steve
(steve)
October 28, 2024, 8:23pm
1
Hi,
Before Nethserver 7, I set users to log in to SOGo with their full email address instead of their username. This was very useful, because I also changed the user’s email address in phpldapadmin.
For the NS8, I would like to set the user to log in to SOGo with their full email address, but I can’t, even though I have already reviewed the entire SOGo documentation. If I set it up, it is not possible to log in with either a username or an email address.
What could be the problem?
The other is that I can’t find the phpldapadmin module, maybe it hasn’t been made yet?
Thanks for the help.
stephdl
(Stéphane de Labrusse)
October 28, 2024, 8:29pm
3
For what i recall login are from ldap so your filter does not match probably
steve
(steve)
October 29, 2024, 1:36pm
4
stephdl:
Search after ns8-lam
Thank you @stephdl I foun it and installed. I set up it and I can access it on browser but I can’t login.
Who is the admin and what is the admin’s password?
If I enter the cluster admin password, the following error message appears:
Cannot connect to specified LDAP server. Please try again.
(-1) LDAP error, server says: Can't contact LDAP server - Can't contact LDAP server
I did the same as with the NS7.
I modified /home/sogo1/.config/templates/sogo.conf because every time SOGo starts it uses this to set the config.
Under 45user_source id = AD_Users; After type = ldap, I made the following changes:
IDFieldName = $CustomEmailField;
IMAPLoginFieldName = $CustomEmailField;
bindFields = $CustomEmailField;
MailFieldNames = ("$CustomEmailField");
and under 50webinterface I added the following line:
SOGoForceIMAPLoginWithEmail = YES;
however, it is not possible to connect with either the username or the user’s full email address.
Do you have an idea for a solution in both cases?
Thank you very much for your help.
stephdl
(Stéphane de Labrusse)
October 29, 2024, 1:49pm
5
[root@r3-pve ~]# cat /home/sogo2/.config/state/discovery_mail.env
SOGO_IMAP_PORT=143
SOGO_SMTP_PORT=10587
SOGO_DEFAULT_HOST=10.5.4.1
SOGO_SMTP_SERVER=10.5.4.1
[root@r3-pve ~]# cat /home/sogo2/.config/state/discovery_ldap.env
SOGO_LDAP_PORT=20001
SOGO_LDAP_USER=cn=ldapservice,dc=rocky9-pve3,dc=org
SOGO_LDAP_HOST=127.0.0.1
SOGO_LDAP_PASS=POtwvb-CaX4IvJ3BDF5:xL-bBplWIBIa
SOGO_LDAP_SCHEMA=rfc2307
SOGO_LDAP_BASE=dc=rocky9-pve3,dc=org
steve
(steve)
October 29, 2024, 2:00pm
6
Unfortunately, I don’t have similar .env files in my library.
Only these files can be found here:
[root@ns8 ~]# ls /home/sogo1/.config/state/config
cron-sogo sieve.creds sogo.conf SOGo.conf sogo.conf_orig
Did I set something wrong?
stephdl
(Stéphane de Labrusse)
October 29, 2024, 3:18pm
7
[root@r3-pve ~]# find /home/sogo2/.config/state/
/home/sogo2/.config/state/
/home/sogo2/.config/state/CACHEDIR.TAG
/home/sogo2/.config/state/environment
/home/sogo2/.config/state/agent.env
/home/sogo2/.config/state/apitoken.cache
/home/sogo2/.config/state/config
/home/sogo2/.config/state/config/sogo.conf
/home/sogo2/.config/state/config/SOGo.conf
/home/sogo2/.config/state/config/cron-sogo
/home/sogo2/.config/state/config/sieve.creds
/home/sogo2/.config/state/backups
/home/sogo2/.config/state/discovery_mail.env
/home/sogo2/.config/state/discovery_ldap.env
do not know what you did, I just installed this morning sogo to test version 5.11.2, nothing done, just configured it to link it to a mail server
steve
(steve)
October 29, 2024, 4:27pm
8
Oh sure, I haven’t set up mail server access yet, I’m just testing SOGo…
When I want to enter sogo, I can’t use either the username or the user’s email address. The log contains the following error message:
2024-10-29T17:19:16+01:00 [1:sogo1:sogo-app] Oct 29 16:19:16 sogod [18]: <0x0x559a2a787be0[LDAPSource]> <NSException: 0x559a2aeeff20> NAME:LDAPException REASON:operation bind failed: Invalid credentials (0x31) INFO:{"error_code" = 49; login = "samaccountname=bacilus@mydomain.lan,dc=ad,dc=mydomain,dc=lan"; }
2024-10-29T17:19:16+01:00 [1:sogo1:sogo-app] Oct 29 16:19:16 sogod [18]: [ERROR] <0x0x559a2a8ff200[LDAPSource]> Could not bind to the LDAP server $ldapURI (389) using the bind DN: $bindDN
2024-10-29T17:19:16+01:00 [1:sogo1:sogo-app] Oct 29 16:19:16 sogod [18]: [ERROR] <0x0x559a2a8ff200[LDAPSource]> <NSException: 0x559a2aeef060> NAME:LDAPException REASON:operation bind failed: Can't contact LDAP server (0xFFFFFFFF) INFO:{"error_code" = "-1"; login = "$bindDN"; }
2024-10-29T17:19:16+01:00 [1:sogo1:sogo-app] Oct 29 16:19:16 sogod [18]: SOGoRootPage Login from '192.168.1.2, 10.0.2.100' for user 'bacilus@mydomain.lan' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0
Other. Can you say something about the LAM login problem?
Thank you for your help @stephdl
stephdl
(Stéphane de Labrusse)
October 29, 2024, 4:31pm
9
read the tooltips in the UI ?
maybe we can do it better obviously ;p
mrmarkuz
(Markus Neuberger)
October 29, 2024, 4:51pm
10
You need to define an LDAP/AD user in the NS8 LAM app settings under “Allowed LDAP user list”, then you should be able to login with that user.
steve
(steve)
October 29, 2024, 5:40pm
11
Dear @stephdl
Yes, I read it or did I miss something?
What are you thinking?
steve
(steve)
October 29, 2024, 5:48pm
12
Thank you @mrmarkuz
I set up the LDAP user in LAM:
But I can’t log in with the lam password or the cluster admin password or the master password set after entering the LAM configuration.
What password should I enter here?
Thank you for your answer.