Users

users@lists.roundcube.net

2957 discussions

R: Re: Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

Hi All, thanks for the answers !!! I made other tests : If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser, ou=rcabook,dc=localhost -w rcpass -b ou=rcabook,dc=localhost it works fine. If I try this : ldapsearch -xLLL -H ldap://localhost:389 -D cn=mark, ou=private,ou=rcabook,dc=localhost -w xxxx It answer : ldap_bind: Invalid credentials (49), so I think that there is an ACL problem. I think that there is an error in the script rcabook-setup.sh. I did run and run again the script rcabook-setup.sh, it doesn't return errors and it said : The LDAP addressbook is ready now for using: base_dn: ou=rcabook,dc=localhost bind_dn: cn=rcuser,ou=rcabook,dc=localhost Use the following command for reading and checking your setup: ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,ou=rcabook, dc=localhost -w rcpass -b ou=rcabook,dc=localhost I report my ldap.log with the debug of ldap server : daemon: activity on: slap_listener_activate(7): daemon: epoll: listen=7 busy daemon: epoll: listen=8 active_threads=0 tvp=zero >>> slap_listener(ldap:///) daemon: listen=7, new connection on 13 daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: added 13r (active) listener=(nil) daemon: activity on 1 descriptor conn=21 fd=13 ACCEPT from IP=127.0.0.1:45320 (IP=0.0.0.0:389) daemon: activity on: 13r daemon: read active on 13 daemon: epoll: listen=7 active_threads=0 tvp=zero connection_get(13) daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(13): got connid=21 connection_read(13): checking for input on id=21 ber_get_next ldap_read: want=8, got=8 0000: 30 84 00 00 00 3e 02 01 0....>.. ldap_read: want=60, got=60 0000: 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d .`....5....*cn=m 0010: 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f ark,ou=private,o 0020: 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 u=rcabook,dc=loc 0030: 61 6c 68 6f 73 74 80 04 78 78 78 78 alhost..xxxx ber_get_next: tag 0x30 len 62 contents: ber_dump: buf=0xa0b040a8 ptr=0xa0b040a8 end=0xa0b040e6 len=62 0000: 02 01 01 60 84 00 00 00 35 02 01 03 04 2a 63 6e ...`....5....*cn 0010: 3d 6d 61 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 =mark,ou=private 0020: 2c 6f 75 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c ,ou=rcabook,dc=l 0030: 6f 63 61 6c 68 6f 73 74 80 04 78 78 78 78 ocalhost..xxxx op tag 0x60, time 1330963449 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=21 op=0 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0xa0b040a8 ptr=0xa0b040ab end=0xa0b040e6 len=59 0000: 60 84 00 00 00 35 02 01 03 04 2a 63 6e 3d 6d 61 `....5....*cn=ma 0010: 72 6b 2c 6f 75 3d 70 72 69 76 61 74 65 2c 6f 75 rk,ou=private,ou 0020: 3d 72 63 61 62 6f 6f 6b 2c 64 63 3d 6c 6f 63 61 =rcabook,dc=loca 0030: 6c 68 6f 73 74 80 04 78 78 78 78 lhost..xxxx ber_scanf fmt (m}) ber: ber_dump: buf=0xa0b040a8 ptr=0xa0b040e0 end=0xa0b040e6 len=6 0000: 00 04 78 78 78 78 ..xxxx >>> dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost> => ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost,0) <= ldap_bv2dn(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mark,ou=private,ou=rcabook,dc=localhost)=0 <<< dnPrettyNormal: <cn=mark,ou=private,ou=rcabook,dc=localhost>, <cn=mark, ou=private,ou=rcabook,dc=localhost> conn=21 op=0 BIND