Koozali.org: home of the SME Server

Smeserver-sogo : Need tests

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #30 on: October 11, 2014, 10:41:06 AM »
I suppose that you have reconfigured the server with 'post-upgrade & reboot', if yes then the new package smeserver-sogo is not in cause
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Smeserver-sogo : Need tests
« Reply #31 on: October 11, 2014, 10:55:51 AM »
Definetly..
--
qui scribit bis legit

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Smeserver-sogo : Need tests
« Reply #32 on: October 11, 2014, 11:15:54 AM »
Further testing..

If I follow wiki and

Create a group
Reset the users password
Add user to the group

Then I am able to login to sogo using an existing user HOWEVER as soon as I do a reboot the behaviour returns ie can't login to sogo
--
qui scribit bis legit

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #33 on: October 11, 2014, 02:15:28 PM »
Hi
If you try to downgrade sogo, is this workable

Code: [Select]
yum downgrade sogo\*-2.2.8 --enablerepo=sogo
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #34 on: October 11, 2014, 03:03:10 PM »
I could be interested also to see if tables are well created in mysql

Code: [Select]
# mysql
# use sogo;
# show tables;
+-----------------------------+
| Tables_in_sogo              |
+-----------------------------+
| sogo_alarms_folder          |
| sogo_folder_info            |
| sogo_sessions_folder        |
| sogo_user_profile           |
| sogohelene00160ab7fd5       |
| sogohelene00160ab7fd5_acl   |
| sogohelene00160ab7fd5_quick |
| sogohelene00176d7e096       |
| sogohelene00176d7e096_acl   |
| sogohelene00176d7e096_quick |
+-----------------------------+
10 rows in set (0.01 sec)

As you can see the user 'helene' is the unique user of sogo
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Smeserver-sogo : Need tests
« Reply #35 on: October 11, 2014, 04:05:36 PM »
Will downgrade next

mysql> show tables;
+-----------------------------+
| Tables_in_sogo              |
+-----------------------------+
| sogo_alarms_folder          |
| sogo_folder_info            |
| sogo_sessions_folder        |
| sogo_user_profile           |
| sogoterry001788627f5        |
| sogoterry001788627f5_acl    |
| sogoterry001788627f5_quick  |
| sogoterry20016ae62fa8       |
| sogoterry20016ae62fa8_acl   |
| sogoterry20016ae62fa8_quick |
| sogoterry30011a529a0d       |
| sogoterry30011a529a0d_acl   |
| sogoterry30011a529a0d_quick |
| sogoterry40015616b892       |
| sogoterry40015616b892_acl   |
| sogoterry40015616b892_quick |
| sogoterry4002440bbcf2       |
| sogoterry4002440bbcf2_acl   |
| sogoterry4002440bbcf2_quick |
+-----------------------------+
19 rows in set (0.00 sec)

Same behaviour from downgraded version
« Last Edit: October 11, 2014, 04:19:22 PM by TerryF »
--
qui scribit bis legit

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #36 on: October 11, 2014, 05:50:54 PM »
Well, could be nice that I can have access directly to the server by ssh/https, is this possible. Of course I need a sudo access and with the luck I have this last time, ma new nickname is 'dd'.....you are warned.

@daniel/sogo_gurus: No ideas of what could be explored, I cannot reproduce here.
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline luism

  • 5
  • +0/-0
Re: Smeserver-sogo : Need tests
« Reply #37 on: October 11, 2014, 08:34:03 PM »
Hi, I'm back,

I did several tests with different versions of sogo, with and without VBoxAdditions, with 2 different versions of VirtualBox in 2 different hosts, and always got the same result.

Seems to me that the problem is related to LDAP authentication, so I went looking for something in /var/log/ldap/current.log

Before the reboot when I login in sogo, the log file shows
@40000000543967711bb3aacc conn=1036 fd=13 ACCEPT from IP=127.0.0.1:38704 (IP=0.0.0.0:389)
@40000000543967711bb7d534 conn=1036 op=0 BIND dn="uid=test2,ou=users,dc=server1,dc=pt" method=128
@40000000543967711bcaad6c conn=1036 op=0 BIND dn="uid=test2,ou=Users,dc=server1,dc=pt" mech=SIMPLE ssf=0

