General discussion on installation and configuration of SOGo

Text archives Help


[SOGo] Issues upon 4.0.8 upgrade


Chronological Thread 
  • From: "Pablo Abelenda" ( ) < >
  • To:
  • Subject: [SOGo] Issues upon 4.0.8 upgrade
  • Date: Mon, 19 Aug 2019 12:32:05 +0200
  • Autocrypt: addr= ; prefer-encrypt=mutual; keydata= mQINBFWU/bwBEADi9tSXaWQYlRAKuTQZ40YV5BJEPOmjS5NIn+T7OuD///6fbCkvs33fGNAv NFMoBdAha2OrXYPQCRqDTzvVc2Epf6FL7gUU/kGjtPaOh9fnoiOobIFNWjRs3tfKR9gUh/Jw k/ADxtTBcpLLsi99ug0hhuFAxgQjhu1IvgO3rLHkIKh7tRrMjeQTLutHE3WywhIbaGNXv+rK swG3NMj0gQNK3JmOzDVRvs+QiqCvGmHDh0UOl/khqyS6oIGFudCt1fX3uAJ3IaENJX6ImUt7 yTE8j4GsG56koPHNThKLZ7bs4JkCS+AtEzy+Mh57SwarVX9O/zrYPGhFEsuybrJ2lHdYJC4S kBK3RHaWLghjn8nybleUkQfYB4rLWksEctiRTfh/+ib2/OU/XCsgYiaXJomcF5MIc1ImPHEk ArtTp269ttgwYXO1ZXTM/j8FsEXC3TRajYhpnbXkFBKN+Xdcv5JlFPv79OuOTb8ZVS+r/r+v WoBRszhUO6y9KKlh54TVdMpR4J//xzdPwcFfjXafY1iocI8KdD1lwEc3rRVSpnNBAoAdEiee j+MxnLfztqb6Sg9M5wNNJpy60oOBdSw8TJwjzrY1x1rm70oB1NCZQIrLBZ2/LVGxAuOO7cFl 3GzviJfWnXugLgX893T4Tso1m7uOnteCFxQ1JyY2YIV1PsJvKQARAQABtDBQYWJsbyBBYmVs ZW5kYSAoQWJlbGVuZGEpIDxwYWJlbGVuZGFAaWdhbGlhLmNvbT6JAlQEEwEKAD4CGwMFCwkI BwMFFQoJCAsFFgIDAQACHgECF4AWIQTOZjlagwPnayzs6xX6giiAdoLHnwUCW0L3UwUJGHn8 lwAKCRD6giiAdoLHn+QZD/41NlHxtwMQBZfYdMEP/Dlxeo7UtGyvZa9XS1zuM/TeKRtjTKxf kfXxaaNkUq3ze8JUBg8F4aZgKPMpb3jXHMkZeQ2XrpS1vSjsxBt9oqjLt3Ffrt+39YiGGsu1 ydyHPftIe9PqDYP2Obb9ANf49eH/TN5l3rk4eWni7efoHQcnc5QnD0CaQ4Yw+Ky9DdqMeVpW LQ95er5/O16RJ0XUHDr5dzS3usEj3tqigjn+jJ5ZGvyV8YG495Sb8rw8urJegg6vaU5SrXnb pI7K4s60N+Ze766hl+AWaJEbg7zkzipfjhf7C51cY18xbkkOFoUkPJz2Fu6x5/b/P23QdxId 5tCKlfrYCaJQzeoT5N0uvw/5Gts/i91ZF/1DPf+Mb3kjLKlltT8yp+5zNHXs+vQG0gvHnOa5 crcw///hzXWHGrgrBB6WBD7bqbjORCmmSciLmNJvwOaImXlv0MfRVzKqvRQIlc7Uhrrv1j77 Z+UVgKZLlQvRK8eUeOUD8HPOO2d5YaJtKXJ+9YrjmUBj2AGVRTWsxJ/49fyhQ7X9N/r1leGU hOtnx6ZBm1kgyXXYDHb6aXfEYCwxJiGIMKjAMheCO+Wnd/gdVDYApL/eskOumsRwDeKhNvwZ fFrtkOMcCG0KQ4jqwHCja81s4lzY6cobXG4pk3sMBlbmcL+cLtR4Mq76sLkCDQRVlP28ARAA tXgZkkAZqDfZ4iJmxjAR2l40gfiN5DhBQI7McdaQm+D/5vU2vgR5R1H5VixFi+gIHGTtvFKI oXZbmkjZyZYxY8m3jpe3LGfCeflcDy8CI2Fjy9BTVOnDo1jNFnAxPoQNgKJ/NBh4sLIF7Myh kp02qMXtmmyGuUt55mc/CJGvfcYmApGsnVupjTJxB7kknwY95wZuLkuSInwMSl8fjC3pRhGl 6RwhJS3ZOmfXoVAKGn6GcEeZl6xHieBM8CU8qNfQ8sdUjvSUQdEoswEyqkB7za5G4NYdQHY1 aosyWAcugnHl5aU0Jsy3sLHsFdFdnoHcNkry5Z8s8XCeGwhDXxl8+ZxH2zA7z/TRiLsyCwbA 3AtDE15r511YfCye6bLk+31Pqr5lcY6p7soLarGUVYmzUUSgcNqve9Sg818rtLkap4YDhwYK xuB6nJLtSIJnQcLGVzQWuAyRWntwcV2j5QkPKW2MWAyJquGxWfxEmHSKJZpmgYxFcP9hXWbz SKAqstHr469c6SNRqW6Vn84HhfFG7Fp9pcz/x81E56CRz4sPpDcP41vZV+ymSNTaGYzr8Q9W +zs4pL39jomwvp471CyIHxxKNmoM1YQ8TD1179815Fcgq0yu8t6sgzwuzls4df/r+jw8Gh/U 9j55+YakRtb2aJ/WP9RRDPp4unJaZ3MyemMAEQEAAYkCPAQYAQoAJgIbDBYhBM5mOVqDA+dr LOzrFfqCKIB2gsefBQJbQvdwBQkYefy0AAoJEPqCKIB2gsef3FoP/3NXUBi2HjDF7TfX8BVX cuK2dRGkb8qlIcDjlWLqOCfNn96sRMgl6iX+eDCq7pux0jrS2Mk8OrBzeQWG4N/NhIEibMdH VPbB9ydFv9gCpyP43Hwq5NJf/Ftty8bx5R/g46Wc9Khm6zexMp3qBRYp0TzraBA5XYukJ6mg wfLm+Q4YhR7VyE4BoxiI1LjSI3dLA69RyHvIE1/ctULaxKttBPChjvUyuUaiqZ/EK9ENiCxq /Joaw0DLm8f+4QSrs89Mhm29/LEFdFCo2vHqtNyKMeHuH0a3avNsqwNMlob5ZWEMhH9ZI7BG +x5e0f6OnrCRS8Wtr2Um4WtLxpBA5cFLwAEhEme1EAhJrt6+icR9Yxn4sRaTT+7uFbIRF/w0 rhy7ZpecU6lHj2cEGTNo3+MgrX0vgZi0hhZtcsNttK5qBwaIvr5EXvLIIEgb3UsnkYOsgFNu CDkFrtTsL8wtEIe4kDW1USoWyW7/xdcmLRcb146WRsQiZ8x2FrF1xhl0aj9WrNWksZ+viDIB 47ocL3qEKOI6OfWNYD9ZXnjfZoQOklTwdLJvaA73v9u3eB3CFEai1TyL9pOqiLobivIgDB38 Becu0iwY/AN3yF6B0fuFAqi/09ZUVZ/HD2NcieHw+Sp4iIem4hdkaUx4gim7pUi/lmiSutxf h8jM65REeaIJatdk
  • Dmarc-filter: OpenDMARC Filter v1.2.0 mail.inverse.ca 265821DE50E3
  • Openpgp: preference=signencrypt

Hello,

We recently upgraded our SOGo installation from 4.0.0 to 4.0.8, and the
hosting server from Debian stretch to buster.

SOGo has an Apache-based proxy in front, and the LDAP server lives in
the same machine.

We are seeing some LDAP related authentication glitches since the upgrade:

- Every now and then, people get 401 to some SOGo requests, both
from the Web UI or from caldav clients like Evolution or mobile calendar
apps
- SOGo complaints about not been able to contact the server, but the
server is fully functional, listening on the ports should listen, and
authenticating correctly

Also, since the upgrade, we've noticed that there are quite a lot of
messages referring to the LDAP connections:

Creating NGLdapConnection instance for bindDN
'uid=user,ou=people,dc=domain,dc=org'

Around 250K in the last four days, which seems to be too much for a less
than 100 users instance with around 20 active.

We've seen also the following messages. Last line is quite puzzling. We
do not know where this encoded string is coming from at all.

https://pastebin.com/P1na4Hy8

We would appreciate if you can add some light here because we don't know
what is going on.

Thanks in advance.

Our LDAP config looks as follows:

SOGoUserSources = (
{
type = ldap;
CNFieldName = cn;
UIDFieldName = cn;
IDFieldName = cn;
SearchFieldNames = (mail, cn);
baseDN = "ou=groups,dc=domain,dc=org";
bindDN = "cn=admin,dc=domain,dc=org";
bindPassword = password;
canAuthenticate = NO;
hostname = ldap:/:/ldap.example.org;
id = ldaplocalgroups;
displayName = "Groups";
isAddressBook = YES;
listRequiresDot = NO;
filter = "(objectClass='groupOfUniqueNames')";
},

{
type = ldap;
CNFieldName = cn;
UIDFieldName = uid;
IDFieldName = uid;
SearchFieldNames = (uid, mail, cn, givenName, sn);
MailFieldNames = (mail);
baseDN = "ou=people,dc=domain,dc=org";
bindDN = "cn=admin,dc=domain,dc=org";
bindPassword = password;
canAuthenticate = YES;
hostname = ldap://ldap.example.org;
bindAsCurrentUser = YES;
userPasswordAlgorithm = ssha;
id = ldaplocal;
displayName = "People";
isAddressBook = YES;
listRequiresDot = NO;
ModulesConstraints = {
Mail = {
nonexistentattr = TRUE;
};
};
}
);

--
Pablo Abelenda
Mobile: +34606539874

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SOGo] Issues upon 4.0.8 upgrade, Pablo Abelenda, 08/19/2019

Archive powered by MHonArc 2.6.18.

Top of page