Re: [SOGo] Login issues with LDAP

2016-05-17 Thread Jim Hague

On 16/05/2016 20:47, Matthias Boindl (matthias.boi...@gmx.at) wrote:

I am running a SOGO (2.2.9+git20141017-1) on Debian 8.0 and cannot login
via web interface. It tells me that username/password is wrong.


At a first glance, your setup looks like it should work. I have a 
similar setup. My SOGOUserSources looks like this:


SOGoUserSources = (
{
CNFieldName = cn;
IDFieldName = uid;
UIDFieldName = uid;
baseDN = "ou=People,dc=example,dc=com";
bindDN = "cn=access,dc=example,dc=com";
bindFields = (
uid
);
bindPassword = XXX;
canAuthenticate = YES;
displayName = "Example addresses";
hostname = localhost;
id = public;
isAddressBook = YES;
port = 389;
type = ldap;
}
)

I see the following in the slapd log:

May 17 13:54:43 sogohost slapd[1997]: conn=198522 fd=44 ACCEPT from 
IP=127.0.0.1:51315 (IP=127.0.0.1:389)
May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=0 BIND 
dn="cn=access,dc=example,dc=com" method=128
May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=0 BIND 
dn="cn=access,dc=example,dc=com" mech=SIMPLE ssf=0
May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=0 RESULT tag=97 
err=0 text=
May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=1 SRCH 
base="ou=people,dc=example,dc=com" scope=2 deref=0 filter="(uid=test)"

May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=1 SRCH attr=dn
May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=1 SEARCH RESULT 
tag=101 err=0 nentries=1 text=
May 17 13:54:43 sogohost slapd[1997]: conn=198523 fd=45 ACCEPT from 
IP=127.0.0.1:51316 (IP=127.0.0.1:389)
May 17 13:54:43 sogohost slapd[1997]: conn=198523 op=0 BIND 
dn="uid=test,ou=people,dc=example,dc=com" method=128
May 17 13:54:43 sogohost slapd[1997]: conn=198523 op=0 BIND 
dn="uid=test,ou=People,dc=example,dc=com" mech=SIMPLE ssf=0
May 17 13:54:43 sogohost slapd[1997]: conn=198523 op=0 RESULT tag=97 
err=0 text=

May 17 13:54:43 sogohost slapd[1997]: conn=198523 op=1 UNBIND
May 17 13:54:43 sogohost slapd[1997]: conn=198523 fd=45 closed
May 17 13:54:43 sogohost slapd[1997]: conn=198522 op=2 UNBIND
May 17 13:54:43 sogohost slapd[1997]: conn=198522 fd=44 closed

If you try your ldpasearch, do you see that binding via cn=Manager?

My experience of this setup is that you have to be 100% sure LDAP really 
is working the way you think before even looking at SOGo.


Good luck.
--
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't 
lift.

--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Compile failed...

2013-06-24 Thread Jim Riggs
On Jun 24, 2013, at 8:34 AM, Odhiambo Washington odhia...@gmail.com wrote:

 I am trying to install SOGo-2.0.6 on FreeBSD (64-bit) and it fails at this 
 stage:
 
 
  Linking tool sogod ...
 /usr/bin/ld: /usr/lib/crt1.o: relocation R_X86_64_32 against `_DYNAMIC' can 
 not be used when making a shared object; recompile with -fPIC
 /usr/lib/crt1.o: could not read symbols: Bad value


This was fixed some time ago. Are you using the latest code from 
https://redports.org/browser/jhriggs or the second version of the shar on the 
PR from April 12?

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

[SOGo] FreeBSD Ports Submitted

2013-02-07 Thread Jim Riggs
Over the past two years or so I have attempted to build FreeBSD ports for SOGo 
a couple of times, but never had the time to complete the work. I know a few 
others have also done some similar work on FreeBSD ports in the past, but 
nothing has made it into the ports tree. Hopefully that is all about to change.

I have completed and just submitted ports for both SOPE[1] and SOGo[2]. I have 
been using them for a week or so with no issues, so hopefully SOGo will be 
available to the FreeBSD community soon. If there are any other FreeBSD users 
out there, please check them out, give them a try, and let me know if you have 
any issues.

- Jim

[1] http://www.freebsd.org/cgi/query-pr.cgi?pr=175946
[2] http://www.freebsd.org/cgi/query-pr.cgi?pr=175947

-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Dovecot 2.2

2012-10-16 Thread Jim Hague
On Wednesday 03 Oct 2012 12:19:27 Jeroen Dekkers wrote:
 I'm using SOGo 1.3 together with dovecot 1.2.15 (from Debian
 squeeze). As far as I know nothing is missed by using Dovecot.

FWIW, Group ACLs don't work with Dovecot 1.2. You need Dovecot 2 for that.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Using users (login, password) of Plesk-database

2012-09-27 Thread Jim
On 26-9-2012 22:13, Holger Biber wrote:
 Hi Christian,
 
 Am 26.09.2012 14:24, schrieb Christian Mack:
 On 2012-09-24 18:45, Holger Biber wrote:
 Hi,

 I've several users (approx. 100) in a Plesk-database used for my old
 webmailer (Horde).
 These logins and the passwords are stored in different tables of the
 same database.

