Little roadmap nethserver SOGo module

[mark_nl (Mark Verlinde)]

@dev_team or others

is the sAMAccountName the full username ie user@domain or just user?

asking to get nethserver-sogo-delete-user working.

[davidep (Davide Principi)]

@mark_nl

is the sAMAccountName the full username ie user@domain or just user?

IIRC that attribute stores the old NT username. Thus it has no @domain suffix.

I’m trying to configure sssd to support also the traditional “short” username. Please comment here:

Upgrade paths to ns7

The user name format changed from the traditional ns6 username format, to the sssd upstream default username@domain format. As we’ve seen here, this is an issue for everyone trying to log on the machine with samba or ssh, or even the server-manager: the @domain suffix is frequently omitted and nothing works as expected. Moreover, when migrating from an existing ns6 environment, any network client is configured with the traditional username format, and for this reason it should be reconfig…

[mark_nl (Mark Verlinde)]

@mark_nl

Just thinking out loud about the virtualhost configuration;

SOGo is by default exposed to all (virtual)hosts, ie all FQDN/SOGo known by apache.

We don’t need the Virtualhosts db property for SOGo Or use it for one exclusive virtualhost and stop exposing it to all other (virtual)hosts;use the default SSL certificate or (if present) a certificate called sogo.crt

What do you think?Do this?

(Thx to all of you, It is more fun working on something appreciated)

More Votes … last thing to round up

[mark_nl (Mark Verlinde)]

@giacomo

You’re doing a great job, ping me (even in pvt) if you need help on specific topics

Almost done, for none detail i like your help (no rush),
Its the Dashboard (application) module in this:

public function getInfo()
{
     $host = explode(':',$_SERVER['HTTP_HOST']);
     return array(
        'url' => "https://".$host[0]."/SOGo/"
     );
}

I need (pseudo code)

if sogod db prop 'VirtualHost' exists;
      $host = sogod db prop 'VirtualHost';
else
    $host = explode(':',$_SERVER['HTTP_HOST']);

EDIT and just don’t get what is wrong with this perl:
We need some of some.crt

if ($sogo_cert =~ /./) {
       $sogo_cert = (split(/./, $sogo_cert))[0];
    }

Escape the . \.

thanx in advance.

[giacomo (Giacomo Sanchietti)]

You need something like this (not very elegant):

public function getInfo()
{
     $vhost = $this->getPlatform()->getDatabase('configuration')->getProp('sogod,'VirtualHost');
     if ($vhost) {
         return array('url' => "https://".$vhost."/SOGo/");
     } else {
         $host = explode(':',$_SERVER['HTTP_HOST']);
         return array(
            'url' => "https://".$host[0]."/SOGo/"
        );
     }
}

@mark_nl

EDIT and just don’t get what is wrong with this perl:We need some of some.crt

Why not use the default certificate? Just use /etc/pki/tls/certs/localhost.crt

[mark_nl (Mark Verlinde)]

Thanx!

@giacomo

Why not use the default certificate? Just use /etc/pki/tls/certs/localhost.crt

its a changed functionality
implement exclusive virtualhost · markVnl/nethserver-sogo@04c5ef0 · GitHub[quote=“mark_nl, post:16, topic:4783”]
and is accessible
[/quote]
Oops and is not accessible

[giacomo (Giacomo Sanchietti)]

If I understand correctly, you would give the chance to choose a custom certificate for SOGo virtual host.
I’m not against it, but I can’t figure out why you need it.