dn="cn=mark,ou=private,ou=rcabook,dc=localhost" method=128 do_bind: version=3 dn="cn=mark,ou=private,ou=rcabook,dc=localhost" method=128 ==> bdb_bind: dn: cn=mark,ou=private,ou=rcabook,dc=localhost bdb_dn2entry("cn=mark,ou=private,ou=rcabook,dc=localhost") => bdb_dn2id("cn=mark,ou=private,ou=rcabook,dc=localhost") <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30988) send_ldap_result: conn=21 op=0 p=3 send_ldap_result: err=49 matched="" text="" send_ldap_response: msgid=1 tag=97 err=49 ber_flush2: 22 bytes to sd 13 0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a 0........a...... 0010: 01 31 04 00 04 00 .1.... ldap_write: want=22, written=22 0000: 30 84 00 00 00 10 02 01 01 61 84 00 00 00 07 0a 0........a...... 0010: 01 31 04 00 04 00 .1.... conn=21 op=0 RESULT tag=97 err=49 text= daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: 13r daemon: read active on 13 daemon: epoll: listen=7 active_threads=0 tvp=zero connection_get(13) daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(13): got connid=21 connection_read(13): checking for input on id=21 ber_get_next ldap_read: want=8, got=0 ber_get_next on fd 13 failed errno=0 (Success) connection_read(13): input error=-2 id=21, closing. connection_closing: readying conn=21 sd=13 for close connection_close: conn=21 sd=13 daemon: activity on 1 descriptor daemon: removing 13 daemon: activity on: conn=21 fd=13 closed (connection lost) daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero Thanks a lot Mark >----Messaggio originale---- >Da: andudi(a)gmx.ch >Data: 05/03/2012 14.09 >A: "kaifamm(a)libero.it"<kaifamm(a)libero.it>, <users(a)lists.roundcube.net> >Ogg: Re: [RCU] Ldap Addressbook : problem for credentials in private addressbook > >Hei >I am i ski hollydays and have not my setup in front. > >Your setup seems ok, but can you try to connect with ldapsearch on the commandline? >Another try could be to switch on logging in slapd.conf >Ldap.conf is not used by server but by clients like ldapsearch... > >Andreas > > > >"kaifamm(a)libero.it" <kaifamm(a)libero.it> schrieb: > >>Hi All, >> >>I configured the ldap server and roundcube to manage contacts. I used >>the >>howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I >>have only >>a problem for credentials in private addressbook. The public >>addressbook works >>fine, I can search and add contacts. >> >>I checked the Mark's password and it is correct. I tried to use rootpw >>but it >>doesn't works. >> >>My versions are : >>openldap-servers-2.4.19-6 >>php-5.3.3-1 >>roundcube 0.7.1 >> >>I report the error in ldap log of rouncube, my slapd.conf and my >>main.inc.php. >> >>Thanks a lot >> >>Mark >> >>-------------------------------- >>logs/ldap : >> >>[05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:09:01 +0100]: S: OK >>[05-Mar-2012 10:09:01 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:09:01 +0100]: S: Invalid credentials >>[05-Mar-2012 10:09:01 +0100]: C: Close >> >> >>[05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:14:24 +0100]: S: OK >>[05-Mar-2012 10:14:24 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:14:24 +0100]: S: Invalid credentials >>[05-Mar-2012 10:14:24 +0100]: C: Close >>[05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:27:42 +0100]: S: OK >>[05-Mar-2012 10:27:42 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:27:42 +0100]: S: Invalid credentials >>[05-Mar-2012 10:27:42 +0100]: C: Close >>[05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] >>[05-Mar-2012 10:27:52 +0100]: S: OK >>[05-Mar-2012 10:27:52 +0100]: C: Bind [dn: >>cn=mark,ou=private,ou=rcabook, >>dc=localhost] [pass: xxxx] >>[05-Mar-2012 10:27:52 +0100]: S: Invalid credentials >>[05-Mar-2012 10:27:52 +0100]: C: Add [dn: mail=ssssss(a)iiii.uu,cn=mark, >>ou=private,ou=rcabook,dc=localhost]: Array >>( >> [cn] => ssssssss sss >> [sn] => sss >> [givenname] => ssssssss >> [mail] => ssssss(a)iiii.uu >> [objectClass] => Array >> ( >> [0] => top >> [1] => inetOrgPerson >> ) >> >>) >> >>[05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required >>[05-Mar-2012 10:27:52 +0100]: C: Close >>------------------------------------------------------------ >>config/main.inc.php >> >>$rcmail_config['ldap_public']['public'] = array( >> 'name' => 'Public LDAP Addressbook', >> 'hosts' => array('localhost'), >> 'use_tls' => false, >> 'ldap_version' => 3, // using LDAPv3 >> 'port' => 389, >> 'auth_method' => '', >> 'user_specific' => false, >> 'writable' => true, >> 'base_dn' => 'ou=public,ou=rcabook,dc=localhost', >> 'bind_dn' => 'cn=rcuser,ou=rcabook,dc=localhost', >> 'bind_pass' => 'rcpass', >> 'fieldmap' => array( >> 'name' => 'cn', >> 'surname' => 'sn', >> 'firstname' => 'givenName', >> 'email' => 'mail', >> 'phone:home' => 'homePhone', >> 'phone:work' => 'telephoneNumber', >> 'phone:mobile' => 'mobile', >> 'street' => 'street', >> 'zipcode' => 'postalCode', >> 'locality' => 'l', >> 'country' => 'c', >> 'organization' => 'o', >> ), >> 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), >> 'LDAP_rdn' => 'mail', >> 'required_fields' => array('cn', 'sn', 'mail'), >> 'filter' => '(objectClass=inetOrgPerson)', >> 'groups' => array( >> 'base_dn' => '', // in this Howto, the same base_dn as >>for the contacts is used >> 'filter' => '(objectClass=groupOfNames)', >> 'object_classes' => array("top", "groupOfNames"), >> ), >>); >> >>$rcmail_config['ldap_public']['private'] = array( >> 'name' => 'Private LDAP Addressbook', >> 'hosts' => array('localhost'), >> 'use_tls' => false, >> 'ldap_version' => 3, // using LDAPv3 >> 'port' => 389, >> 'auth_method' => '', >> 'user_specific' => true, >> 'writable' => true, >> 'base_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', >> 'bind_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', >> 'bind_pass' => '', // the user login password is used >> 'fieldmap' => array( >> 'name' => 'cn', >> 'surname' => 'sn', >> 'firstname' => 'givenName', >> 'email' => 'mail', >> 'phone:home' => 'homePhone', >> 'phone:work' => 'telephoneNumber', >> 'phone:mobile' => 'mobile', >> 'street' => 'street', >> 'zipcode' => 'postalCode', >> 'locality' => 'l', >> 'country' => 'c', >> 'organization' => 'o', >> ), >> 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), >> 'LDAP_rdn' => 'mail', >> 'required_fields' => array('cn', 'sn', 'mail'), >> 'filter' => '(objectClass=inetOrgPerson)', >> 'groups' => array( >> 'base_dn' => '', // in this Howto, the same base_dn as >>for the contacts is used >> 'filter' => '(objectClass=groupOfNames)', >> 'object_classes' => array("top", "groupOfNames"), >> ), >>); >> >>------------------------------------------- >>openldap/slapd.conf >> >># >># See slapd.conf(5) for details on configuration options. >># This file should NOT be world readable. >># >> >>include /etc/openldap/schema/corba.schema >>include /etc/openldap/schema/core.schema >>include /etc/openldap/schema/cosine.schema >>include /etc/openldap/schema/duaconf.schema >>include /etc/openldap/schema/dyngroup.schema >>include /etc/openldap/schema/inetorgperson.schema >>include /etc/openldap/schema/java.schema >>include /etc/openldap/schema/misc.schema >>include /etc/openldap/schema/nis.schema >>include /etc/openldap/schema/openldap.schema >>include /etc/openldap/schema/ppolicy.schema >>include /etc/openldap/schema/collective.schema >> >># Allow LDAPv2 client connections. This is NOT the default. >>allow bind_v2 >> >># Do not enable referrals until AFTER you have a working directory >># service AND an understanding of referrals. >>#referral ldap://root.openldap.org >> >>pidfile /var/run/openldap/slapd.pid >>argsfile /var/run/openldap/slapd.args >> >>SIZELIMIT 100000 >> >> >># >># if no access controls are present, the default policy >># allows anyone and everyone to read anything but restricts >># updates to rootdn. (e.g., "access to * by * read") >># >># rootdn can always read and write EVERYTHING! >> >>####################################################################### >># ldbm and/or bdb database definitions >>####################################################################### >> >>database bdb >>suffix "dc=localhost" >>checkpoint 1024 15 >>rootdn "cn=admin,dc=localhost" >># Cleartext passwords, especially for the rootdn, should >># be avoided. See slappasswd(8) and slapd.conf(5) for details. >># Use of strong authentication encouraged. >>rootpw {SSHA}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx >> >># The database directory MUST exist prior to running slapd AND >># should only be accessible by the slapd and slap tools. >># Mode 700 recommended. >>directory /var/lib/ldap >> >># Indices to maintain for this database >>index objectClass eq,pres >>index ou,cn,mail,surname,givenname eq,pres,sub >>index uidNumber,gidNumber,loginShell eq,pres >>index uid,memberUid eq,pres,sub >>index nisMapName,nisMapEntry eq,pres,sub >> >># Replicas of this database >>#replogfile /var/lib/ldap/openldap-master-replog >>#replica host=ldap-1.example.com:389 starttls=critical >># bindmethod=sasl saslmech=GSSAPI >># authcId=host/ldap-master.example.com(a)EXAMPLE.COM >> >> >># Grant the Roundcub user to create private users >>access to dn.one="ou=private,ou=rcabook,dc=localhost" >>attrs=userPassword >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> by anonymous auth >> by self write >> by * none >> >># For user authentication and password change >>access to attrs=userPassword >> by dn="cn=admin,dc=localhost" write >> by anonymous auth >> by self write >> by * none >> >># Grant the Roundcube users access to their private addressbooks >>access to dn.regex="^.*cn=([^,]+),ou=private,ou=rcabook,dc=localhost$" >> by dn="cn=admin,dc=localhost" write >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write >> >># Grant the Roundcube user access to the whole addressbook >>access to dn.subtree="ou=rcabook,dc=localhost" >> by dn="cn=admin,dc=localhost" write >> by dn="cn=rcuser,ou=rcabook,dc=localhost" write >> >># For direcory access >>access to * >> by dn="cn=admin,dc=localhost" write >> >># enable monitoring >>database monitor >> >>----------------------------------------- > >-- >List info: http://lists.roundcube.net/users/ >BT/09979466 >