 How could I connect or synchronize the Sogo-MySql-Connector with these
 tables?
 Just create a VIEW matching the requirements of SOGo, which collects the
 data from the existing TABLEs.
 
 sorry for the question, but could you explain me the way to create the
 VIEW. What do you mean with VIEW ?
 How to use this for sogo? Is there any documentation for this?

A VIEW is a database object that embodies the result of an SQL query.

It looks much like a table but does a query behind the scenes to get the
data.

It's (fortunately) fairly basic SQL stuff.
Have a look at your database documentation for what is. Or google view
mysql. Hint: CREATE VIEW

In this case, you're using it to create a table that Sogo wants to see
with the columns it wants to see by getting its data from your existing
tables.

Have a look at the sogo documentation to see what columns Sogo expects
to see as well as the name of the view (which is the table name Sogo
expects).

-- 
Regards,

jb
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Calender events deleted after upgrade 1.3.17 to 1.3.18

2012-09-10 Thread Jim Hague
On Friday 07 Sep 2012 21:44:27 Francis Lachapelle wrote:
 FYI, SOGo 1.3.18 doesn't delete random events. Thank God. :)

Thank God indeed. I must admit than I do wonder if it was a user problem.

  And is there a way I can undelete the events?
 
 Update your tables (c_deleted = 0) and use sogo-tool to restore the entries
 in the quick tables :
 
 su - sogo
 mkdir foo
 sogo-tool backup foo jim.hague
 sogo-tool restore -F ALL foo jim.hague
 rm -fR foo
 exit

Brilliant. Thanks for your help, Francis.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Calender events deleted after upgrade 1.3.17 to 1.3.18

2012-09-05 Thread Jim Hague
Hi all,

I'm running SOGo with MySQL on a x86 Debian Stable server using the Inverse 
packages from the Inverse apt repository.

I recently upgraded 1.3.17-1 to the latest 1.3.18-1. Shortly after the 
upgrade, I started getting complaints from users that some current and future 
events had vanished from a shared calendar. This calendar is the main focus of 
use in our company; there might well have been similar on personal calendars, 
but they are lightly used and I have not had a report.

Poking around in the database, I find the events are present in the main table 
but marked as deleted (c_deleted is 1). They have been removed from the 
corresponding _quick table.

Has anyone else seen similar?

And is there a way I can undelete the events?

Thanks.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Shared mail folders? Dovecot

2012-05-14 Thread Jim Hague
On Saturday 05 May 2012 05:53:14 acjohn...@pcdomain.com wrote:
 The proxy server received an invalid response from an upstream server.
 The proxy server could not handle the request GET
 /SOGo/so/jacks/Mail/0/folderINBOX/acls.
 
 Reason: Error reading from remote server
 
 
 From reading the mailing lists it looks like I need to configure folder
 sharing in Dovecot, but is that all I need to do to get rid of this error,
 or is there something that I need to add to my Apache config?

I don't remember addding anything to my Apache config when setting up shared 
folders.

Note that to support ACLs in SOGo completely you need Dovecot v2. v1 does not 
support all the ACL options SOGo offers.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] HELP GOD! - apt-get install samba4 - dependency hell

2012-05-11 Thread Jim
On 10-5-2012 23:23, Netwo Dist wrote:
 Also, I have chosen sogo primarilly because of exchange capabilities. So
 I cant use openchange on ubuntu 12.04 lts? There is no way? When there
 would be one? That is important bit.
It's in beta. When it is out of beta depends on development and testing
progress, which AFAIU cannot be predicted accurately in advance.

In other words, if you depend on getting this functionality working on a
production environment, I'd suggest you look at alternatives.

You could also try to run a virtual machine with the ZEG edition. While
that is also beta (and therefore not meant for production use), all the
parts have been integrated, tuned and to some extent tested already.

Good luck.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] sogo not binding to LDAP

2012-03-13 Thread Jim Hague
On Wednesday 07 Mar 2012 13:55:24 Bunjes Friedemann wrote:
 sogo seems not to be able to bind to our LDAP server:
 [...]
 sogo.log:
 
 Mar 06 09:58:47 sogod [4778]: SOGoRootPage Login for user 'fbunjes' might
 not have worked - password policy: 65535  grace: -1  expire: -1  bound: 0
 localhost - - [06/Mar/2012:09:58:47 GMT] POST /SOGo/connect HTTP/1.1 403
 34/42 0.025 - - 2M
 
 Commandline ldapsearch using user sogo is working:
 
 ldapsearch -h localhost -b ou=HIH,dc=neurologie.uni-tuebingen.de,dc=local
 -D
 uid=sogo,ou=Users,ou=EDV,ou=HIH,dc=neurologie.uni-tuebingen.de,dc=local
 -W objectclass=person
 
 How can we further debug this? Any way to make the log more verbose?