@40000000543967711bcc7e44 conn=1036 op=0 RESULT tag=97 err=0 text=
@40000000543967711bd88c34 conn=1036 op=1 UNBIND
@40000000543967711bd8c6cc conn=1036 fd=13 closed
@4000000054396914384f003c conn=1037 fd=13 ACCEPT from IP=127.0.0.1:38719 (IP=0.0.0.0:389)
@4000000054396914385c2b54 conn=1037 op=0 BIND dn="uid=test2,ou=users,dc=server1,dc=pt" method=128
@4000000054396914385c5e1c conn=1037 op=0 BIND dn="uid=test2,ou=Users,dc=server1,dc=pt" mech=SIMPLE ssf=0

@4000000054396914385c8cfc conn=1037 op=0 RESULT tag=97 err=0 text=
@4000000054396914386468b4 conn=1037 op=1 UNBIND
@400000005439691438647084 conn=1037 fd=13 closed

When I reboot
@40000000543969d5223cf9fc slapd shutdown: waiting for 0 operations/tasks to finish
@40000000543969d52b647794 slapd stopped.

When I try to login again in sogo with no success
@4000000054396a5a29a2da04 conn=1001 fd=13 ACCEPT from IP=127.0.0.1:47155 (IP=0.0.0.0:389)
@4000000054396a5a29a65c74 conn=1001 op=0 BIND dn="cn=test2,ou=groups,dc=server1,dc=pt" method=128
@4000000054396a5a29aca9bc conn=1001 op=0 RESULT tag=97 err=49 text=
@4000000054396a5a2abd23a4 conn=1001 op=1 UNBIND
@4000000054396a5a2abd3b14 conn=1001 fd=13 closed
@4000000054396a5a2ad5dbc4 conn=1002 fd=13 ACCEPT from IP=127.0.0.1:47156 (IP=0.0.0.0:389)
@4000000054396a5a2ad850ac conn=1002 op=0 BIND dn="uid=test2,ou=users,dc=server1,dc=pt" method=128
@4000000054396a5a2ade4bec conn=1002 op=0 RESULT tag=97 err=49 text=
@4000000054396a5a2aea1f44 conn=1002 op=1 UNBIND
@4000000054396a5a2aeca7b4 conn=1002 fd=13 closed


I do not know if it's important, as I have no knowledge of LDAP.
Some LDAP guru could check this ?

Offline bosco555

  • ****
  • 152
  • +0/-0
Re: Smeserver-sogo : Need tests
« Reply #38 on: October 17, 2014, 10:05:04 AM »
Hi All,

Issue still there, new user, passwd, group able to log in to sogo, reboot the server, disaster!! no login possible...

thanks to all for the work you guys are doing...

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #39 on: October 17, 2014, 05:57:03 PM »
Issue still there, new user, passwd, group able to log in to sogo, reboot the server, disaster!! no login possible...
Do your Installation is a fresh install or it is an upgrade from an older one.

please do and return
Code: [Select]
rpm -qa | grep -i sogo
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #40 on: October 19, 2014, 11:12:42 PM »
For those who have this problem, can you install phpldapadmin and see if you can log and parse your ldap database, I have this error 'Unable to login.
Your HTTP based authentication is not accepted by the LDAP server'

Moreover I cannot see users settled in the server-manager with phpldapadmin (ou=Users)

In clear I worry that the problem comes from the core ldap and not sogo. I have tested on the VM of terry and compared with my server....My problem is that this bug is not easily reproducible

Please test and report
« Last Edit: October 19, 2014, 11:21:19 PM by stephdl »
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Smeserver-sogo : Need tests
« Reply #41 on: October 19, 2014, 11:47:12 PM »
A bug should be opened to track this kind of issue. The forum is not a good place to diagnose. It can be opened against the SOGo contrib, and moved to the core is the problem appears to be in LDAP. When opening the bug, please attach your ldap logs snippet when trying to login (the same as posted by luism). You can also check on the command line:

Code: [Select]
ldapsearch -x -D cn=root,dc=server1,dc=pt -w $(cat /etc/pam_ldap.secret) -b ou=Users,dc=domain,dc=tld "uid=test2"

You can also try to bind with the user2 on LDAP:
Code: [Select]
ldapsearch -x -D uid=user2,ou=Users,dc=server1,dc=pt -W

And check if there's any output or an error message
C'est la fin du monde !!! :lol:

Offline stephdl

  • *
  • 1,519
  • +0/-0
    • Linux et Geekeries
Re: Smeserver-sogo : Need tests
« Reply #42 on: October 20, 2014, 12:06:56 AM »
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Smeserver-sogo : Need tests
« Reply #43 on: October 26, 2014, 02:17:40 AM »
bug opened http://bugs.contribs.org/show_bug.cgi?id=8611

For this interested in Sogo there has been some progress..
--
qui scribit bis legit