1 0

Mailing list migration to new host
by Thomas Bruederli 05 Mar '12

05 Mar '12

Dear subscribers of the Roundcube mailing lists I'd like to announce the migration of our mailing lists to a new host which is planned to take place on Monday, March 5th at 3pm GMT. There's no action required on your side, all subscriptions and settings will be transferred to the new host. There might be some delay until all nodes on the net have updated their DNS entries for lists.roundcube.net and to avoid any loss of messages during that period, we recommend to suspend posting between 3pm and 9pm GMT on Monday. This is also a good occasion to thank Jason at gigo.com for offering the list hosting for the last couple of years and to Jeroen at kolab.org to take over. Best, Thomas -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

3 4

Ldap Addressbook : problem for credentials in private addressbook
by kaifamm＠libero.it 05 Mar '12

05 Mar '12

Hi All, I configured the ldap server and roundcube to manage contacts. I used the howto : http://trac.roundcube.net/wiki/Howto_Ldap. It work quite, I have only a problem for credentials in private addressbook. The public addressbook works fine, I can search and add contacts. I checked the Mark's password and it is correct. I tried to use rootpw but it doesn't works. My versions are : openldap-servers-2.4.19-6 php-5.3.3-1 roundcube 0.7.1 I report the error in ldap log of rouncube, my slapd.conf and my main.inc.php. Thanks a lot Mark -------------------------------- logs/ldap : [05-Mar-2012 10:09:01 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:09:01 +0100]: S: OK [05-Mar-2012 10:09:01 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:09:01 +0100]: S: Invalid credentials [05-Mar-2012 10:09:01 +0100]: C: Close [05-Mar-2012 10:14:24 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:14:24 +0100]: S: OK [05-Mar-2012 10:14:24 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:14:24 +0100]: S: Invalid credentials [05-Mar-2012 10:14:24 +0100]: C: Close [05-Mar-2012 10:27:42 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:27:42 +0100]: S: OK [05-Mar-2012 10:27:42 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:27:42 +0100]: S: Invalid credentials [05-Mar-2012 10:27:42 +0100]: C: Close [05-Mar-2012 10:27:52 +0100]: C: Connect [localhost:389] [05-Mar-2012 10:27:52 +0100]: S: OK [05-Mar-2012 10:27:52 +0100]: C: Bind [dn: cn=mark,ou=private,ou=rcabook, dc=localhost] [pass: xxxx] [05-Mar-2012 10:27:52 +0100]: S: Invalid credentials [05-Mar-2012 10:27:52 +0100]: C: Add [dn: mail=ssssss(a)iiii.uu,cn=mark, ou=private,ou=rcabook,dc=localhost]: Array ( [cn] => ssssssss sss [sn] => sss [givenname] => ssssssss [mail] => ssssss(a)iiii.uu [objectClass] => Array ( [0] => top [1] => inetOrgPerson ) ) [05-Mar-2012 10:27:52 +0100]: S: Strong(er) authentication required [05-Mar-2012 10:27:52 +0100]: C: Close ------------------------------------------------------------ config/main.inc.php $rcmail_config['ldap_public']['public'] = array( 'name' => 'Public LDAP Addressbook', 'hosts' => array('localhost'), 'use_tls' => false, 'ldap_version' => 3, // using LDAPv3 'port' => 389, 'auth_method' => '', 'user_specific' => false, 'writable' => true, 'base_dn' => 'ou=public,ou=rcabook,dc=localhost', 'bind_dn' => 'cn=rcuser,ou=rcabook,dc=localhost', 'bind_pass' => 'rcpass', 'fieldmap' => array( 'name' => 'cn', 'surname' => 'sn', 'firstname' => 'givenName', 'email' => 'mail', 'phone:home' => 'homePhone', 'phone:work' => 'telephoneNumber', 'phone:mobile' => 'mobile', 'street' => 'street', 'zipcode' => 'postalCode', 'locality' => 'l', 'country' => 'c', 'organization' => 'o', ), 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), 'LDAP_rdn' => 'mail', 'required_fields' => array('cn', 'sn', 'mail'), 