I found the best way to debug these sorts of issues is to set the LDAP server 
to log the queries, so you can see exactly what the difference is between 
successful and unsuccessful transactions.

If, like me, you are using OpenLDAP, I find that running with 

olcLogLevel: stats

usually gives me sufficient clues.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Why not move from Funambol to Z-Push? Many features will be obtained.

2012-02-07 Thread Jim
On 7-2-2012 8:26, André Schild wrote:
 I could also spend time on that project.
 
 
 Another sources for active sync informations can be found here
 
 - http://wiki.horde.org/ActiveSync
   It's based on a 1.x version of z-push but then heavily
 refactored/reworked.
 
 - http://code.google.com/p/o-push/
   A java based active sync server

A nice option (depending on license, architecture etc) might be to build
something using Syncevolution.

They have SyncML support built in (and it is very stable; e.g. used in a
lot of mobile phones), and they're working on ActiveSync support as well..

See e.g.
http://syncevolution.org/blogs/pohly/2011/syncevolution-12-released

I agree that decoupling a sync framework from direct access to the
database is the way to go; using standards such as caldav will make it
easier to test, and adapt for other projects...
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Assistance with delegated e-mail and calendars not appearing

2011-11-09 Thread Jim Hague
On Wednesday 09 Nov 2011 10:05:19 Anthony Callegaro wrote:
 On 09/11/11 09:51, Sven Schwedas wrote:
  Yes, mail sharing is done by the mail server. If it doesn't support ACLs
  (as far as I know Dovecot doesn't – cyrus does, though),
 
 Seems like dovecot does support it :
 http://wiki.dovecot.org/SharedMailboxes/Shared I haven't try to
 configure it though.

Dovecot does support ACLs and can be used successfully with SOGo to share 
mailboxes.

Two caveats:

1. You'll need Dovecot 2.0 to handle group ACLs properly. They are broken in 
1.2.

2. Mail storage (e.g. Maildir) permissions will have to be set to allow 
Dovecot to access the shared folders.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo and Funambol

2011-07-12 Thread Jim
Don't have sogo installed right now, but I also use Apache to proxy the
SSL connection as I lost my remaining hair dealing with SSL in Tomcat.
If you're running Debian or Ubuntu, you can look into this how to for
setting up Funambol, including PostgreSQL and SSL setup:
http://ubuntuforums.org/showthread.php?t=1488582

Deals with Funambol 9, but concepts are quite similar for older,
probably newer versions.

Regards,

jb

On 11-7-2011 20:37, kevin wrote:
 I used Apache to proxy the connection. SSL in Apache is much easier for me.
 
 On Mon, 11 Jul 2011 19:34:28 +0200, Christian Reischl wrote:
 Hi André,

 it was a little trickier, at least for me.

 Typing https:// was not enough, but finally I got it to work.


 I followed these guides:
 http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html (basic SSL
 configuration for Tomcat)

 https://wiki-bsse.ethz.ch/display/ITDOC/Import+an+openssl+generated+key+into+a+tomcat+application

 (to import existing SSL certificates and keys)

 After these steps, the Sync URL looks like this:
 https://funambol.server.url:8443/funambol/ds/


 A big thank you to the SOGo developers (and those of Funambol too).

 Regards,
 __
 Christian Reischl

 André Schild an...@schild.ws schrieb:
 Hello Christian,

 Am 11.07.2011 09:44, schrieb Christian Reischl:
 Hi Kevin,

 thank you very much.

 Latest Funambol (10.0.2) and SOGo Connector 1.0.9 are working
 perfectly for me.

 Another question:
 Is it possible to encrypt the traffic between Funambol/SOGo Connector
 and a Funambol Client?

 Yes, just use a https:// link instead of http://

 André
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Groups not recognised on event invites

2011-04-08 Thread Jim Hague
I'm running 1.3.6 (just upgraded from 1.3.5a) via the Debian packages on a 
Debian Squeeze host. I'm using an OpenLDAP system on the same host for user 
authentication and authorisation.

I'm having a small problem with groups in the web interface. Groups appear in 
auto-complete as expected when composing mail or setting calendar ACLs. But 
they do not appear when preparing invites to events.

Copying a group address from LDAP to the personal address book causes the 
group address to appear in auto-complete when preparing invites.

Entering the group address this way, or by hand, works - the group is expanded 
to the list of group members on saving the event.

The group configuration is as follows (domain names and passwords changed).
Groups are LDAP groupOfNames.

dict
keyCNFieldName/key
stringcn/string
keyIDFieldName/key
stringcn/string
keyUIDFieldName/key
stringcn/string
keybindDN/key
stringcn=access,dc=example,dc=com/string
keybindPassword/key
stringpassword/string
keybaseDN/key
stringou=Groups,dc=example,dc=com/string
keycanAuthenticate/key
stringYES/string
keydisplayName/key
stringLAIC groups/string
keyhostname/key
stringlocalhost/string
keyid/key
stringpublicgroup/string
keyisAddressBook/key
stringYES/string
keyport/key
string389/string
keytype/key
stringldap/string
/dict

-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Character size, messages look smaller

2011-03-23 Thread Jim Carter

On Wed, 23 Mar 2011, Corrado Fiore wrote:

for a drop-in replacement of the SOGo default theme, see bug #758 and 
download the attachment.  I'm about to release a slightly improved 
version, but the one attached is already usable.


http://www.sogo.nu/bugs/view.php?id=758


I rarely use SOGo's web interface on Android (G1, 640x480px)  because the 
glyphs come out so small.  I've meant to dig into the CSS and fix this, and 
your replacement theme will really help.


