View Issue Details

IDProjectCategoryView StatusLast Update
0001858SOGo Native Outlook Compatibility (obsolete)public2012-08-02 19:20
Reporteroooo1 Assigned Toludovic  
PrioritynormalSeveritycrashReproducibilityalways
Status closedResolutionduplicate 
Product Version2.0.0beta2 
Target Version2.0.0 
Summary0001858: SOPE/SOGo crashes Samba4 during user with its password differs from its login name using MS Outlook !
Description

All of this Samba4 beta1, Openchange & SOPE&SOGo downloaded from sogo.nu site as v2.0.0rc4 verison, Dovecot 2.0.19, Exim 4.76 are installed on Ubuntu 12.04
Server TLS, as client MS Outlook 2010 is used. Dovecot and Exim are authorized through built-in Samba4 LDAP backend.
At the moment there is other serious bug in SOPE/SOGo part of appliance what crashes Samba4 not to a Panic position, but however crashes Samba like that MS
Outlook doesn' t start anymore after that and MS Outlook is able to start after Samba4 restart only.

So, there are some users what are added to Samba4 and expanded for Openchange, at some of them password is the same with login name, at other password
differs from login name.
All users are successfully added to MS Outlook (control panel->mail->accounts->creates->Exchange->... and so on) , repeat, all users.
After that user with password equals with its login name is logged in to SOGo by MS Outlook successfully, and if it is first user login, mail folders are
created also.
And there is no Samba4 crash in this case.
But user with password differs from its login name is not able to log in to SOGo by MS Outlook successfully.
It seems that MS Outlook are openned, user actually can see mail folders list in MS Outlook, and it is all good thing in this case.
But actually user is not logged in to SOGo, can' t receive mail and connection with the appliance is broken down.
If it is first user login, mail folders are not created.
It is important that in case of using MS Outlook user with password differs from its login name is not authorized through IMAP4 (Dovecot) server (there is
wrong password message in IMAP server log file) that is user can' t pass IMAP4 server authorization if it uses MS Outlook.
But using MS Outlook user with password equals with its login is authorized through IMAP4 (Dovecot) server successfully that is such user (user has
pass=login) passes IMAP4 server authorization using MS Outlook.
And in case of situation described above (user wit password differs from its login uses MS Outlook) , connection with the appliance is lost with the
following error log messages (it is snapshot from big log) :

namespace is sogo:// and backend_uri is 'Administrator:Administrator@mail/folderINBOX/'
[2012/07/01 20:04:15, 0] MAPIStoreSOGo.m:155(sogo_backend_create_context)
[SOGo: sogo_backend_create_context:155]
2012-07-01 20:04:15.503 samba[19802] METHOD '+[MAPIStoreContext openContext:withURI:connectionInfo:andTDBIndexing:]' (226) -- uri: 'Administrator:Administrator@mail/folderINBOX/'
Jul 01 20:04:15 samba [19802]: <MAPIStoreMailFolder:0x8d56cf8:(null)> -init
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:680(EcDoRpc_process_transaction) MAPI Rop: 0x01 (8)
[2012/07/01 20:04:15, 0] mapiproxy/libmapistore/mapistore_interface.c:339(mapistore_del_context)
mapistore_del_context: context_id to del is 1
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:680(EcDoRpc_process_transaction) MAPI Rop: 0x02 (8)
[2012/07/01 20:04:15, 0] mapiproxy/libmapiproxy/mapi_handles.c:292(mapi_handles_add)
We have found free record 0x5
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/emsmdb/emsmdbp_object.c:457(emsmdbp_object_open_folder)
emsmdbp_object_open_folder: opening openchangedb folder
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/emsmdb/emsmdbp_object.c:413(emsmdbp_object_open_folder)
emsmdbp_object_open_folder: opening base mapistore folder
[2012/07/01 20:04:15, 0] mapiproxy/libmapistore/mapistore_backend.c:341(mapistore_backend_create_context)
namespace is sogo:// and backend_uri is 'Administrator@fallback/0x33031b0000000001/'
[2012/07/01 20:04:15, 0] MAPIStoreSOGo.m:155(sogo_backend_create_context)
[SOGo: sogo_backend_create_context:155]
2012-07-01 20:04:15.572 samba[19802] METHOD '+[MAPIStoreContext openContext:withURI:connectionInfo:andTDBIndexing:]' (226) -- uri: 'Administrator@fallback/0x33031b0000000001/'
Jul 01 20:04:15 samba [19802]: <MAPIStoreDBFolder:0x8dfe850:(null)> -init
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:680(EcDoRpc_process_transaction) MAPI Rop: 0x1c (16)
Jul 01 20:04:15 samba [19802]: <0x0x98d0cf8[MAPIStoreDBFolderTable]> -init
Jul 01 20:04:15 samba [19802]: <0x0x98d0cf8[MAPIStoreDBFolderTable]> -retain
Jul 01 20:04:15 samba [19802]: <0x0x98d0cf8[MAPIStoreDBFolderTable]> -release
Jul 01 20:04:15 samba [19802]: <0x0x98d0cf8[MAPIStoreDBFolderTable]> restriction set to EOQualifier: 805371935 = 'Conflicts'
Jul 01 20:04:15 samba [19802]: <0x0x98d0cf8[MAPIStoreDBFolderTable]> -release
Jul 01 20:04:15 samba [19802]: <0x0x98d0cf8[MAPIStoreDBFolderTable]> -dealloc
Jul 01 20:04:15 samba [19802]: <MAPIStoreDBFolder:0x8dfe850:0x33031b0000000001> METHOD '-[MAPIStoreFolder createFolder:withRow:andFID:]' (383)
/usr/local/samba/sbin/samba: Uncaught exception MAPIStoreIOException, reason: unable to fetch created folder
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/nspi/dcesrv_exchange_nsp.c:1394(dcesrv_exchange_nsp_unbind)
dcesrv_exchange_nsp_unbind
[2012/07/01 20:04:15, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:1962(dcesrv_exchange_emsmdb_unbind)
dcesrv_exchange_emsmdb_unbind

