View Issue Details

IDProjectCategoryView StatusLast Update
0002374SOGoWeb Generalpublic2014-06-02 20:22
Reporterfgruel Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionno change required 
Summary0002374: First login not possible due to ressource ...
Description

Here is the configuration :
-debian 6.0.7
-Sogo 2.0.7-1

Ldap backend with Users and ressources in the same addressbook define as is :
{
CNFieldName = cn;
IDFieldName = uid;
MailFieldNames = (
mail,
mailAlternateAddress
);
MultipleBookingsFieldName = Multiplebookings;
UIDFieldName = uid;
baseDN = "ou=users,dc=company,dc=tld";
bindFields = (
mail,
uid
);
canAuthenticate = YES;
displayName = "utilisateurs";
filter = "((objectClass='posixAccount') and accountStatus='active') and (mail='*')) or ((objectClass='CalendarResource'))";
hostname = ldap;
id = CompanyUsers;
isAddressBook = YES;
kindFieldName = kind;
}

here is an ldif entry for ressource
/***
dn: uid=salle.bellecour,ou=Users,dc=company,dc=tld
objectClass: person
objectClass: organizationalPerson
objectClass: CalendarResource
objectClass: inetOrgPerson
objectClass: top
objectClass: calEntry
cn: salle bellecour (Salle de reunion services)
sn: Salle bellecour
displayName: Salle bellecour
Kind: thing
mail: salle.bellecour@company.tld
Multiplebookings: 1
physicalDeliveryOfficeName: SIEGE
uid: salle.bellecour
userPassword:: e1NTSEF9WityOVF3cVl3MEhxRUp5Wm9ZK2dnU3l4Z0RJUDlCOTg4MVIraUE9P

***/

When a new user try to connect for the very first time I need to move my ressources to a temporary OU not known by sogo address book otherwise it is not possible to login.

Here come an extract of the error log :

Jul 25 14:53:04 sogod [22292]: |SOGo| starting method 'POST' on uri '/SOGo/connect'
Jul 25 14:53:04 sogod [22292]: |SOGo| lookup name: SOGo
Jul 25 14:53:04 sogod [22292]: |SOGo| did not find key 'SOGo' in SoClass: <0x0x7fb9e6884d40[SoObjCClass]: super=0x0x7fb9e6883f50 objc=SOGo slots=connect,GET,view,casProxy,index,saml2-signon-post,changePassword,saml2-metadata,loading,toolbar>
Jul 25 14:53:04 sogod [22292]: |SOGo| looked up value: (nil)
Jul 25 14:53:04 sogod [22292]: |SOGo| lookup in root object: (nil)
Jul 25 14:53:04 sogod [22292]: |SOGo| GOT: (nil)
Jul 25 14:53:04 sogod [22292]: |SOGo| matched appname: SOGo
Jul 25 14:53:04 sogod [22292]: |SOGo| => rewrote value: <SOGo[0x0x7fb9e6903700]: name=SOGo>
Jul 25 14:53:04 sogod [22292]: |SOGo| lookup name: connect
Jul 25 14:53:04 sogod [22292]: |SOGo| looked up value: <0x0x7fb9e6dc7ec0[SoPageInvocation]: class=SOGoRootPage action=connect bound instantiated product=<0x0x7fb9e693f1d0[SoProduct]: loaded code-loaded bundle=/usr/lib/GNUstep/SOGo/MainUI.SOGo #classes=8 #categories=4 rm=0x0x7fb9e6941910>>
Jul 25 14:53:04 sogod [22292]: |SOGo| GOT: <0x0x7fb9e6dc7ec0[SoPageInvocation]: class=SOGoRootPage action=connect bound instantiated product=<0x0x7fb9e693f1d0[SoProduct]: loaded code-loaded bundle=/usr/lib/GNUstep/SOGo/MainUI.SOGo #classes=8 #categories=4 rm=0x0x7fb9e6941910>>
Jul 25 14:53:04 sogod [22292]: <0x0x7fb9e6e55cf0[NGLdapConnection]> Using ldap_init (deprecated) for LDAP host:port ldap:389
Jul 25 14:53:04 sogod [22292]: <0x0x7fb9e6d106c0[LDAPSource]> <NSException: 0x7fb9e6cf0e40> NAME:LDAPException REASON:operation bind failed: Invalid credentials (0x31) INFO:{login = "uid=aressource,ou=users,dc=company,dc=domain"; }

==> "uid=aressource,ou=users,dc=company,dc=domain" is a ressource of my OU and is not the uid I try to log with ...

Jul 25 14:53:04 sogod [22292]: SOGoRootPage Login from '10.169.131.84' for user 'user' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0

==> 'user' is the user I try to log with

Jul 25 14:53:04 sogod [22292]: |SOGo| request took 0.004268 seconds to execute
10.169.131.84 - - [25/Jul/2013:14:53:04 GMT] "POST /SOGo/connect HTTP/1.1" 403 34/38 0.005 - - 0

I've also see that no query is done to the ldap server during this login to the webmail ...

Don't hesitate to contact me for further informations.

TagsNo tags attached.

Relationships

related to 0002375 closed Not possible to suscribe to to different ressource calendar 

Activities

Christian Mack

Christian Mack

2013-07-26 15:23

developer   ~0005769

What email address does this uid=aressource,ou=users,dc=company,dc=domain have?
Does it by chance match the username you try to log in?

fgruel

fgruel

2013-07-29 08:16

reporter   ~0005770

Yes, we're lucky !?

the email is aressource@company.tld

Christian Mack

Christian Mack

2013-07-29 08:35

developer   ~0005771

Does this ressource have an mailAlternateAddress entry?

fgruel

fgruel

2013-07-29 08:47

reporter   ~0005772

No, and he doesn't have a mailbox at all !

ludovic

ludovic

2013-08-09 13:20

administrator   ~0005806

Sniff the LDAP traffic when that happens (logging in wit a new user an getting the error in SOGo) and attach the whole pcap to this ticket.

Issue History

Date Modified Username Field Change
2013-07-25 14:08 fgruel New Issue
2013-07-26 15:23 Christian Mack Note Added: 0005769
2013-07-29 08:16 fgruel Note Added: 0005770
2013-07-29 08:35 Christian Mack Note Added: 0005771
2013-07-29 08:47 fgruel Note Added: 0005772
2013-08-09 13:20 ludovic Note Added: 0005806
2013-08-12 12:40 ludovic Status new => closed
2013-08-12 12:40 ludovic Resolution open => no change required
2013-08-12 12:40 ludovic Relationship added related to 0002375
2014-06-02 18:37 ludovic Target Version => 2.2.5
2014-06-02 20:22 ludovic Target Version 2.2.5 =>