'filter' => '(objectClass=inetOrgPerson)', 'groups' => array( 'base_dn' => '', // in this Howto, the same base_dn as for the contacts is used 'filter' => '(objectClass=groupOfNames)', 'object_classes' => array("top", "groupOfNames"), ), ); $rcmail_config['ldap_public']['private'] = array( 'name' => 'Private LDAP Addressbook', 'hosts' => array('localhost'), 'use_tls' => false, 'ldap_version' => 3, // using LDAPv3 'port' => 389, 'auth_method' => '', 'user_specific' => true, 'writable' => true, 'base_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', 'bind_dn' => 'cn=%u,ou=private,ou=rcabook,dc=localhost', 'bind_pass' => '', // the user login password is used 'fieldmap' => array( 'name' => 'cn', 'surname' => 'sn', 'firstname' => 'givenName', 'email' => 'mail', 'phone:home' => 'homePhone', 'phone:work' => 'telephoneNumber', 'phone:mobile' => 'mobile', 'street' => 'street', 'zipcode' => 'postalCode', 'locality' => 'l', 'country' => 'c', 'organization' => 'o', ), 'LDAP_Object_Classes' => array('top', 'inetOrgPerson'), 'LDAP_rdn' => 'mail', 'required_fields' => array('cn', 'sn', 'mail'), 'filter' => '(objectClass=inetOrgPerson)', 'groups' => array( 'base_dn' => '', // in this Howto, the same base_dn as for the contacts is used 'filter' => '(objectClass=groupOfNames)', 'object_classes' => array("top", "groupOfNames"), ), ); ------------------------------------------- openldap/slapd.conf # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/corba.schema include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/duaconf.schema include /etc/openldap/schema/dyngroup.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/java.schema include /etc/openldap/schema/misc.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/openldap.schema include /etc/openldap/schema/ppolicy.schema include /etc/openldap/schema/collective.schema # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args SIZELIMIT 100000 # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! ####################################################################### # ldbm and/or bdb database definitions ####################################################################### database bdb suffix "dc=localhost" checkpoint 1024 15 rootdn "cn=admin,dc=localhost" # Cleartext passwords, especially for the rootdn, should # be avoided. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw {SSHA}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory /var/lib/ldap # Indices to maintain for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 starttls=critical # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com(a)EXAMPLE.COM # Grant the Roundcub user to create private users access to dn.one="ou=private,ou=rcabook,dc=localhost" attrs=userPassword by dn="cn=rcuser,ou=rcabook,dc=localhost" write by anonymous auth by self write by * none # For user authentication and password change access to attrs=userPassword by dn="cn=admin,dc=localhost" write by anonymous auth by self write by * none # Grant the Roundcube users access to their private addressbooks access to dn.regex="^.*cn=([^,]+),ou=private,ou=rcabook,dc=localhost$" by dn="cn=admin,dc=localhost" write by dn="cn=rcuser,ou=rcabook,dc=localhost" write by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write # Grant the Roundcube user access to the whole addressbook access to dn.subtree="ou=rcabook,dc=localhost" by dn="cn=admin,dc=localhost" write by dn="cn=rcuser,ou=rcabook,dc=localhost" write # For direcory access access to * by dn="cn=admin,dc=localhost" write # enable monitoring database monitor ----------------------------------------- openldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never URI ldap://127.0.0.1/ BASE dc=localhost TLS_REQCERT never TLS_CACERTDIR /etc/openldap/cacerts -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 1

