26

Re: iRedMail-0.9.0 has been released.

ZhangHuangbin wrote:

No idea at all. I suggest you contact Ubuntu package maintainer instead.

Thank you. I like iRedMail and your short response time is ideal.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

27 (edited by theolmue 2015-01-13 17:35:04)

Re: iRedMail-0.9.0 has been released.

Hi,
the error
-su: 70: Syntax error: Bad fd number
dpkg: error processing package spamassassin (--configure):
subprocess installed post-installation script returned error exit status 2
is caused by choosen shell.

I debugged /var/lib/dpkg/info/spamassassin.postinst and found line 29 raising the error:

su - $OWNER -c "sa-update --gpghomedir /var/lib/spamassassin/sa-update-keys \
--import /usr/share/spamassasini/GPG.KEY"

A bit testing shows: It is impossible to do

su - $OWNER -c "ANNY COMMAND"

$OWNER is debian-spamd. I checked getent passwd and found /bin/sh as shell for debian-spamd. /bin/sh is linked to /bin/dash. iRedMail.sh was executed in /bin/bash so I changed shell of debian-spamd to /bin/bash. Now I was able to execute the failing command.
User debian-spamd is created by the script /var/lib/dpkg/info/spamassassin.postinst if it does not exist. So I used a fresh Ubuntu 14.04.1 and created user debian-spamd like line 7/8 except I set bash as shell. Then I started installation of iRedMail and it worked like a charm.

I have no idea, why /bin/dash does not work, but using bash instead is a nice workaround for me. So perhaps you like to add an extra line to iRedMail to create user debian-spamd before installation of spamassasin.

I have no hope, that Canaonical fixes this bug in a short time. They are not as flexible as you.


Edit:
I just posted this bug on
https://lists.ubuntu.com/archives/ubunt … 15281.html
Hope Canonical will fix it.

28

Re: iRedMail-0.9.0 has been released.

Dash has different syntax than bash, that's why we clearly mention you must execute iRedMail installer with "bash iRedMail.sh".

29 (edited by buzzzo 2015-01-17 00:51:12)

Re: iRedMail-0.9.0 has been released.

ZhangHuangbin wrote:

Excuse me, what do you mean "LDAP group acl" and "booking resource"?

GROUP ACL

Suppose we have a calendar and would like to share it whith our team.
Then to achieve this i would create an ldap group called "team" put by user (email addresses) inside it
and assign the right permissions by binding the group to the calendar.

This is supported in SOGo by using standard "memberof" ldap attribute .
Your ldap schema does not support this (you have the concept of mailinglist that could be assimilated to the concept of group)

RESOURCE BOOKING

Suppose we have a meeting room and we need to manage the booking of it.
This is supported by SOGo

Personally I think the first think you would implement is Group ACL, is a missing feature very important for a proper  integration.
You would implement it by extending your ldap schema and manage the groups via Iredmailpro just like current
mailinglist management.

Thx

30

Re: iRedMail-0.9.0 has been released.

buzzzo wrote:

GROUP ACL
Suppose we have a calendar and would like to share it whith our team.
Then to achieve this i would create an ldap group called "team" put by user (email addresses) inside it
and assign the right permissions by binding the group to the calendar.
This is supported in SOGo by using standard "memberof" ldap attribute .
Your ldap schema does not support this (you have the concept of mailinglist that could be assimilated to the concept of group)

iRedMail doesn't use 'memberOf' or 'uniqueMember' attributes to store membership, so i'm afraid that this is impossible without maintaining them additionally.

OpenLDAP has a default attribute "member" for membership, you must use full dn as value. If you moved an object to another container, you have to update value of attribute 'member'. It's not flexible enough. So we use 'memberOfGroup=list@domain.com' for mailing list membership, and it's stored in mailing list members (ldap object), not stored in mailing list account.

31 (edited by buzzzo 2015-01-19 01:57:03)

Re: iRedMail-0.9.0 has been released.

ZhangHuangbin wrote:

[
OpenLDAP has a default attribute "member" for membership, you must use full dn as value. If you moved an object to another container, you have to update value of attribute 'member'. It's not flexible enough. So we use 'memberOfGroup=list@domain.com' for mailing list membership, and it's stored in mailing list members (ldap object), not stored in mailing list account.

I know, infact I've solved the problem on my sogo/iredmail (my integration) by creating separate group and put inside the dn of the email address that should be member of the group.

