View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0003907SOGoWeb Mailpublic2016-11-18 12:032016-12-29 19:49
Reporterpawel Assigned Toludovic  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionno change required 
Platform[Server] LinuxOSRHEL/CentOSOS Version7
Product Version3.2.1 
Summary0003907: Sieve server Authentication failed
Description

Hi,
I have a problem with sieve server and it's features:
-SOGoVacationEnabled
-SOGoForwardEnabled
right now I am unable to use this options and also when I try to save any settings I see: "Service temporarily unavailable"
I am using an external IMAPS server and I've installed dovecot just to use it as Sieve server.

Entries in my sogo.conf:

/ Mail /
SOGoDraftsFolderName = Drafts;
// SOGoMailShowSubscribedFoldersOnly=NO;
SOGoSentFolderName = Sent;
SOGoTrashFolderName = Trash;
SOGoIMAPServer = imaps://myimapdomain:993;
SOGoSieveServer = sieve://localhost:4190;
SOGoSMTPServer = mysmtpserver.com;
SOGoMailingMechanism = smtp;
SOGoForceExternalLoginWithEmail = YES;
SOGoMailSpoolPath = /var/spool/sogo;
NGImap4ConnectionStringSeparator = "/";
SOGoMemcachedHost = 127.0.0.1;
WOWorkersCount = 10;
SOGoPasswordChangeEnabled=YES;

SOGoVacationEnabled = YES;
SOGoForwardEnabled = YES;
SOGoSieveScriptsEnabled = YES;

and if we take a look on a netstat:
tcp 0 0.0.0.0:4190 0.0.0.0:* LISTEN 8873/dovecot

and telnet:
telnet 127.0.0.1 4190
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
"IMPLEMENTATION" "Dovecot Pigeonhole"
"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave"
"NOTIFY" "mailto"
"SASL" "PLAIN"
"STARTTLS"
"VERSION" "1.0"
OK "Dovecot ready."

and sogo.log:
Nov 18 12:08:01 sogod [8828]: <0x0x7f4e9cbf6e10[SOGoSieveManager]> failure. Attempting with a renewed password (no authname supported)

Nov 18 12:08:08 sogod [8828]: <0x0x7f4e9cbf6e10[SOGoSieveManager]> Could not login 'mylogin@mydomain.com' on Sieve server: <0x0x7f4e9ca7d8c0[NGSieveClient]: socket=<NGActiveSocket[0x0x7f4e9c9415b0]: mode=rw address=<0x0x7f4e9cadc1a0[NGInternetSocketAddress]: host=localhost port=52968> connectedTo=<0x0x7f4e9cadc120[NGInternetSocketAddress]: host=localhost port=4190>>>: {RawResponse = "{ok = 0; reason = \"Authentication failed.\"; }"; result = 0; }

I have a clear connection to my LDAP server and I can log in to SOGo and connect to IMAP server to fetch e-mails.I assume, that this new installed sieve server is trying to authenticate me with my LDAP username and password which is not possible.

Steps To Reproduce

Click Settings -> Email -> Forwarding

TagsNo tags attached.

Activities

ludovic

ludovic

2016-11-24 21:15

administrator   ~0010910

Sniff the traffic between SOGo and your Sieve server and check what SOGo sends.
pawel

pawel

2016-11-25 08:04

reporter   ~0010921

Last edited: 2016-11-25 08:05

I think that SOGo is trying to authenticate to local Sieve Server with username and password from LDAP.

The case is that we host our own external IMAP server which is working fine and around 25k users is using it, so I can't set SOGo to use local Sieve Server as IMAP Server. I just need features: Vacation and Forwarding.
Is there other way to use this functionalities?
In our LDAP we have fields responsible for vacation like "vacationStartDate" and "vacationEndDate"
there is also "mailForwardingAddress" for e-mail forwarding. Can I use SOGo to write to these fields?
Thanks
Pawel
pawel

pawel

2016-11-30 14:05

reporter   ~0010933

Can I map field in my LDAP called "vacationStartDate" to this field in SOGo?
pawel

pawel

2016-12-06 13:29

reporter   ~0010947

Is there anyone who can give a hint?? Any help will be appreciated
Regards
Pawel
ludovic

ludovic

2016-12-06 13:29

administrator   ~0010948

No, that is not supported (mapping LDAP vacation attributes).
pawel

pawel

2016-12-06 13:32

reporter   ~0010949

Thanks for an answer ludovic.
Please one more question - is these possible to use external IMAP server, external MTA and all e-mail system components and only have local Sieve Server to take care of Vacation and Forwarding?
pawel

pawel

2016-12-06 13:33

reporter   ~0010950

and of course external LDAP Server (it's Oracle)
ludovic

ludovic

2016-12-06 13:36

administrator   ~0010951

Yes, SOGoSieveServer can point to a different host than SOGoIMAPServer.
pawel

pawel

2016-12-06 13:48

reporter   ~0010952

Thanks once again for an answer.
Right now users from external LDAP are trying to log in into my local sieve server with their login and password(uid@domain.com) but they don't exist on local sieve server. Do I understand correctly that all users should be handled by dovecot master user?

I see sogo logs:
Dec 06 13:24:52 sogod [3576]: <0x0x7ffbeb57f880[SOGoSieveManager]> failure. Attempting with a renewed password (no authname supported)

Dec 06 13:25:00 sogod [3576]: <0x0x7ffbeb57f880[SOGoSieveManager]> Could not login 'uid@domain.com' on Sieve server: <0x0x7ffbeb58b0e0[NGSieveClient]: socket=<NGActiveSocket[0x0x7ffbeb58cf10]: mode=rw address=<0x0x7ffbeb58cfb0[NGInternetSocketAddress]: host=localhost port=38552> connectedTo=<0x0x7ffbeb58ce70[NGInternetSocketAddress]: host=127.0.0.1 port=4190>>>: {RawResponse = "{ok = 0; reason = \"Authentication failed.\"; }"; result = 0; }
ludovic

ludovic

2016-12-06 21:16

administrator   ~0010954

Well, your Sieve server must be configured properly - nothing we can do here.

Issue History

Date Modified Username Field Change
2016-11-18 12:03 pawel New Issue
2016-11-24 21:15 ludovic Severity major => minor
2016-11-24 21:15 ludovic Note Added: 0010910
2016-11-25 08:04 pawel Note Added: 0010921
2016-11-25 08:05 pawel Note Edited: 0010921
2016-11-30 14:05 pawel Note Added: 0010933
2016-12-06 13:29 pawel Note Added: 0010947
2016-12-06 13:29 ludovic Note Added: 0010948
2016-12-06 13:32 pawel Note Added: 0010949
2016-12-06 13:33 pawel Note Added: 0010950
2016-12-06 13:36 ludovic Note Added: 0010951
2016-12-06 13:48 pawel Note Added: 0010952
2016-12-06 21:16 ludovic Note Added: 0010954
2016-12-29 19:49 ludovic Status new => closed
2016-12-29 19:49 ludovic Assigned To => ludovic
2016-12-29 19:49 ludovic Resolution open => no change required