Re: [SOGo] SOGo/OpenChange and external domain(s)
On 09/28/2015 02:12 AM, Harold Fines wrote: > > ...using different user > groups as "baseDN" to separate the users but I still end up with with > "org.pri" as their mail address. > > Is it even possible to use different external domains in this setup and > if so: how? I have yet to succeed in assigning/using a single external > domain so any help with be highly appreciated :) Hi Harold, don't know if that helps, I don't use OpenChange but also Samba 4 (just one domain "foo.bar") and I am hosting multiple (external) domains selected by filters like this for each domain configuration: filter = "(objectClass='*' AND mail='*@domain1.tld' AND userAccountControl != 66050)"; and for other domains the same just the other mail domains: filter = "(objectClass='*' AND mail='*@domain2.tld' AND userAccountControl != 66050)"; etc... for postfix there is just an ldap query filtering all addresses (one filter for users, another for group membership - see also this thread: https://lists.inverse.ca/sogo/arc/users/2015-09/msg00077.html) Never tried with different baseDNs, but why not just use "mail" as identifier in SOGo and you're good to go ? I am using mail as identifier in Dovecot and SOGo and it just works: domain1.tld = { SOGoMailDomain = domain1.tld; ... SOGoUserSources = ( { type = ldap; id = domain1.tld; CNFieldName = cn; IDFieldName = mail; UIDFieldName = mail; hostname = "ldap://x.x.x.x:389 "; baseDN = "dc=foo,dc=bar"; bindFields = (mail); filter = "(objectClass='*' AND mail='*@domain1.tld' AND userAccountControl != 66050)"; canAuthenticate = YES; isAddressBook = YES; IMAPLoginFieldName = mail; . Regards Peter -- users@sogo.nu https://inverse.ca/sogo/lists
RE: [SOGo] SOGo/OpenChange and external domain(s)
Hello Harold, After I’ve done the configuration I’m able to login into sogo right but my Dovecot and Postfix is not able to authenticate Samba users. Are you using LDAP also or just Samba to create users? Regards Durga Prasad +919849111010 From: users-requ...@sogo.nu [mailto:users-requ...@sogo.nu] On Behalf Of Harold Fines Sent: 28 September 2015 05:43 To: Users Subject: [SOGo] SOGo/OpenChange and external domain(s) Greetings I have followed the Openchange cookbook and "SOGo - Installation and Configuration Guide.pdf" as well as "SOGo Native Microsoft Outlook Configuration.pdf" to produce a working implementation of Debian, Samba, Dovecot, Postfix and SOGo. Kudos to all the developers involved in making these amazing softwares! My organization is a small non-profit. We are now using Samba as an internal AD ("org".pri") for our workstations and all is well. The thing is, some of our users have been using two different external domains ("org.com" and "otherorg.fi") for our e-mail which is where I am hitting a snag: Created users (through samba-tool and openchange_newusers) end up with usern...@org.pri as their mail address when logging into SOGo which will of course not work when communicating with external mail addresses. I tried following "Multi-domains Configuration" from "SOGo - Installation and Configuration Guide.pdf" and using different user groups as "baseDN" to separate the users but I still end up with with "org.pri" as their mail address. Is it even possible to use different external domains in this setup and if so: how? I have yet to succeed in assigning/using a single external domain so any help with be highly appreciated :) -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo/OpenChange and external domain(s)
On 2015-09-28 02:12, Harold Fines wrote: Greetings I have followed the Openchange cookbook and "SOGo - Installation and Configuration Guide.pdf" as well as "SOGo Native Microsoft Outlook Configuration.pdf" to produce a working implementation of Debian, Samba, Dovecot, Postfix and SOGo. Kudos to all the developers involved in making these amazing softwares! My organization is a small non-profit. We are now using Samba as an internal AD ("org".pri") for our workstations and all is well. The thing is, some of our users have been using two different external domains ("org.com" and "otherorg.fi") for our e-mail which is where I am hitting a snag: Created users (through samba-tool and openchange_newusers) end up with usern...@org.pri as their mail address when logging into SOGo which will of course not work when communicating with external mail addresses. I tried following "Multi-domains Configuration" from "SOGo - Installation and Configuration Guide.pdf" and using different user groups as "baseDN" to separate the users but I still end up with with "org.pri" as their mail address. Is it even possible to use different external domains in this setup and if so: how? I have yet to succeed in assigning/using a single external domain so any help with be highly appreciated :) Maybe this will help you forward: http://drdata.blogg.se/2013/july/get-sogo-iredmail-and-samba-4-ad-ds-in-perfect-harmony.html http://www.iredmail.org/docs/active.directory.html http://www.iredmail.org/forum/topic3165-iredmail-support-integration-with-windows-domain.html Regards Davor Vusir -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo/OpenChange and external domain(s)