AFAIK it's not possible to use your current implementation of group for SOGo group acl.
You could use one of these two way:

1) manage via iredmail pro as complete separate group of other type
2) create a script running in a backroung which sync your group (mailing list based) with something compatible with SOGo

Just my two cents.

Thx

32

Re: iRedMail-0.9.0 has been released.

buzzzo wrote:

I know, infact I've solved the problem on my sogo/iredmail (my integration) by creating separate group and put inside the dn of the email address that should be member of the group.

would you mind sharing your solution in this forum? With detailed step by step guide.

33

Re: iRedMail-0.9.0 has been released.

Hi,
I installed iRedMail 0.9 on Ubuntu 14.04.1 with default Settings except using apache instead of ngix and SOGo instead of Roundcube. I found error in SOGo.conf Lines 73 and 74. I had to set name of my server. After this I can login with postmaster in SOGo. Perfect! Login to iRedAmin works  like expected also.
Now my Problem: I am not able to call https://mydomain/awstats or https://mydomain/cluebringer. I need to login before website is loading (like secured by an .htaccess). But login as postmaster@mydomain is not allowed. So I need help, how I can show the webfrontends of awstats and cluebringer. Where can I check and change authorized users?
Thanks

34

Re: iRedMail-0.9.0 has been released.

theolmue wrote:

I found error in SOGo.conf Lines 73 and 74.

Could you please show me detailed lines?

theolmue wrote:

Now my Problem: I am not able to call https://mydomain/awstats or https://mydomain/cluebringer.

Reset your account password to MD5 hash, then it should be fine.

35

Re: iRedMail-0.9.0 has been released.

ZhangHuangbin wrote:
theolmue wrote:

I found error in SOGo.conf Lines 73 and 74.

Could you please show me detailed lines?

The Lines in SOGo.conf are

## adjust the following to your configuration
  RequestHeader set "x-webobjects-server-port" "443"
  RequestHeader set "x-webobjects-server-name" "yourhostname"
  RequestHeader set "x-webobjects-server-url" "https://yourhostname"

So 'yourhostname' had to be replaced by my real hostname.

ZhangHuangbin wrote:
theolmue wrote:

Now my Problem: I am not able to call https://mydomain/awstats or https://mydomain/cluebringer.

Reset your account password to MD5 hash, then it should be fine.

I'm not sure I did this correct.
I logged in as postmaster in iredadmin and created a new user 'webi' with password 'pass' and marked it as 'Global admin'. LogIn to iredadmin as webi is possible. Next I logged in to postgres as vmail and updated password with this line:

update mailbox set password = '{PLAIN-MD5}' || md5('pass') where name = 'webi';
commit;

A short select shows the changed passwort hash. Login to iredadmin is possible after this change, but login to cluebringer and awstats is still impossible.
Did I change password hash as you supposed it?
Thanks

36

Re: iRedMail-0.9.0 has been released.

Dear theolmue,

You can generate a MD5 password hash with 'openssl' command, then update `mailbox.password` column with this generated password hash:

# openssl passwd -1 'your_password'

37

Re: iRedMail-0.9.0 has been released.

theolmue wrote:

The Lines in SOGo.conf are

## adjust the following to your configuration
  RequestHeader set "x-webobjects-server-port" "443"
  RequestHeader set "x-webobjects-server-name" "yourhostname"
  RequestHeader set "x-webobjects-server-url" "https://yourhostname"

So 'yourhostname' had to be replaced by my real hostname.

OK, will fix this in next release of iRedMail.

38 (edited by theolmue 2015-01-22 17:15:45)

Re: iRedMail-0.9.0 has been released.

ZhangHuangbin wrote:

Dear theolmue,

You can generate a MD5 password hash with 'openssl' command, then update `mailbox.password` column with this generated password hash:

# openssl passwd -1 'your_password'

Thank you for your help. I used the result of this command without präfix '{PLAIN-MD5}'. After that it works.

Does iRedMail installation set any rules, wich prevent postgres to be connected from other machines in my LAN? If so, please tell me, were I can edit it. I am not familar with iptables so it's tricky for me to find this.

I already edited configuration files of postgres (postgres.conf and pg_hba.conf) to allow an connection via hostssl and password md5.

39

Re: iRedMail-0.9.0 has been released.

theolmue wrote:

Does iRedMail installation set any rules, wich prevent postgres to be connected from other machines in my LAN?

