From machniak at kolabsys.com Thu Jul 2 10:19:09 2015 From: machniak at kolabsys.com (Aleksander Machniak) Date: Thu, 02 Jul 2015 10:19:09 +0200 Subject: [Kolab-devel] Quota/usage of other user mailbox Message-ID: <5594F3FD.90602@kolabsys.com> If other user shares some folders with me I can see his quota/usage via IMAP (Roundcube shows this). I'm curious if this should be considered a security issue. I didn't check if the info is available when any folder is writeable or only readable, but I suppose cyrus does not differentiate that (or does it?) RFC2087 says: "The resource usage of other users is likely to be considered confidential information and should not be divulged to unauthorized persons". I'm not sure giving access to a folder is such an authorization. -- Aleksander Machniak Software Developer, Kolab Systems AG ------------------------------------------------------- PGP:19359DC1 - http://kolabsys.com - http://alec.pl From jankow at datenkollektiv.net Tue Jul 7 12:08:22 2015 From: jankow at datenkollektiv.net (Jan Kowalsky) Date: Tue, 07 Jul 2015 12:08:22 +0200 Subject: [Kolab-devel] wallace module gpgencrypt - dealing with attachments Message-ID: <559BA516.9060501@datenkollektiv.net> Hi all, I took a look at this great idea of Jeroen to encrypt all incoming messages through wallace with the module_gpgencrypt. Since it didn't work with multipart messages yet I wrote some lines to handle them (as a bloody python beginner). Is there anybody still working on this module? Would it make sense to write some documentation on it? Best Regards Jan -------------- next part -------------- A non-text attachment was scrubbed... Name: module_gpgencrypt.py.diff Type: text/x-diff Size: 3024 bytes Desc: not available URL: From torsten at kolab.org Tue Jul 7 12:40:03 2015 From: torsten at kolab.org (Torsten Grote) Date: Tue, 07 Jul 2015 12:40:03 +0200 Subject: [Kolab-devel] wallace module gpgencrypt - dealing with attachments In-Reply-To: <559BA516.9060501@datenkollektiv.net> References: <559BA516.9060501@datenkollektiv.net> Message-ID: <2624543.uusHWX4tBl@mws01.kolabsys.com> Hi Jan, On Tuesday 07 July 2015 12:08:22 Jan Kowalsky wrote: > Since it didn't work with multipart messages yet I wrote some lines to > handle them (as a bloody python beginner). Great! Thank you for sharing that with us! Timotheus recently wrote about how to contribute patches. In case you didn't see it: https://kolab.org/blog/timotheus-pokorra/2015/07/01/submitting-patches-kolab-phabricator This way, we can review your changes and make sure they don't get lost. > Is there anybody still working on this module? Would it make sense to > write some documentation on it? This module is certainly still interesting and at the moment, you are working on it. Documenting your findings would definitely be welcome! :) Kind Regards, Torsten -- pgp: 0x2175A534A4F2EFA3 From MarcvanderBeeke at amerce.eu Wed Jul 8 12:27:17 2015 From: MarcvanderBeeke at amerce.eu (Marc B.) Date: Wed, 8 Jul 2015 10:27:17 +0000 (UTC) Subject: [Kolab-devel] Kolab 3.4 Syncroton References: <54FC9B49.1090002@gmx.de> <54FD4B67.5020602@kolabsys.com> Message-ID: Aleksander Machniak kolabsys.com> writes: > > On 03/08/2015 07:56 PM, Thomas Z. wrote: > > [08-Mar-2015 09:30:25,000000 +0100]: [ERR] {"user":"xxx yyy"} > > Syncroton_Server::_handlePost::191 Could not encode output: exception > > 'Syncroton_Wbxml_Exception' with message 'codepage Sync not found' in > > /usr/share/kolab-syncroton/lib/ext/Syncroton/Wbxml/Encoder.php:346 > > Fixed. https://issues.kolab.org/show_bug.cgi?id=4811 > It seems this problem still isn't fixed. I'm running the latest Syncroton version (Version: 2.3.2-0~kolab1) and still receive this error: [08-Jul-2015 13:19:10,000000 +0300]: [ERR] {"user":"***@***.***","cmd":"ItemOperations","device":"Mailwise713727787 0433618497","type":"Android"} Syncroton_Server::_handlePost::191 Could not encode output: exception 'S$ Stack trace: #0 /usr/share/kolab-syncroton/lib/ext/Syncroton/Server.php(188): Syncroton_Wbxml_Encoder->encode(Object(DOMDocument)) #1 /usr/share/kolab-syncroton/lib/ext/Syncroton/Server.php(70): Syncroton_Server->_handlePost() #2 /usr/share/kolab-syncroton/lib/kolab_sync.php(169): Syncroton_Server- >handle() #3 /usr/share/kolab-syncroton/index.php(31): kolab_sync->run() #4 {main} [08-Jul-2015 13:19:10,000000 +0300]: [ERR] {"user":"***@***.