Let’s assume this scenario:

• Server FQDN: mymachine.nethserver.org
• SOGo-only virtual host: mysogo.nethserver.org

If you need a valid SSL certificate for SOGo virtual host, you can simply create a new Let’s Encrypt certificate with multiple domain names and use it also for the specific virtual host.
Please, also take note that you should take care of the chain file

[mark_nl (Mark Verlinde)]

@giacomo

Let’s assume this scenario:- Server FQDN: mymachine.nethserver.org- SOGo-only virtual host: mysogo.nethserver.org

User case i had in mind was mysogo.something.complexly.diferent.com (ie a specific mail domain)

@giacomo

Please, also take note that you should take care of the chain file

Tnx,

[giacomo (Giacomo Sanchietti)]

@mark_nl

User case i had in mind was mysogo.something.complexly.diferent.com (ie a specific mail domain)

LE works even with different domains

[mark_nl (Mark Verlinde)]

@giacomo

LE works even with different domains

EDIT forgot this: Still have to look in LE

I did not succeed is redirecting https: https://mysogo.nethserver.org > https://somthing_else.

The only way i figured out to get this working is warping the hole httpd sogo.conf in a virtual host,
or make a virtualhost in the service manager for this sole purpose.
And a personal preference, i dont like SOGo to be exposed to all other hosts. Note (as is) https://mysogo.nethserver.org/SOGo doesn’t get redirected.
Have to say, webthingy’s is my blind spot so open for suggestions

[giacomo (Giacomo Sanchietti)]

@mark_nl

I did not succeed is redirecting https: https://mysogo.nethserver.org > https://somthing_else.

Have you already tried to put it inside the /etc/httpd/conf.d/default-virtualhost.inc template?

Rewrite rules are a little bit tricky

[GG_jr (Gabriel GHEORGHIU)]

Huge work Mark!

Even till here you deserve a big with (Heineken, Bavaria, Grolsch?)

[mark_nl (Mark Verlinde)]

@giacomo

Have you already tried to put it inside the /etc/httpd/conf.d/default-virtualhost.inc template?

Rewrite rules are a little bit tricky

Noticed this, @davidep and @stephdl pointed me in the right direction
Think it’s quite clean now (dropped proxypasses for dav auto_discovery in favor of RewriteMatch) and it so far it works in all scenario’s.

I already known there are some optimizations in expanding the template, they do not change the result.

@stephdl what d you think, upload it in nethforg testing to get some feed back or invite some people to build and review this?

[mark_nl (Mark Verlinde)]

@GG_jr

Heineken, Bavaria, Grolsch

Working in Germany until the end of the year, das wird ein Deutsches Bier.

[GG_jr (Gabriel GHEORGHIU)]

@mark_nl

Working in Germany until the end of the year, das wird ein Deutsches Bier.

If you did this effort for us (NethServer SOGo module), we will make the effort to fill with beer from Netherlands!
It will be easier to bear being away from home!

[stephdl (Stéphane de Labrusse)]

@mark_nl

@stephdl what d you think, upload it in nethforg testing to get some feed back or invite some people to build and review this?

You should propose built rpm for testing purposes, src.rpm are only for developers. Concerning Nethforge, I’m a bad boy, I don’t use it so much, I propose rpms from my own repository, but you can use a simple web folder somewhere and ask to install them by yum.

[mark_nl (Mark Verlinde)]

Tested different scenarios one more time, no failures.
I have to admid 90% of the testing is done on a OpenLdap configuration.

Decided to upload them to nethforg testing.

yum upgrade --enablerepo=nethforge-testing nethserver-sogo

Login on Ldap is with full user name to (eg user@domian)

[alefattorini (Alessio Fattorini)]

I made my tests on an AD configuration. Thanks again for your work

[mark_nl (Mark Verlinde)]

@mark_nl

ahah: now get your question, yes it’s 644 by design and i am going to solve this in the new nethserver-sogo package.We need group read permissions for the the sogo group for easy use of sogo-tool. sogo.conf should be owned by root:sogo, others should not have read permissions.

which file / template does determine the permissions of the expanded template?
A workaround is a little script containing chmod 640 /etc/sogo/sogo.conf ;
Not so elegant…

[davidep (Davide Principi)]

templates.metadata/

http://docs.nethserver.org/projects/nethserver-devel/en/latest/templates.html#template-permissions-and-ownership-templates-metadata

For instance

NethServer/nethserver-directory/blob/master/root/etc/e-smith/templates.metadata/etc/libuser.conf