In my department I need to support screens ranging from the boss' old Treo 
650 (320x320px) to a thing called Godzilla, for medical imaging research, 
with dual 2560x1920px screens, plus a number of older profs have vision 
problems -- an ADA compliance issue.  My rule is to never set the body font 
size explicitly, relying on the visually impaired user, or the OS's 
defaults, to pick a font size appropriate to the display and the viewer's 
eyes.


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Removed messages on the phone (IMAP) reappear after next sync

2011-03-22 Thread Jim Carter

On Tue, 22 Mar 2011, Rosario Russo wrote:

I don't know if my issue is caused by a strange implementation of IMAP in 
Outlook for PocketPC or a wrong configuration of SOGo (and all of its 
connectors). But when I remove a message from my phone (via IMAP), after the 
next synchronization it reappears and it's not deleted from the server.


Perhaps you forgot to hit expunge or toss trash or whatever it's called 
in Outlook.  In IMAP the mail is tagged for deletion, but since rewriting 
the mailbox is expensive (in mailbox format, i.e. all messages in one file, 
versus maildir, i.e. one message per file), they're all deleted together 
when the user hits expunge.  Some users turn on expunge on exit so they 
don't have to remember to do it manually.



James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Alternative sender

2011-03-18 Thread Jim Hague
On Friday 18 Mar 2011 11:06:16 Alessio Fattorini wrote:
 Il 18/03/2011 12:01, Paul van der Vlis ha scritto:
  Hello,
  
  Is it possible for users to have more then one identitie for sending
  mail?  For e.g. private mail, bussiness mail, more official mail, etc.
 
 It's a recursive question:
 You Need to define the email addresses in the mail attribute of your ldap
 users. The SOGo web interface then allows users to choose from any of the
 addresses when composing emails.

I've done this, and it works well.

However, be warned that if you have clients set up to use your LDAP as an 
address book, you can't be sure which of the multiple addresses they will 
choose to display as your email. I carefully set up OpenLDAP to return 
addresses in a particular order, hoping that the first would always be the one 
displayed as the address book address, which mostly worked, but then found 
that iCal doesn't pick the first. Dunno how it does choose.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Free/Busy not displayed in web?

2011-03-17 Thread Jim Hague
I've installed SOGo on a Debian Squeeze host, via apt from the Inverse 
repository. I'm up to date, at 1.3.5a.

I have configured SOGo to use our LDAP server, and thus far most things seem 
to be working fine.

However, on the calendar, when I invite attendees known to SOGo, I never see 
their free/busy information. Or rather, they are presented as invariably free, 
in both web and Lightning.

I've checked this against the 1.3.5 ZEG and I see exactly the same thing.
Here's what I did in the ZEG:

1. Log in as sogo1. Create an event for tomorrow from 12:45-13:45. Log out.
2. Log in as sogo2. Create an event for tomorrow from 12:45-16:45. Save.
3. Open event and click 'Invite Attendees'. I see my current user, sogo2,
   is invited, and marked as busy between 12:45 and 16:45.
4. Click 'Add attendee', and enter 'John Doe', which is filled in as sogo1
   as expected. Hit Return to confirm address, and his free/busy info
   is displayed as completely free. I expected to see 12:45-13:45 blocked
   in blue as busy.

Both sogo1 and sogo2 Personal Calendars have 'Include in free/busy' checked.

Am I completely misunderstanding something, or is this just broken at the 
moment?
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Free/Busy not displayed in web?

2011-03-17 Thread Jim Hague
On Thursday 17 Mar 2011 16:37:11 Louis-Philippe Gauthier wrote:
  However, on the calendar, when I invite attendees known to SOGo, I never
  see
  their free/busy information. Or rather, they are presented as invariably
  free,
  in both web and Lightning.
 
 Have you set SOGoCalendarDefaultRoles in SOGo configuration?
 
  PublicDAndTViewer for public event ?
  PrivateDAndTViewer for private event ?
 ConfidentialDAndTViewer for confidential event?
 
 With these three parameters, you'll see that there is something in the
 calendar (but you didn't see what it is )

Wonderful. Thanks, that was the missing bit of the puzzle.
-- 
Jim Hague - jim.ha...@acm.org  Never trust a computer you can't lift.
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Foreign Mail Accounts

2011-03-01 Thread Jim Carter

On Tue, 1 Mar 2011, Pascal Gienger wrote:


# su - sogo
$ defaults write sogod SOGoMailAuxiliaryUserAccountsEnabled YES
$ exit
# service sogod restart

Beware, passwords are stored in cleartext in your sql backend.