***","cmd":"ItemOperations","device":"Mailwise713727787 0433618497","type":"Android"} Syncroton_Server::_handlePost::192 xml response(0): This error is burning CPU resources, Apache2's load is very high because of this. From soliva at comcept.ch Thu Jul 16 14:27:09 2015 From: soliva at comcept.ch (Soliva Andrea) Date: Thu, 16 Jul 2015 14:27:09 +0200 Subject: [Kolab-devel] Kolab Server 3.4 on CentOS 32bit Feedback/Question Message-ID: Hi all there I Setup in the last view days/week a Kolab Server based on CentOS 6.6 32bit and I have no issues with Kolab 3.4 which means I do not recognize any None functionality even I enable full debug mode on the Services like ActiveSync, roundcube, cyrus-imap, postfix etc. The Servers homes about 7 Domains (seperated with multihome config). From this Point of view I have to really say: "hey guys from the developement - WELL DONE - I'm also impressed about roundcube" For your Information the Installation is running on: Architecture: i686 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list: 0-3 Thread(s) per core: 2 Core(s) per socket: 2 Socket(s): 1 Vendor ID: GenuineIntel CPU family: 6 Model: 28 Stepping: 10 CPU MHz: 1800.092 BogoMIPS: 3600.18 L1d cache: 24K L1i cache: 32K L2 cache: 512K Of course it is not a Server or Installation which is installed out of the box (not from installing Point of view) which means you have to invetigate to understand the Server topology and what is for what responsible etc. I had also contact with a friend which his Company is doing security for Kolab Server. From this Point of view I created also my own DH Parameter as restrictions on the protocols. From this Point view I'm actually in testing Phase but it seems all is working fine :-) To mentione again really WELL DONE guys from devel. As it "must" be at the end :-) I have one/two message which is shown in /var/log/message and in "dmesg" but to not have a misunderstanding "There is no Impact in functionality of the Kolab Server" all is running fine: /var/log/message (showing up from time to time; since Setting preforc=1 for ptloader I do not have this Messages regularly) Jul 15 12:34:50 kolab imap/ptloader[1463]: No entries found Jul 15 12:34:50 kolab imap/imaps[1741]: ptload(): bad response from ptloader server: identifier not found Jul 15 12:34:50 kolab imap/imaps[1741]: ptload failed: but canonified cyrus-admin -> cyrus-admin dmesg (it seems that this message are appearing on regular base) ctl_cyrusdb[1451]: segfault at 7261763b ip b73d8c41 sp bfbe2df8 error 4 in libc-2.12.so[b7368000+190000] ctl_cyrusdb[2346]: segfault at 7261763b ip 00b21c41 sp bfc90508 error 4 in libc-2.12.so[ab1000+190000] ctl_cyrusdb[3139]: segfault at 7261763b ip b74e8c41 sp bfc92df8 error 4 in libc-2.12.so[b7478000+190000] ctl_cyrusdb[3449]: segfault at 7261763b ip b7505c41 sp bfa0c498 error 4 in libc-2.12.so[b7495000+190000] ctl_cyrusdb[3539]: segfault at 7261763b ip b75d0c41 sp bfe71d38 error 4 in libc-2.12.so[b7560000+190000] The first message regarding "ptload" as I feel after investigation in several Forums etc. is making some other "Installations" also thinking about but should not have any Impact on whatever? The second one makes me thinking more....there is some message about such Messages like: https://issues.kolab.org/show_bug.cgi?id=3963 I do not 100% know if this is already pushed to cyrus-imap I do not think so right? I have installed from Kolab Repo: # cyradm --user cyrus-admin localhost verify error:num=20:unable to get local issuer certificate verify error:num=27:certificate not trusted verify error:num=21:unable to verify the first certificate IMAP Password: kolab> version name : Cyrus IMAPD version : git2.5+0-Kolab-2.5-108.1.el6.kolab_3.4 vendor : Project Cyrus support-url: http://www.cyrusimap.org os : Linux os-version : 2.6.32-504.23.4.el6.i686 environment: Built w/Cyrus SASL 2.1.23 Running w/Cyrus SASL 2.1.23 Built w/OpenSSL 1.0.1e-fips 11 Feb 2013 Running w/OpenSSL 1.0.1e-fips 11 Feb 2013 Built w/zlib 1.2.3 Running w/zlib 1.2.3 CMU Sieve 2.4 TCP Wrappers NET-SNMP mmap = shared lock = fcntl nonblock = fcntl idle = idled kolab> quit If I'm right it should be the latest available Version! At least I would like to mentione again: I do not have any Impact all is working fine no Problem. Does anybody have any Information about such Messages? Any answer appriciated :-) Have a nice day Kind regards Andrea From soliva at comcept.ch Fri Jul 24 10:17:27 2015 From: soliva at comcept.ch (Soliva Andrea) Date: Fri, 24 Jul 2015 10:17:27 +0200 Subject: [Kolab-devel] Fwd: Kolab Server 3.4 on CentOS 32bit Feedback/Question In-Reply-To: References: Message-ID: <351083a81cca4547d62e0dc2766d22fc@comcept.ch> Hi all I investigated more related to the seg fault which was noted in