Hello group,

I'm examining SOGo as replacement for our Horde Webmail installation.

I made a testsystem with RHEL 8, Dovecot imap server and postfix. We 
authenticate our users against an openldap server.
So far this is working on the testsys with an imap client (evolution), sending 
and recieving emails, subscribing emails folders and everything.

Now i installed SOGo CE and configured it with our ldap server for some times, 
last update yesterday with sogo-5.5.1.20220329-1.el8.x86_64.
Login is successful, but than the user is logged out immediately and throwed 
back to the login screen.

According to sogo.log, the user loggs in successfully via ldap, session data is 
inserted into the postgres DB, but than there is no access to the imap server 
(no entry in maillog), the user is logged out immediately.

sogo.log

Mar 30 09:11:22 sogod [61630]: |SOGo| starting method 'POST' on uri 
'/SOGo/connect'
Mar 30 09:11:22 sogod [61630]: <0x0x55858ebe0490[NGLdapConnection]> Using 
ldap_initialize for LDAP URL: ldap://ldap1.unileoben.ac.at:393
Mar 30 09:11:22 sogod [61630]: <0x0x55858ec83ad0[NGLdapConnection]> Using 
ldap_initialize for LDAP URL: ldap://ldap1.unileoben.ac.at:393
2022-03-30 09:11:22.916 sogod[61630:61630] -[NGLdapConnection 
_searchAtBaseDN:qualifier:attributes:scope:]: search at base '' filter 
'(objectClass=*)' for at
trs 'subschemaSubentry'
2022-03-30 09:11:22.916 sogod[61630:61630] -[NGLdapConnection 
_searchAtBaseDN:qualifier:attributes:scope:]: search at base 'cn=Subschema' 
filter '(objectClas
s=*)' for attrs 'objectclasses'
2022-03-30 09:11:22.935 sogod[61630:61630] -[NGLdapConnection 
_searchAtBaseDN:qualifier:attributes:scope:]: search at base 
'ou=people,dc=mu-leoben,dc=at' fil
ter '(uid=m08635092)' for attrs 'dn'
Mar 30 09:11:22 sogod [61630]: SOGoRootPage successful login from 
'172.27.128.5' for user 'm08635092' - expire = -1  grace = -1
Mar 30 09:11:22 sogod [61630]: <0x0x55858ee1b7c0[NGLdapConnection]> Using 
ldap_initialize for LDAP URL: ldap://ldap1.unileoben.ac.at:393
2022-03-30 09:11:22.939 sogod[61630:61630] -[NGLdapConnection 
_searchAtBaseDN:qualifier:attributes:scope:]: search at base 
'ou=people,dc=mu-leoben,dc=at' fil
ter '(|(uid=m08635092)(mail=m08635092))' for attrs '*'
2022-03-30 09:11:22.940 sogod[61630:61630] PG0x0x55858e83c910 SQL: SELECT 
c_defaults FROM sogo_user_profile WHERE c_uid = 'm08635092'
2022-03-30 09:11:22.941 sogod[61630:61630] PG0x0x55858e83c910 SQL: SELECT 
c_settings FROM sogo_user_profile WHERE c_uid = 'm08635092'
2022-03-30 09:11:22.952 sogod[61630:61630] PostgreSQL72 connection established: 
<0x0x55858ee4a720[PGConnection]:  connection=0x0x55858ee4b520>
2022-03-30 09:11:22.952 sogod[61630:61630] PostgreSQL72 channel 
0x0x55858ed3ddc0 opened (connection=<0x0x55858ee4a720[PGConnection]:  
connection=0x0x55858ee4
b520>, count=2)
2022-03-30 09:11:22.952 sogod[61630:61630] PG0x0x55858ed3ddc0 SQL: BEGIN 
TRANSACTION
2022-03-30 09:11:22.952 sogod[61630:61630] PG0x0x55858ed3ddc0 SQL: SELECT 
t1.c_creationdate, t1.c_id, t1.c_lastseen, t1.c_value FROM  
sogo_sessions_folder t1
 WHERE t1.c_id='Ul+G6UeYdUvSGuPN'
2022-03-30 09:11:22.954 sogod[61630:61630] PG0x0x55858ed3ddc0 SQL: ROLLBACK 
TRANSACTION
2022-03-30 09:11:22.954 sogod[61630:61630] PG0x0x55858e83c910 SQL: BEGIN 
TRANSACTION
2022-03-30 09:11:22.954 sogod[61630:61630] PG0x0x55858e83c910 SQL: INSERT INTO 
sogo_sessions_folder (c_lastseen, c_creationdate, c_value, c_id) VALUES (....)
2022-03-30 09:11:22.955 sogod[61630:61630] PG0x0x55858e83c910 SQL: COMMIT 
TRANSACTION
Mar 30 09:11:22 sogod [61630]: |SOGo| request took 0.053942 seconds to execute
Mar 30 09:11:22 sogod [61630]: 172.27.128.5 "POST /SOGo/connect HTTP/1.1" 200 
46/77 0.056 - - 1M - 16
Mar 30 09:11:24 sogod [61630]: |SOGo| starting method 'GET' on uri 
'/SOGo/m08635092'
Mar 30 09:11:24 sogod [61630]: |SOGo| request took 0.016890 seconds to execute
Mar 30 09:11:24 sogod [61630]: 172.27.128.5 "GET /SOGo/m08635092 HTTP/1.1" 200 
36489/0 0.018 - - 0 - 16
2022-03-30 09:15:24.773 sogod[61628:61628] PostgreSQL72 connection dropped 
0x0x55858e67fca0 (channel=0x0x55858e83c910, count=0)
2022-03-30 09:15:24.775 sogod[61629:61629] PostgreSQL72 connection dropped 
0x0x55858e67fca0 (channel=0x0x55858e83c910, count=0)
2022-03-30 09:15:24.792 sogod[61630:61630] PostgreSQL72 connection dropped 
0x0x55858ee4a720 (channel=0x0x55858ed3ddc0, count=1)
2022-03-30 09:15:24.792 sogod[61630:61630] PostgreSQL72 connection dropped 
0x0x55858e67fca0 (channel=0x0x55858e83c910, count=0)