And after that MS Outlook can' t start normally, that is it can' t connect to the appliance with any user (if login name equals to password or not) .
MS Outlook can start normally (with user whom has login name = password) after Samba4 restarting only.

Speaking about login via Web GUI, it works any case.
User with its password equals its login name can login successfully, user with it password don' t equals its login name can login successfully also.
If it is first user login, in both cases, folders are created (if user logs in through Web GUI) .

All users can login via Web GUI even after Samba4 crash, mentioned above, that is:

  • attempt to login by MS Outlook with user with password differs from its login name;
  • Samba4 crashes;
  • even after that any user (login = pass or login != pass) can login successfully but via Web GUI only.

It is important that in case of using Web GUI user with password differs from its login name just as user with password equals with its login is authorized
through IMAP4 (Dovecot) server successfully that is all users passes successfully IMAP4 server authorization if it uses Web GUI.

Roughly speaking:

two user types with:
login=pass;
login!=pass or login<>pass.

two client types (login ways) :
MS Outlook;
Web GUI.

results:

login by MS Outlook:
user has login=pass -> login successful both to MS Outlook (see mail folders list) and to appliance (can receive mail) , mail folders are created (if it is
first login) , passing through IMAP4 server authorization, no Samba crash mentioned above;
user has login<>pass -> login unsuccessful to MS Outlook (you can see mail folders list but it is all you can) and to appliance (can not receive mail) , mail folders are not created (if it is first login) , no passing through IMAP4 server authorization, getting Samba crash mentioned above;
conclusion: MS Outlook doesn' t continue to work without Samba4 restarting.

login by Web GUI:
user has login=pass -> login successful both to Web GUI (see mail folders list) and to appliance (can receive mail) , mail folders are created (if it is
first login) , passing through IMAP4 server authorization, no Samba crash mentioned above;
user has login=pass -> login successful both to Web GUI (see mail folders list) and to appliance (can receive mail) , mail folders are created (if it is
first login) , passing through IMAP4 server authorization, no Samba crash mentioned above.
conclusion: Web GUI continues to work without Samba4 restarting.

TagsNo tags attached.

Relationships

duplicate of 0001906 closed Appliance of SOGo RC4, Samba4 a18, a20, b1, Cyrus SASL doesn' t work with Cyrus Imap. All authorized by built-in Samba4 LDAP. 

Activities

oooo1

oooo1

2012-07-02 10:09

reporter   ~0004100

May be make (change) handler exception that it handles such (earlier and below posted) exceptions in way displaying message "Cannot open your default e-mail folder" at Outlook 2010 start.

Snapshot from Samba4 log file, after user with username <> password tried to login to SOGo using MS Outlook 2010.

