: [SOGo] Re: New Samba4/OpenChange/Sogo tutorial Ok I see, it's not very clean, but try the process "Impossible to access in Samba4 shares." at address http://iabsis.com/EN/article/35-9/Problemes-connus-et-rencontres This will overwrite some not installed files and give you the smbclient of samba4 version. Olivier. 2013/3/3 Tim Sutinen smbclient -UAdministrator '//localhost/netlogon' Unknown parameter encountered: "server role" Ignoring unknown parameter "server role" Unknown parameter encountered: "dns forwarder" Ignoring unknown parameter "dns forwarder" Enter Administrator's password: Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED) Tim Sutinen t...@sutinen.com www.sutinen.com Sutinen Consulting, Inc. 360-578-9144 x305 360-442-4879 direct 360-270-5670 cell On Sun, Mar 3, 2013 at 11:03 AM, Olivier Bitsch wrote: All seems right, try now opening an other terminal, then try the smbclient -UAdministrator '//localhost/netlogon' and give me the new output log files. Olivier. 2013/3/3 Tim Sutinen Thanks Olivier. Here is the output: root@sogo:~# samba -i -d 3 samba: /usr/lib/x86_64-linux-gnu/libwbclient.so.0: no version information available (required by /usr/lib/x86_64-linux-gnu/samba/libauth4.so) lpcfg_load: refreshing parameters from /etc/samba/smb.conf params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" samba version 4.0.1 started. Copyright Andrew Tridgell and the Samba Team 1992-2012 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'schannel' registered GENSEC backend 'spnego' registered GENSEC backend 'ntlmssp' registered GENSEC backend 'krb5' registered GENSEC backend 'fake_gssapi_krb5' registered NTPTR backend 'simple_ldb' NTVFS backend 'default' for type 1 registered NTVFS backend 'posix' for type 1 registered NTVFS backend 'unixuid' for type 1 registered NTVFS backend 'unixuid' for type 3 registered NTVFS backend 'unixuid' for type 2 registered NTVFS backend 'cifs' for type 1 registered NTVFS backend 'smb2' for type 1 registered NTVFS backend 'simple' for type 1 registered NTVFS backend 'cifsposix' for type 1 registered NTVFS backend 'default' for type 3 registered NTVFS backend 'default' for type 2 registered NTVFS backend 'nbench' for type 1 registered PROCESS_MODEL 'single' registered PROCESS_MODEL 'prefork'
Re: [SOGo] Re: New Samba4/OpenChange/Sogo tutorial
Olivier, thank you for your hard work putting this tutorial together! And iGestis looks really promising. Keep up the good work! I will for certain keep an eye open for your product. Regarding Tims error; I ran in to the same errors. And I think it is a product of installing both Samba3 and Samba4. As Ubuntu has chosen to start Samba3 with "Upstart" and so has Inverse, both packages seem to collide and Samba3 gets precedence. I think the errors originates from Samba3 not recognising certain Samba4 parameters. During my installation I skipped installing Samba3-packages and went for Samba4. No errors. The "vfs acl_attr.so" error during domain provision is not present after following your instructions regarding "Impossible to access in Samba4 shares". Thank you! And the correction of /etc/init.d/sogo works like a charm. Thank you. In your tutorial, I think you can skip the part about Samba3 and replace it with: apt-get install samba4 winbind4 krb5-user. And stress the fact to reprovision the Samba4 AD. My steps: 1. Install acl and attr: apt-get install acl attr 2. Edit /etc/fstab: add acl,user_xattr to root mountpoint. Reboot. 3. Install samba4 according to your "known issues". 4. Stop Samba4. 5. Delete /etc/samba/smb.conf, rm -R /var/lib/samba/private/*, rm -R /var/lib/samba/sysvol/* 6. Provision a new AD: samba-tool domain provision --domain=EXAMPLE --adminpass=Pa$$w0rd --dns-backend=SAMBA_INTERNAL --server-role=dc --function-level=2008_R2 --use-xattr=yes --use-rfc2307 --realm=EXAMPLE.COM 7. Stop Samba4 and install Samba4 from Inverse: apt-get install samba4 winbind4 krb5-user 8. Start Samba4. Regards Davor Vusir From: Olivier Bitsch Sent: Sunday, March 03, 2013 8:54 PM To: users@sogo.nu Subject: Re: [SOGo] Re: New Samba4/OpenChange/Sogo tutorial Ok I see, it's not very clean, but try the process "Impossible to access in Samba4 shares." at address http://iabsis.com/EN/article/35-9/Problemes-connus-et-rencontres This will overwrite some not installed files and give you the smbclient of samba4 version. Olivier. 