Thanks, Pascal, for pointing out this config option.  (I need to add the 
appropriate LDAP schema before I can try out your other suggestion.)


I turned on the auxiliary accounts and was able to create one, but ended up 
hanging sogod's worker thread repeatedly.


Hmm, I wonder if this has anything to do with getting the protocol wrong, 
like I did previously with ldap vs. ldaps with a similar symptom.  If I 
change to SSL from TLS, amazing, the alternate account folders appear 
and I can use it normally!


So what's going wrong with TLS?  In some other mailers it's interpreted as 
not just selection of ciphers, but SSL means fall back to unencrypted if 
you can't set it up, while TLS means mandatory, which is what I want. 
Does anyone know what SSL vs. TLS really means in SOGo?



To be specific, in Preferences - 
IMAP Accounts - j...@math.ucla.edu (the name of the account), I set:

Server Name: nasturtium.math.ucla.edu   Port: 993
Encryption: TLS (later changed to SSL)
User Name: jimc
Password: . (I initially tried an empty PW without success)
Full Name: Jim Carter
Email: j...@math.ucla.edu  (local realm would be cft.ca.us)
Signature: (none)
Return receipt: Never.

When I hit Save+Close it is saved, and produces a get mail event, 
whereupon these events happen (every time I try it):


In sogo.log:  brlocalhost - - [01/Mar/2011:21:22:46 GMT] POST
/SOGo/so/jimc/Mail/0/mailboxes HTTP/1.1 200 170/0 0.081 - - 0
(client gets messages from primary mail server; there aren't any
(correct), but the folders are shown.  Nothing more is logged.)
The in process circle circulates, then gives up after about 30 secs.
Hit Preferences; nothing is logged, and the window eventually shows 502
proxy error, timeout reading from remote server.  This can be rectified
by restarting sogod, or the watchdog will restart the worker thread
after 10 minutes.
After 3 minutes maillog on the remote IMAP server says:  Mar  1 21:25:46
nasturtium dovecot: imap-login: Disconnected: Inactivity (no auth
attempts): rip=71.107.56.108, lip=128.97.19.118, TLS handshaking
(proving that sogod did connect to the server, which should have
offered STARTTLS and nothing more.)


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Webmail Alternate Roles

2011-02-28 Thread Jim Carter
I need to send mail from several from addresses, and in fact at home I 
always send from the realm at work, as you can see in this message.  How 
does the individual user configure this in the SOGo web client?  Can one of 
the addresses be set as the default?


(Sorry for the upcoming flurry of messages but I'm trying to keep with
the one topic per thread rule.)

James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Mailing PIM Objects

2011-02-28 Thread Jim Carter
User A wants to mail a vEvent, vTodo, vCard, etc. to user B.  When 
composing mail, how does A attach a PIM object?  If A uses his hacking 
skills to accomplish this, it is displayed semantically appropriately 
(tested for one vEvent in a separate vCalendar), but how does B take the 
attached object into his PIM collection (calendar or address book)?



James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Purging Ancient Events

2011-02-28 Thread Jim Carter
How do you purge ancient events?  How do you configure the survival time? 
Can it be per event?


I am thinking in terms of dual use of the calendar (or alternatively, 
having two calendars for each role): one for which a year or two of history 
is kept, e.g. tax payments, medical appointments, car service; and another 
for which events are to be forgotten shortly after they happen, e.g. 
visiting my mother-in-law.  It's going to be a bummer if we have to rely on 
the users to manually delete old events, which they will never do, leading 
to storage growing without limit.



James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Calendar Search Box

2011-02-28 Thread Jim Carter

In calendar list view, there is a box with a magnifying glass icon
and a down triangle which, if clicked, shows a list with one member,
qTitle or Description/q.  When you type in it, it appears to be
doing Ajax pre-queries.  What is it for?  I typed keywords from
event titles (with the correct case), and entire event titles, but
never got any matching events.


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Foreign Mail Accounts

2011-02-28 Thread Jim Carter
At home my mail is outsourced; at work my IMAP server is not the machine 
where I'm testing SOGo (which has a working IMAP server to which nobody 
ever sends mail).  Thus I see my folders but my INBOX is always empty.  I 
see the configuration option to identify the IMAP host from a field in the 
LDAP Persons record, but I have not yet gotten that into LDAP.  The GUI is 
set up so it could represent foreign IMAP servers such as Gmail, but all 
relevant information seems to be non-editable.  How can we make that happen 
for particular users?



James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] Task List View

2011-02-28 Thread Jim Carter

So far I haven't found any difference between tasks and calendar
events.  Is there a real task list view?  A simple but effective
example is Astrid on Android.  If I were using SOGo's tasks
at all, I would pick an arbitrary week, and use days to represent
categories, and times within the day to represent the order of doing
the tasks, kind of like the priority but (manually) accounting for
how one step depends on a previous one being finished.