File /etc/postgresql/9.X/main/pg_hba.conf, and port 5432 is not open in iptables rule file (/etc/default/iptables on Debian/Ubuntu).

40

Re: iRedMail-0.9.0 has been released.

I just installed a fresh iRedMail 0.9.0 and was presented with this at the end of the installer:

* - Webmail:
*   o Roundcube webmail://mail.domain.com/mail/
*   o SOGo groupware: httpS://mail.domain.com/SOGo/

Missing the http or https on the Roundcube URL.

41

Re: iRedMail-0.9.0 has been released.

hawk82 wrote:

Missing the http or https on the Roundcube URL.

Fixed. Thanks for your feedback. smile

42

Re: iRedMail-0.9.0 has been released.

After a fresh install, apache must be restarted to be able to access /mail or /iredadmin

43

Re: iRedMail-0.9.0 has been released.

Hi,

I installed iRedMail with SOGo instead of roundcube. It works fine, but LogWatch is showing an annoying message every day:

--------------------- PostgreSQL Begin ------------------------

Fatals:
-------

2 times:
[2015-02-01 03:01:02 +/-3 seconds] database "roundcubemail" does not exist


---------------------- PostgreSQL End ------------------------- 

How can I fix this?

44

Re: iRedMail-0.9.0 has been released.

Hi @theolmue,

Please check file /var/vmail/backup/backup_pgsql.sh, remove 'roundcubemail' from variable 'DATABASES='.

45

Re: iRedMail-0.9.0 has been released.

ZhangHuangbin wrote:

Hi @theolmue,

Please check file /var/vmail/backup/backup_pgsql.sh, remove 'roundcubemail' from variable 'DATABASES='.

Hi,

I removed it.
I was surprised to find databases 2 times in the line. I removed the duplicated entries. I hope, this is correct.
The original line was

export DATABASES= " roundcubemail iredadmin vmail vmail cluebringer amavisd roundcubemail iredadmin"

I changed it to

export DATABASES= " iredadmin vmail cluebringer amavisd"

Do I need an extra database for SOGo?

46

Re: iRedMail-0.9.0 has been released.

theolmue wrote:

I was surprised to find databases 2 times in the line. I removed the duplicated entries. I hope, this is correct.

correct.

theolmue wrote:

Do I need an extra database for SOGo?

if you don't have SOGO installed, you don't need it.

47 (edited by trinity 2015-02-27 05:59:05)

Re: iRedMail-0.9.0 has been released.

Hello,

I appologize for not understanding and following how to update the correct password for awstats and cluebringer..

I am using mysql and apache.  I am not sure how to apply the md5 hashed password to log into awstats and cluebringer

You can generate a MD5 password hash with 'openssl' command, then update `mailbox.password` column with this generated password hash:

I tried creating a separate account in iredadmin - "clueless"  then, from the command line, login to mysql, use vmail database and applied the change, described above, but this didnt seem to work for me...

# mysql -u root -p 
mysql> use vmail;
mysql> update mailbox set password = '{PLAIN-MD5}' || md5('$1$9vkHzTCX$zGWdxQ1Idm4naSZy/lhsL1') where name = 'clueless' ;
mysql> commit;

(I changed the username and hash from what is displayed above.. )

ref:

==== Required information ====
- iRedMail version: 0.9.0
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Centos 6.6
- Related log if you're reporting an issue:
====

48

Re: iRedMail-0.9.0 has been released.

trinity wrote:

mysql> update mailbox set password = '{PLAIN-MD5}' || md5('$1$9vkHzTCX$zGWdxQ1Idm4naSZy/lhsL1') where name = 'clueless' ;

Try this:

mysql> UPDATE mailbox SET password='$1$9vkHzTCX$zGWdxQ1Idm4naSZy/lhsL1' WHERE ...;

References:

http://www.iredmail.org/docs/password.hashes.html
http://www.iredmail.org/docs/reset.user.password.html

49

Re: iRedMail-0.9.0 has been released.

thank you.

50

Re: iRedMail-0.9.0 has been released.

Hello,

Thanks for this version.
I've a existing iredmail installation on MySQL Backend.
But, I want to use Sogo because of a beautiful webmail and sharing feartures on calendar and adress book.

Is it possible to use Sogo with a MySQL backend please ?

Thanks !