2013/3/3 Tim Sutinen smbclient -UAdministrator '//localhost/netlogon' Unknown parameter encountered: "server role" Ignoring unknown parameter "server role" Unknown parameter encountered: "dns forwarder" Ignoring unknown parameter "dns forwarder" Enter Administrator's password: Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED) Tim Sutinen t...@sutinen.com www.sutinen.com Sutinen Consulting, Inc. 360-578-9144 x305 360-442-4879 direct 360-270-5670 cell On Sun, Mar 3, 2013 at 11:03 AM, Olivier Bitsch wrote: All seems right, try now opening an other terminal, then try the smbclient -UAdministrator '//localhost/netlogon' and give me the new output log files. Olivier. 2013/3/3 Tim Sutinen Thanks Olivier. Here is the output: root@sogo:~# samba -i -d 3 samba: /usr/lib/x86_64-linux-gnu/libwbclient.so.0: no version information available (required by /usr/lib/x86_64-linux-gnu/samba/libauth4.so) lpcfg_load: refreshing parameters from /etc/samba/smb.conf params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" samba version 4.0.1 started. Copyright Andrew Tridgell and the Samba Team 1992-2012 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'schannel' registered GENSEC backend 'spnego' registered GENSEC backend 'ntlmssp' registered GENSEC backend 'krb5' registered GENSEC backend 'fake_gssapi_krb5' registered NTPTR backend 'simple_ldb' NTVFS backend 'default' for type 1 registered NTVFS backend 'posix' for type 1 registered NTVFS backend 'unixuid' for type 1 registered NTVFS backend 'unixuid' for type 3 registered NTVFS backend 'unixuid' for type 2 registered NTVFS backend 'cifs' for type 1 registered NTVFS backend 'smb2' for type 1 registered NTVFS backend 'simple' for type 1 registered NTVFS backend 'cifsposix' for type 1 registered NTVFS backend 'default' for type 3 registered NTVFS backend 'default' for type 2 registered NTVFS backend 'nbench' for type 1 registered PROCESS_MODEL 'single' registered PROCESS_MODEL 'prefork' registered PROCESS_MODEL 'onefork' registered PROCESS_MODEL 'standard' registered AUTH backend 'sam' registered AUTH backend 'sam_ignoredomain'
Re: [SOGo] Backup Redundant System
Hi! DRBD might be an alternative, http://www.drbd.org/, for the SOGo server, database and mail store. And Postfix (check out the the install script from iRedMail, http://www.iredmail.org/) as a backup MTA. I am exploring the possibility to use virtualized SOGo server on KVM. The LV for the virtualized server and the LV for SOGo database and mailstore will replicate to a backup server. And the backup MTA, also virtualized, running on the backup server. Regards Davor Vusir From: Carlin Hefner Sent: Friday, October 26, 2012 7:50 PM To: users@sogo.nu Subject: Re: [SOGo] Backup Redundant System Thanks! I'll check those out, I appreciate the quick replies :) Carlin On Fri, Oct 26, 2012 at 1:13 PM, Federico Alberto Sayd wrote: On 26/10/12 13:52, carlinohef...@gmail.com wrote: Hi, I'm am looking at venturing into sogo as an exchange replacement, and have a question before I begin. I promise I have searched before posting, but can't find anything related (or I may have poor keyword choices :-) So I apologize if this has been discussed already. We have a couple of office locations, and I'd like to set up 2 servers, 1 at each location, that mirror each other. That way if one location goes down (power or internet loss or hardware failure) the other server can still at least receive SMTP. It would be great if the client side connectivity could also work when one or the other servers go down, but not as important as making sure we don't miss any incoming mail over SMTP. Is this possible? Thanks in advance, Carlin You can take a look at HAproxy Haproxy is a http and tcp proxy. We use haproxy to balance trafic between our SOGo backend servers. With SMTP also you can balance using MX records from DNS, but POP or IMAP is more complicated because you need distribute/replicate the mail storage. Regards Federico -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists