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555
Email: j...@math.ucla.edu  http://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] SOGo on OpenSuse 10.3

2011-02-24 Thread Jim Carter

On Thu, 24 Feb 2011, c...@cane-clan.de wrote:

/usr/local/sbin/sogod) It always told me it couldn't find libSOGo.so.1 
but this

file is available at/usr/local/lib.
Well this problem has disappeard while i was sleeping tonight (don't know why,
maybe the reconnect of my ssh session fixed the problem),


Likely your daily housekeeping script did ldconfig which set up version 
symlinks for the new libraries and recorded them in the cache 
/etc/ld.so.cache .  Remember to do that by hand after installing a new 
library.



so now it tells me i shouldn't run sogod as root.


See startproc -u $USER... (where USER=sogo) in the script below.


Creating a new User shouldn't be my problem,


Here's what I put in /etc/passwd.  Group 12 is mail; I didn't bother to 
create a group for sogo since it would have no other members. 
/sbin/nologin as the shell is for paranoia (you might want to be normal 
and use /bin/sh).  When doing su you need instead su -s /bin/sh ... to 
override the paranoid shell.


sogo:x:419:12:SOGo Special User:/var/lib/sogo:/sbin/nologin


but can someone tell me how to
install sogod to /etc/init.d and how to setup the service to start at system
startup?


Below is my startup script.  (This is on OpenSuSE 11.2.)  To activate it 
for boot-time startup do: insserv /etc/init.d/sogod  (insserv -r filename, 
to turn it off.)  In the script, I'm using postgresql; if you use  mysql 
you should change the dependency.  Also check, and change as needed, the 
variable settings.  I'm sure you will need DAEMON=/usr/local/bin/sogod .
Also remember you need the GNUstep registry daemon and memcached to start 
at boot.



James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 520 Portola Plaza; Los Angeles, CA, USA  90095-1555
Email: j...@math.ucla.eduhttp://www.math.ucla.edu/~jimc (q.v. for PGP key)

= /etc/init.d/sogod
#!/bin/bash
#
#   Startup script for SOGo server
#   Original script Copyright (C) 2007-2009 Inverse inc., under GPL.
#   Original authors: Wolfgang Sourdeau wsourd...@inverse.ca
#   and Francis Lachapelle flachape...@inverse.ca
#   Hacked for LSB by Jim Carter j...@math.ucla.edu, 2011-02-18
#   LSB skeleton Copyright (C) 1995--2005  Kurt Garloff, SUSE / Novell Inc.
#   Skeleton under LGPL.

# Contains bash-isms (uses ~sogo).  Debian policy is that all startup scripts
# should run under any POSIX shell.

### BEGIN INIT INFO
# Provides:  sogo
# Required-Start:$network postgresql
# Should-Start:  $time postfix dovecot ldap
# Required-Stop: $network postgresql
# Should-Stop:   $time postfix dovecot ldap
# Default-Start: 3 5
# Default-Stop:  0 1 2 6
# Short-Description: SOGo groupware server
# Description:   SOGo provides calendars, contact lists,
#	and other PIM objects on the network. 
### END INIT INFO


PATH=/sbin:/bin:/usr/sbin:/usr/bin
# Fancy SuSE shell functions, e.g. show outcomes in color
. /etc/rc.status

DESC=SOGo
case $1 in
stop )   TITLE=stopping $DESC ; ;;
status ) TITLE=checking status of $DESC ; ;;
* )  TITLE=${1}ing $DESC ; ;;
esac

# Shows the outcome and exits.  1st arg is the numeric error code or 0 for
# success; the rest (if any) are printed after the title.  Codes:
# 0 = success, 1 = generic error, 5 = not installed, 6 = not configured,
# 7 = not running; except for status, 0 = running, 1 = PID file exists, 
# 3 = not running (reported as unused), 4 = generic weird status. 
function barf () {

rc_failed $1
shift
echo ${TITLE}
echo $*
rc_status -v
rc_exit
}

NAME=sogo
DAEMON=/usr/sbin/sogod
ARG_GSMAKE=`gnustep-config --variable=GNUSTEP_MAKEFILES 2/dev/null`
DARG_GNUSTEP_SH=$ARG_GSMAKE/GNUstep.sh

USER=$NAME
PREFORK=1

PIDFILE=/var/run/$NAME/$NAME.pid
LOGFILE=/var/log/$NAME/$NAME.log

# The above variables can be overridden in $SYSCONF if it exists.
# The internal configuration file is in ~sogo/GNUstep/Defaults/.GNUstepDefaults
SYSCONF=/etc/sysconfig/$NAME
if [ -f $SYSCONF ]; then
. $SYSCONF
fi
GNUDFLTS=`eval echo ~$NAME/GNUstep/Defaults/.GNUstepDefaults`
if [ ! -r $GNUDFLTS ] ; then
barf 6 Can't read configuration file $GNUDFLTS
fi

if [ ! -x $DAEMON ]; then
barf 5 $DAEMON is not executable.
fi

function checkDir () {
local directory=$1
if [ ! -d $directory ] ; then
barf 5 $directory does not exist.
fi

if [ `/usr/bin/stat $directory -c %U` != $USER ] ; then
barf 6 $directory is not owned by user '$USER'.
fi
}

if [ -z $GNUSTEP_SYSTEM_ROOT ] ; then
  . $DARG_GNUSTEP_SH
fi

DAEMON_OPTS=-WOWorkersCount $PREFORK -WOPidFile $PIDFILE -WOLogFile $LOGFILE

case $1 in
  start)
checkDir /var/run/$NAME
checkDir /var/spool/$NAME
checkDir /var/log/$NAME
echo -n $TITLE 
/sbin/startproc -p $PIDFILE -u $USER $DAEMON $DAEMON_OPTS
rc_status -v
;;
  stop)
echo -n $TITLE 
/sbin/killproc -p $PIDFILE

[SOGo] sqlite or MSSQL database backend

2011-02-24 Thread Jim Carter

URL: http://oeufdure.free.fr/wordpress/?p=234cpage=1#comment-1772

I noticed in Fabrice's recent blog post, the second comment, that he 
mentions sqlite as a possibility for the database backend.  Currently I'm 
using PostgreSQL, but both my sites are quite small and the general purpose 
database engine is waaay overkill.  I'll be trying out sqlite soon.


At work another possibility is Microsoft SQL Server via unixODBC and 
FreeTDS.  While we Linux types sneer at it, it's professionally maintained 
already and adding one fairly small database would be very cost effective. 
I always tell the other devs at my site that the key to maximum 
flexibility and to avoiding vendor lock-in is to use ODBC to connect to 
whatever database engine.  The extra overhead in the middleware is worth it 
for our application (though the choice would be different at a high-volume 
site).


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 520 Portola Plaza; Los Angeles, CA, USA  90095-1555
Email: j...@math.ucla.eduhttp://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


[SOGo] SOGo child process hangs and is restarted

2011-02-23 Thread Jim Carter
I've installed SOGo for the first time and am working through the various
screwups.  I can connect to https://otter.mine.nu/SOGo/ ; SOGo sends
the login form and Apache delivers dependencies (logo image, Javascript)
through its aliases.  I fill in my loginID, password and language, and
submit the form.  Apache waits for ${ProxyTimeout} and reports 502
Bad Gateway, saying in its log that it timed out waiting for the status
line from the remote server (SOGo, localhost:2).  SOGo log follows, 
also /etc/apache2/conf.d/SOGo.conf and 
~sogo/GNUstep/Defaults/.GNUstepDefaults .  Can anyone give a clue what 
I have  failed to do?  

Versions:  
openSUSE 11.2
SOGo 1.3.5a, compiled (apparently successfully) into RPMs
postgresql-server 8.4.5
apache2 2.2.13
openldap2 2.4.17 for native (SOGo) authentication
SOGo, Apache, LDAP and PostgreSQL are all on the same machine, a Koolu :-)

 SOGo log with annotations:
# Hit reload on browser, URL = https://otter.mine.nu/SOGo/
Feb 22 22:08:21 sogod [9131]: 0x0x833a0f8[SOGoCache] Cache cleanup interval 
set every 300.00 seconds
Feb 22 22:08:21 sogod [9131]: 0x0x833a0f8[SOGoCache] Using host(s) 
'localhost' as server(s)
2011-02-22 22:08:21.354 sogod[9131] Note(SoObject): SoDebugKeyLookup is enabled!
2011-02-22 22:08:21.356 sogod[9131] Note(SoObject): SoDebugBaseURL is enabled!
2011-02-22 22:08:21.357 sogod[9131] Note(SoObject): relative base URLs are 
enabled.
2011-02-22 22:08:21.521 sogod[9131] WOCompoundElement: pool embedding is on.
2011-02-22 22:08:21.521 sogod[9131] WOCompoundElement: id logging is on.
2011-02-22 22:08:21.778 sogod[9131] WARNING(-[NSNull(misc) count]): called 
NSNull -count (returns 0) !!!
localhost - - [22/Feb/2011:22:08:21 GMT] GET /SOGo/ HTTP/1.1 200 3438/0 0.642 
10456 67% 2M

# Filled in and submitted the login form
Feb 22 22:09:01 sogod [9131]: SOGoRootPage successful login for user 'jimc' - 
expire = -1  grace = -1
Feb 22 22:09:01 sogod [9131]: [WARN] 0x0x8453610[SOGoWebDAVAclManager] entry 
'{DAV:}write' already exists in DAV permissions table
Feb 22 22:09:01 sogod [9131]: [WARN] 0x0x8453610[SOGoWebDAVAclManager] entry 
'{DAV:}write-properties' already exists in DAV permissions table
Feb 22 22:09:01 sogod [9131]: [WARN] 0x0x8453610[SOGoWebDAVAclManager] entry 
'{DAV:}write-content' already exists in DAV permissions table
2011-02-22 22:09:01.799 sogod[9131] Note: Using UTF-8 as URL encoding in 
NGExtensions.
localhost - - [22/Feb/2011:22:09:01 GMT] POST /SOGo/connect HTTP/1.1 200 
27/80 0.921 - - 492K
# (The size of what's posted varies, ranging up to 2M (megabytes I assume.)
localhost - - [22/Feb/2011:22:09:01 GMT] GET /SOGo/jimc HTTP/1.1 302 0/0 
0.019 - - 16K
localhost - - [22/Feb/2011:22:09:01 GMT] GET /SOGo/jimc/view HTTP/1.1 302 0/0 
0.029 - - 4K
localhost - - [22/Feb/2011:22:09:01 GMT] GET /SOGo/so/jimc/Mail HTTP/1.1 302 
0/0 0.019 - - 0
# And it sits there -- this is the last message in the log, for 10 minutes.