Re: [RCU] "Session invalid or expired" roundcube 7.1
by rapaterres Oo. 02 Mar '12

02 Mar '12

Hey Marcel, 2012/3/2 Marcel Herrguth <mherrguth(a)mrgeneration.de> > Hey, > > Am 2.3.2012 04:51, schrieb rapaterres Oo.: > >> i'm just upgraded 7.0 to 7.1 roundcube and i can't access into >> webmail, i have the error "Session invalid or expired" when i try to >> login >> >> here the logs... >> [..] >> >> i don't know what's going on because all looks fine... but it isn't :( >> >> anyone can guide me with this error? >> >> > I had similare Errors. These errors occur soemtimes, but simply seem to be > a Browser Problem. (for me it was Firefox). > If you delete all cookies that Roundcube writes (especially the session > cookie) and then refresh the page, a login should work fine to you. > > You can also use the plugin that keeps you logged in. It may sometimes > display this error as well, but if you refresh it without doing anything > else, it logs you in most of the times. > > Hope I could help you > thank you for your help but... I already read that this problem could be the browser and I deleted all cookies, and tried from another browser too... but it did not work. I even tried from another computer (and other ip), and even tried to delete the sessions in the bbdd, but I have the same error. -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 0

Problem with users that have multiple mail aliases
by Jacek Osiecki 02 Mar '12

02 Mar '12

Hi, In my system I have multiple domains with many users, all set up in mysql. MTA is served by Exim 4, Backend and IMAP is handled by dovecot 2.0. Some of my users have mail aliases, what means that for example john(a)test.com is able to log in also as johny(a)test.com as well as john(a)williams.com. All these accounts lead to the same mailbox, and check the password for the same basic user, which is john(a)test.com. And everything works fine, until they log in to roundcube. Lightweight issue is that settings are separate for each email that they used to log in - annoying, but you could live with it. But another thing is much worse: when users set up sieve rules in roundcube, these settings are also separate for each mail alias - what is hardly acceptable. But what is absolutely unacceptable is the fact, that actually only rules set up for the basic account (john(a)test.com) are working. This is quite understandable, since dovecot during delivery checks the basic account sieve file instead of checking all possible variants :) Now I'd like to find out if there is any solution for repairing this. Dovecot, for example, uses its user_query and password_query, that always return the same no matter which credentials were used to log in. Maybe there is a way for roundcube to identify user not by credentials but by eg. inbox path? That would help a lot... Am I the only one who needs such functionality? Greetings, -- Jacek -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 2

"Session invalid or expired" roundcube 7.1
by rapaterres Oo. 02 Mar '12

02 Mar '12

hi all! i'm just upgraded 7.0 to 7.1 roundcube and i can't access into webmail, i have the error "Session invalid or expired" when i try to login here the logs... userlogins logs seems to be ok: [23-Feb-2012 23:55:09 +0100]: Successful login for xxxxxxx(a)xxxxxxxx.net (ID: 4) from 81.36.137.2 <81.36.137.208>22 in session oq35mfhcb07rmmija98ahbph56 imap logs (works): [23-Feb-2012 23:55:09 +0100]: [5945] S: * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc. See COPYING for distribution information. [23-Feb-2012 23:55:09 +0100]: [5945] C: A0001 LOGIN xxxx(a)xxxxxxxx.net xxxxx [23-Feb-2012 23:55:09 +0100]: [5945] S: A0001 OK LOGIN Ok. [23-Feb-2012 23:55:09 +0100]: [5945] C: A0002 NAMESPACE [23-Feb-2012 23:55:09 +0100]: [5945] S: * NAMESPACE (("INBOX." ".")) NIL (("#shared." ".")("shared." ".")) [23-Feb-2012 23:55:09 +0100]: [5945] S: A0002 OK NAMESPACE completed. [23-Feb-2012 23:55:09 +0100]: [5945] C: A0003 LOGOUT [23-Feb-2012 23:55:09 +0100]: [5945] S: * BYE Courier-IMAP server shutting down [23-Feb-2012 23:55:09 +0100]: [5945] S: A0003 OK LOGOUT completed sql logs: [23-Feb-2012 23:55:09 +0100]: query(1): SELECT vars, ip, changed FROM session WHERE sess_id = 'fb41l4i16f7hpk8d17d4ka4334'; [23-Feb-2012 23:55:09 +0100]: query(1): DELETE FROM session WHERE sess_id = 'fb41l4i16f7hpk8d17d4ka4334'; [23-Feb-2012 23:55:09 +0100]: query(1): SELECT * FROM users WHERE mail_host = 'localhost' AND username = 'xxxxx(a)xxxxxxx.net'; [23-Feb-2012 23:55:09 +0100]: query(1): UPDATE users SET last_login = now() WHERE user_id = '4'; [23-Feb-2012 23:55:09 +0100]: query(1): INSERT INTO session (sess_id, vars, ip, created, changed) VALUES ('oq35mfhcb07rmmija98ahbph56', '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', '81.36.137.208', '2012-02-23 23:55:09', '2012-02-23 23:55:09'); [23-Feb-2012 23:55:09 +0100]: query(1): SELECT vars, ip, changed FROM session WHERE sess_id = 'oq35mfhcb07rmmija98ahbph56'; [23-Feb-2012 23:55:09 +0100]: query(1): SELECT * FROM users WHERE user_id = '4'; [23-Feb-2012 23:55:09 +0100]: query(1): DELETE FROM session WHERE sess_id = 'oq35mfhcb07rmmija98ahbph56'; [23-Feb-2012 23:55:09 +0100]: query(1): INSERT INTO session (sess_id, vars, ip, created, changed) VALUES ('oq35mfhcb07rmmija98ahbph56', 'bGFuZ3VhZ2V8czo1OiJlc19FUyI7dGVtcHxiOjE7', '81.36.137.222 <81.36.137.208>', '2012-02-23 23:55:09', '2012-02-23 23:55:09'); and.. in main.inc.php: $rcmail_config['session_lifetime'] = 10; i don't know what's going on because all looks fine... but it isn't :( anyone can guide me with this error? -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 0