On 09/30/2015 12:59 AM, Harold Fines wrote: > I am immediately returned to the login screen (although logs state that > the user was logged in)? by the way: I had the same issue after upgrading to 2.3.2 and the problem was SOGoEnableDomainBasedUID - after changing/commenting this setting, login was successful for every domain on that servers https://lists.inverse.ca/sogo/arc/users/2015-09/msg00166.html -- users@sogo.nu https://inverse.ca/sogo/lists
Re: [SOGo] SOGo/OpenChange and external domain(s)
On 09/30/2015 12:59 AM, Harold Fines wrote: > > For some reason I am unable to log in with "IMAPLoginFieldName = mail", > SOGo is unable to authenticate users. Also, with "UIDFieldName = mail;" > I am immediately returned to the login screen (although logs state that > the user was logged in)? > > Now, is there any way of making dovecot create mailboxes in /var/mail/ > named after their full e-mail address instead of just the username? my dovecot-ldap.conf has this settings, which will create the mailboxes automatically under /var/vmail/domain/lefthandside-part. but i think you could change that to %Lu (%u should be the mailaddress and the "L" will convert everything to Lowercase), but never tried that. for me it's more conveniant when each domain is separated in different folders... you also have to ensure the settings in 10-auth.conf (auth_username_format = %Lu) (is what I have defined - everybody has to login with the complete mail as username). hosts = x.x.x.x:389 x.x.x.y:389 dn = servicel...@foo.bar dnpass = password base = cn=Users,dc=foo,dc=bar auth_bind = yes pass_filter = (&(objectClass=user)(mail=%Lu)) pass_attrs = userPassword=password user_filter = (&(ObjectClass=user)(mail=%Lu)) user_attrs = =home=/var/vmail/%Ld/%Ln,=uid=1,=gid=1 for Dovecot I can recommend Peer Heinlein's Dovecot book (ISBN 978-3-95539-074-7) Hope that helps... Regards Peter -- users@sogo.nu https://inverse.ca/sogo/lists
Re: Re: [SOGo] SOGo/OpenChange and external domain(s)
Hello Harold, Dovecot will create the mailbox as per the mail_location parameter we define. If the folder does not exist dovecot will create the folder on receipt of first mail. For example mail_location = maildir:/home/vmail/%Ld/%Lu/Maildir/ where %Ld is lower case of domainname and %Lu is lowercase of username folder in user@domain format. Have a look at this. http://wiki2.dovecot.org/Variables Regards DP -- users@sogo.nu https://inverse.ca/sogo/lists
RE: {Spam?} Re: [SOGo] SOGo/OpenChange and external domain(s)
Dear Harold, Thanks for your immediate response. Can you confirm if openlap/slapd is also running/installed in your system? I am trying to install it using just Samba and no LDAP at all. Point is Samba is not accepting a Simple bind. Im getting the following error. auth: Error: LDAP: binding failed (dn ): Invalid credentials, Simple Bind Failed: NT_STATUS_LOGON_FAILURE Regards Durga Prasad +919849111010 -Original Message- From: users-requ...@sogo.nu [mailto:users-requ...@sogo.nu] On Behalf Of Davor Vusir Sent: 28 September 2015 12:38 To: users@sogo.nu Subject: {Spam?} Re: [SOGo] SOGo/OpenChange and external domain(s) On 2015-09-28 02:12, Harold Fines wrote: > Greetings > > I have followed the Openchange cookbook and "SOGo - Installation and > Configuration Guide.pdf" as well as "SOGo Native Microsoft Outlook > Configuration.pdf" to produce a working implementation of Debian, > Samba, Dovecot, Postfix and SOGo. Kudos to all the developers involved > in making these amazing softwares! > > My organization is a small non-profit. We are now using Samba as an > internal AD ("org".pri") for our workstations and all is well. The > thing is, some of our users have been using two different external > domains ("org.com" and > "otherorg.fi") for our e-mail which is where I am hitting a snag: > > Created users (through samba-tool and openchange_newusers) end up with > usern...@org.pri as their mail address when logging into SOGo which > will of course not work when communicating with external mail addresses. > > I tried following "Multi-domains Configuration" from "SOGo - > Installation and Configuration Guide.pdf" and using different user > groups as "baseDN" to separate the users but I still end up with with > "org.pri" as their mail address. > > Is it even possible to use different external domains in this setup > and if > so: how? I have yet to succeed in assigning/using a single external > domain so any help with be highly appreciated :) Maybe this will help you forward: http://drdata.blogg.se/2013/july/get-sogo-iredmail-and-samba-4-ad-ds-in-perfect-harmony.html http://www.iredmail.org/docs/active.directory.html http://www.iredmail.org/forum/topic3165-iredmail-support-integration-with-windows-domain.html Regards Davor Vusir -- users@sogo.nu https://inverse.ca/sogo/lists -- users@sogo.nu https://inverse.ca/sogo/lists