[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:680(EcDoRpc_process_transaction MAPI Rop: 0x01 (8)
[2012/07/02 13:47:16, 0] mapiproxy/libmapistore/mapistore_interface.c:339(mapistore_del_context)
mapistore_del_context: context_id to del is 1
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:680(EcDoRpc_process_transaction) MAPI Rop: 0x02 (8)
[2012/07/02 13:47:16, 0] mapiproxy/libmapiproxy/mapi_handles.c:292(mapi_handles_add)
We have found free record 0x5
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/emsmdbp_object.c:457(emsmdbp_object_open_folder)
emsmdbp_object_open_folder: opening openchangedb folder
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/emsmdbp_object.c:413(emsmdbp_object_open_folder)
emsmdbp_object_open_folder: opening base mapistore folder
[2012/07/02 13:47:16, 0] mapiproxy/libmapistore/mapistore_backend.c:341(mapistore_backend_create_context)
namespace is sogo:// and backend_uri is 'Administrator@fallback/0x3b031c0000000001/'
[2012/07/02 13:47:16, 0] MAPIStoreSOGo.m:155(sogo_backend_create_context)
[SOGo: sogo_backend_create_context:155]
2012-07-02 13:47:16.088 samba[32717] METHOD '+[MAPIStoreContext openContext:withURI:connectionInfo:andTDBIndexing:]' (226) -- uri: 'Administrator@fallback/0x
3b031c0000000001/'
Jul 02 13:47:16 samba [32717]: <MAPIStoreDBFolder:0xb3371f8:(null)> -init
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:680(EcDoRpc_process_transaction)
MAPI Rop: 0x1c (16)
Jul 02 13:47:16 samba [32717]: <0x0x9de0858[MAPIStoreDBFolderTable]> -init
Jul 02 13:47:16 samba [32717]: <0x0x9de0858[MAPIStoreDBFolderTable]> -retain
Jul 02 13:47:16 samba [32717]: <0x0x9de0858[MAPIStoreDBFolderTable]> -release
Jul 02 13:47:16 samba [32717]: <0x0x9de0858[MAPIStoreDBFolderTable]> restriction set to EOQualifier: 805371935 = 'Conflicts'
Jul 02 13:47:16 samba [32717]: <0x0x9de0858[MAPIStoreDBFolderTable]> -release
Jul 02 13:47:16 samba [32717]: <0x0x9de0858[MAPIStoreDBFolderTable]> -dealloc
Jul 02 13:47:16 samba [32717]: <MAPIStoreDBFolder:0xb3371f8:0x3b031c0000000001> METHOD '-[MAPIStoreFolder createFolder:withRow:andFID:]' (383)
/usr/local/samba/sbin/samba: Uncaught exception MAPIStoreIOException, reason: unable to fetch created folder
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/nspi/dcesrv_exchange_nsp.c:1394(dcesrv_exchange_nsp_unbind) dcesrv_exchange_nsp_unbind
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:1962(dcesrv_exchange_emsmdb_unbind) dcesrv_exchange_emsmdb_unbind
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/nspi/dcesrv_exchange_nsp.c:1394(dcesrv_exchange_nsp_unbind) dcesrv_exchange_nsp_unbind
[2012/07/02 13:47:16, 0] mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:1962(dcesrv_exchange_emsmdb_unbind) dcesrv_exchange_emsmdb_unbind

wsourdeau

wsourdeau

2012-07-11 19:38

viewer   ~0004122

Please note that Samba 4 beta1 is not supported yet.

oooo1

oooo1

2012-07-12 07:18

reporter   ~0004126

When do you plan to support it or what version after alpha18 are you going to support first ?

wsourdeau

wsourdeau

2012-07-13 13:15

viewer   ~0004139

I think I know what the problem is.... You need to configure Dovecot to accept passwordless authentication from the host where OpenChange is running. And obviously prevent other services to login to the same port.

There is no way we can know the real user's password, which is why we reuse the username as password internally, both to accomodate our demo versions and to provide a fake password to IMAP servers.

With Cyrus you can tell it to ignore the password, I believe you can do something similar via an authentication script.

oooo1

oooo1

2012-07-13 13:40

reporter   ~0004140

At the mopment I have made that Dovecot accept user authentication from localhost only (127.0.0.1) where appliance are installed with login, with any pass (even not right) , but password must be anyway, it must not be empty.
And Dovecot is authorized via built-in Samba4 LDAP backend via built-in DOvecot SASL.

wsourdeau

wsourdeau

2012-07-13 13:46

viewer   ~0004141

Ok, that's very simple to fix.

oooo1

oooo1

2012-07-23 20:22

reporter   ~0004210

The same situation was repiated with Samba4 alpha18, alpha20 also, not only with beta1.

Issue History

Date Modified Username Field Change
2012-07-01 19:12 oooo1 New Issue
2012-07-02 10:09 oooo1 Note Added: 0004100
2012-07-11 19:38 wsourdeau Note Added: 0004122
2012-07-12 07:18 oooo1 Note Added: 0004126
2012-07-13 13:15 wsourdeau Note Added: 0004139
2012-07-13 13:40 oooo1 Note Added: 0004140
2012-07-13 13:46 wsourdeau Note Added: 0004141
2012-07-23 20:22 oooo1 Note Added: 0004210
2012-07-25 20:08 ludovic Target Version => 2.0
2012-08-02 19:19 ludovic Relationship added duplicate of 0001906
2012-08-02 19:19 ludovic Duplicate ID 0 => 1906
2012-08-02 19:19 ludovic Status new => resolved
2012-08-02 19:19 ludovic Resolution open => duplicate
2012-08-02 19:19 ludovic Assigned To => ludovic
2012-08-02 19:20 ludovic Status resolved => closed