New skin?
by list＠airstreamcomm.net 29 Feb '12

29 Feb '12

Hi Devs, you're probably getting this question every day now, but will we be seeing a February announcement for the beta release including the new skin for Roundcube? Thanks for all your hard work and talent! -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

3 2

$rcmail_config['identities_level'] = 3
by Edson S. da Silva - Grupo Horizonte 29 Feb '12

29 Feb '12

Good afternoon,I have a problemin myPostfix/Roundcube.I noticedthat in the lastthree monthsallusers createdin the tablewere not fed"identities."I do not knowwhat was doneto make it happen.The problemis that thesender fieldis open forthe user inputs theemailyou want. Something interestingI noticedis thatat the time offirstlogin (hourshecreatesrecords)it displaysthe error "Your sessionis invalid or expired" db.inc.phpfileis right...$rcmail_config['db_table_identities']= 'identities'; the fileis$main.inc.phprcmail_config['identities_level']=3; I do not knowwhat can be...Can someonehelp me? Note:Myenglishisbad.... -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 0

Populate "Display Name" from LDAP's "sn" field?
by Josh Whitver 27 Feb '12

27 Feb '12

Hello, We've got our RoundCube install tied into our LDAP server, and we'd like to populate the "Display Name" field from LDAP's "sn" field so that new users, upon logging in, will have new mail appear to come from their full name instead of their username. Is that even possible? If so, what steps would I need to take? Which file(s) need to be edited? Running RoundCube-0.7.1. Thanks! -- Josh Whitver whitverj(a)urbandale.k12.ia.us / josh(a)whitver.net "Write a wise saying and your name will live forever." -Unknown -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 1

testing ldap addressbook
by Nelson Serafica 27 Feb '12

27 Feb '12

I'm currently studying roundcube with ldap as its DEFAULT addressbook. I have a running ldap for addressbook and it is working fine in an email client such as Thunderbird. Below is my setup in TB Base DN : dc=mail,dc=foo,dc=com Port 388 Port 388 is being forward to 389 of my ldap server. However, I cannot configure Roundecube to query on ldap. Below is my config in ldap settings in main.inc.php. $rcmail_config['address_book_type'] = 'ldap'; $rcmail_config['ldap_public']['Addbook'] = array( 'name' => 'foo.com', 'hosts' => array('localhost'), 'port' => 389, 'use_tls' => false, 'user_specific' => false, 'base_dn' => 'dc=mail,dc=foo,dc=com', 'LDAP_Object_Classes' => array("top", "inetOrgPerson"), 'required_fields' => array("cn", "sn", "mail"), 'LDAP_rdn' => 'mail', 'search_fields' => array('mail', 'cn'), 'name_field' => 'cn', 'email_field' => 'mail', 'surname_field' => 'sn', 'firstname_field' => 'gn', 'sort' => 'cn', 'fuzzy_search' => true, 'sizelimit' => '0', 'timelimit' => '0', ); $rcmail_config['autocomplete_addressbooks'] = array('ldap','foo.com'); $rcmail_config['autocomplete_min_length'] = 1; After saving main.inc.php, I can no longer access Addressbook Tab. Probably of the wrong settings in my ldap. I can query ldap when I do ldapsearch -x -b 'dc=mail,dc=foo,dc=com'. The settings above is based on the default file main.inc.php. I just followed the procedures. Can anyone give a hint? TIA, Nelson -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users