sogo.conf

 /* Database configuration (mysql://, postgresql:// or oracle://) */
  SOGoProfileURL = 
"postgresql://sogo:sogo@sogohost:5432/sogo/sogo_user_profile";
  OCSFolderInfoURL = 
"postgresql://sogo:sogo@sogohost:5432/sogo/sogo_folder_info";
  OCSSessionsFolderURL = 
"postgresql://sogo:sogo@sogohost:5432/sogo/sogo_sessions_folder";

  /* Mail */
  SOGoDraftsFolderName = Drafts;
  SOGoSentFolderName = Sent;
  SOGoTrashFolderName = Trash;
  SOGoJunkFolderName = Junk;
  SOGoIMAPServer = "imap://127.0.0.1:143";
  SOGoSieveServer = "sieve://127.0.0.1:4190";
  SOGoSMTPServer = "smtp://127.0.0.1";
  SOGoMailDomain = stud.unileoben.ac.at;
  SOGoMailingMechanism = smtp;
  SOGoForceExternalLoginWithEmail = NO;
  SOGoMailSpoolPath = /var/spool/sogo;
  NGImap4ConnectionStringSeparator = "/";

  /* Notifications */
  //SOGoAppointmentSendEMailNotifications = NO;
  //SOGoACLsSendEMailNotifications = NO;
  //SOGoFoldersSendEMailNotifications = NO;
 /* Authentication */
  //SOGoPasswordChangeEnabled = YES;

  /* LDAP authentication example */
  SOGoUserSources = (
    {
      type = ldap;
      CNFieldName = cn;
      UIDFieldName = uid;
      IDFieldName = uid; // first field of the DN for direct binds
      bindFields = uid; // array of fields to use for indirect binds
      baseDN = "ou=people,dc=mu-leoben,dc=at";
      bindDN = "deleted";
      bindPassword = deleted;
      canAuthenticate = YES;
      displayName = "Shared Addresses";
      hostname = "ldap://ldap1.unileoben.ac.at:393";;
      id = public;
      isAddressBook = YES;
    }
  );


  /* Web Interface */
  SOGoPageTitle = SOGo;
  SOGoVacationEnabled = YES;
  SOGoForwardEnabled = YES;
  SOGoSieveScriptsEnabled = YES;
  SOGoMailAuxiliaryUserAccountsEnabled = YES;
  SOGoTrustProxyAuthentication = NO;
  SOGoXSRFValidationEnabled = NO;
  /* General - SOGoTimeZone *MUST* be defined */
  SOGoLanguage = English;
  SOGoTimeZone = Europe/Vienna;
  SOGoCalendarDefaultRoles = (
    PublicDAndTViewer,
    ConfidentialDAndTViewer
  );
  
  //SOGoSuperUsernames = (sogo1, sogo2); // This is an array - keep the parens!
  SxVMemLimit = 384;
  WOPidFile = "/var/run/sogo/sogo.pid";
  //SOGoMemcachedHost = "/var/run/memcached.sock";
  SOGoMemcachedHost = "127.0.0.1";

  /* Debug */
  SOGoDebugRequests = YES;
  SoDebugBaseURL = YES;
  ImapDebugEnabled = YES;
  LDAPDebugEnabled = YES;
  PGDebugEnabled = YES;
  MySQL4DebugEnabled = YES;
  SOGoUIxDebugEnabled = YES;
  WODontZipResponse = YES;
  WOLogFile = /var/log/sogo/sogo.log;

I have removed all SSL connections (https, ldaps, imaps) but with no luck, 
still the same error. Memcached is installed and running.
I think SOGo is not knowing how to get the users home directory. This 
information is stored in LDAP )attribute homeDirectory), but there is no 
configuration option in sogo.conf to tell SOGo.
The imap server can handle it (as evolution client is working), but as SOGo is 
not contacting it, it does not get the information.

Any help or idea on this will be appreciated.

Thank you.

Best regards,
Harald


Harald Wegscheider, BSc MA
Zentraler Informatikdienst / Zentrale Server
MONTANUNIVERSITÄT LEOBEN

Tel:  +43(0)3842/402-7541
Fax: +43(0)3842/402-7502


-- 
[email protected]
https://inverse.ca/sogo/lists

Reply via email to