# After 10 minutes it does this:
Feb 22 22:19:01 sogod [9117]: [WARN] 0x0x8193008[WOWatchDogChild] safety belt 
-- sending KILL signal to pid 9131
Feb 22 22:19:02 sogod [9117]: 0x0x8193008[WOWatchDogChild] child 9131 exited
Feb 22 22:19:02 sogod [9117]: 0x0x8193008[WOWatchDogChild]  (terminated due 
to signal 9)
Feb 22 22:19:02 sogod [9117]: 0x0x81776a8[WOWatchDog] child spawned with pid 
9298
Feb 22 22:19:02 sogod [9298]: 0x0x82c1ad8[SOGoProductLoader] SOGo products 
loaded from '/usr/lib/GNUstep/SOGo':
Feb 22 22:19:02 sogod [9298]: 0x0x82c1ad8[SOGoProductLoader]   
ContactsUI.SOGo, Contacts.SOGo, SchedulerUI.SOGo, Appointments.SOGo, 
MailPartViewers.SOGo, AdministrationUI.SOGo, CommonUI.SOGo, MainUI.SOGo, 
MailerUI.SOGo, PreferencesUI.SOGo, Mailer.SOGo
Feb 22 22:19:02 sogod [9298]: |SOGo| version 1.3.5 (build 
r...@simba.math.ucla.edu 201102181642) -- starting
Feb 22 22:19:02 sogod [9298]: |SOGo| vmem size check enabled: shutting down app 
when vmem  384 MB


 /etc/apache2/conf.d/SOGo.conf :
Alias /SOGo.woa/WebServerResources/ \
  /usr/lib/GNUstep/SOGo/WebServerResources/
Alias /SOGo/WebServerResources/ \
  /usr/lib/GNUstep/SOGo/WebServerResources/
AliasMatch /SOGo/so/ControlPanel/Products/(.*)/Resources/(.*) \
   /usr/lib/GNUstep/SOGo/$1.SOGo/Resources/$2

# jimc added:
Directory /usr/lib/GNUstep/SOGo/WebServerResources
Order allow,deny
Allow from all
/Directory

LocationMatch 
^/SOGo/so/ControlPanel/Products/.*UI/Resources/.*\.(jpg|png|gif|css|js)
  SetHandler default-handler
/LocationMatch

## Uncomment the following to enable proxy-side authentication, you will then
## need to set the SOGoTrustProxyAuthentication SOGo user default to YES and
## adjust the x-webobjects-remote-user proxy header in the Proxy section
## below.
#Location /SOGo
#  AuthType XXX
#  Require valid-user
#  SetEnv proxy-nokeepalive 1
#  Allow from all
#/Location

ProxyRequests Off
SetEnv proxy-nokeepalive 1
ProxyPreserveHost On

# When using CAS, you should uncomment this and install cas-proxy-validate.py
# in 

Re: [SOGo] SOGo child process hangs and is restarted

2011-02-23 Thread Jim Carter

On Wed, 23 Feb 2011, Ludovic Marcotte wrote:


On 11-02-23 12:23 PM, Jim Carter wrote:

SOGoIMAPServer = localhost:993;

That should be:

SOGoIMAPServer = imaps://localhost:993;
Should fix all your issues.


Thanks for the quick reply.  I made the change, and it did indeed fix all 
my issues (so far) -- I see the webmail page.  Further testing will be 
tonight since I'm on the wrong end of a slow DSL link.  Thanks for your 
help.


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 520 Portola Plaza; Los Angeles, CA, USA  90095-1555
Email: j...@math.ucla.eduhttp://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Debian Squeeze as client

2011-02-23 Thread Jim Carter

On Wed, 23 Feb 2011, Paul van der Vlis wrote:


On my net I obtained Thunderbird 3.1.6 from the SuSE Build Service so we
could use Lightning (with a CalDAV server which we hope to replace with
SOGo).


Does this build service also create Debian packages?


Sorry, they make only RPMs in the context of the currently supported SuSE 
releases, i.e. requiring library versions that are actually present in that 
release.


James F. Carter  Voice 310 825 2897FAX 310 206 6673
UCLA-Mathnet;  6115 MSA; 520 Portola Plaza; Los Angeles, CA, USA  90095-1555
Email: j...@math.ucla.eduhttp://www.math.ucla.edu/~jimc (q.v. for PGP key)
--
users@sogo.nu
https://inverse.ca/sogo/lists