my email below which means: ctl_cyrusdb[1451]: segfault at 7261763b ip b73d8c41 sp bfbe2df8 error 4 in libc-2.12.so[b7368000+190000] ctl_cyrusdb[2346]: segfault at 7261763b ip 00b21c41 sp bfc90508 error 4 in libc-2.12.so[ab1000+190000] ctl_cyrusdb[3139]: segfault at 7261763b ip b74e8c41 sp bfc92df8 error 4 in libc-2.12.so[b7478000+190000] ctl_cyrusdb[3449]: segfault at 7261763b ip b7505c41 sp bfa0c498 error 4 in libc-2.12.so[b7495000+190000] ctl_cyrusdb[3539]: segfault at 7261763b ip b75d0c41 sp bfe71d38 error 4 in libc-2.12.so[b7560000+190000] I can 100% confirm that this Messages are related to the entry in cyrus.conf: EVENTS { # this is required checkpoint cmd="ctl_cyrusdb -c" period=30 Always this happens in the Background in the log is shown: Jul 23 17:09:34 kolab imap/master[13550]: process type:EVENT name:checkpoint path:/usr/lib/cyrus-imapd/ctl_cyrusdb age:0.107s pid:13857 signaled to death by signal 11 (Segmentation fault) an the shown message above is shown under dmesg. From this Point of view this happens on regular base (each 30 minutes). This issue seems to be not new which means: http://lists.kolab.org/pipermail/users/2014-September/017930.html https://lists.kolabsys.com/pipermail/bugzilla/2014-October/017290.html For a test I deleted the existing checkpoints db.backup* and startet again. Within the start no issue no seg fault but after 30 minutes it beginns from scratch. The Server is running now over 1 month and several Domains and User are using the Server without of any issue. I tested contact, calender, notes including Connections over IMAPS, SMTPS, ActiveSync and so on...no Errors no issues. Full Debug mode was running now over 1 month without any issues. It seems to me a stability Problem? Anybody any Information regarding such a issue? by the way I also cleaned up all db's excl. mailboxes.db as annotations.db and imported a clean mboxlist but no Progress etc. Kind regards Andrea -------- Originalnachricht -------- Betreff: Kolab Server 3.4 on CentOS 32bit Feedback/Question Datum: 16-07-2015 14:27 Von: Soliva Andrea An: users at lists.kolab.org, devel at lists.kolab.org Hi all there I Setup in the last view days/week a Kolab Server based on CentOS 6.6 32bit and I have no issues with Kolab 3.4 which means I do not recognize any None functionality even I enable full debug mode on the Services like ActiveSync, roundcube, cyrus-imap, postfix etc. The Servers homes about 7 Domains (seperated with multihome config). From this Point of view I have to really say: "hey guys from the developement - WELL DONE - I'm also impressed about roundcube" For your Information the Installation is running on: Architecture: i686 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list: 0-3 Thread(s) per core: 2 Core(s) per socket: 2 Socket(s): 1 Vendor ID: GenuineIntel CPU family: 6 Model: 28 Stepping: 10 CPU MHz: 1800.092 BogoMIPS: 3600.18 L1d cache: 24K L1i cache: 32K L2 cache: 512K Of course it is not a Server or Installation which is installed out of the box (not from installing Point of view) which means you have to invetigate to understand the Server topology and what is for what responsible etc. I had also contact with a friend which his Company is doing security for Kolab Server. From this Point of view I created also my own DH Parameter as restrictions on the protocols. From this Point view I'm actually in testing Phase but it seems all is working fine :-) To mentione again really WELL DONE guys from devel. As it "must" be at the end :-) I have one/two message which is shown in /var/log/message and in "dmesg" but to not have a misunderstanding "There is no Impact in functionality of the Kolab Server" all is running fine: /var/log/message (showing up from time to time; since Setting preforc=1 for ptloader I do not have this Messages regularly) Jul 15 12:34:50 kolab imap/ptloader[1463]: No entries found Jul 15 12:34:50 kolab imap/imaps[1741]: ptload(): bad response from ptloader server: identifier not found Jul 15 12:34:50 kolab imap/imaps[1741]: ptload failed: but canonified cyrus-admin -> cyrus-admin dmesg (it seems that this message are appearing on regular base) ctl_cyrusdb[1451]: segfault at 7261763b ip b73d8c41 sp bfbe2df8 error 4 in libc-2.12.so[b7368000+190000] ctl_cyrusdb[2346]: segfault at 7261763b ip 00b21c41 sp bfc90508 error 4 in libc-2.12.so[ab1000+190000] ctl_cyrusdb[3139]: segfault at 7261763b ip b74e8c41 sp bfc92df8 error 4 in libc-2.12.so[b7478000+190000] ctl_cyrusdb[3449]: segfault at 7261763b ip b7505c41 sp bfa0c498 error 4 in libc-2.12.so[b7495000+190000] ctl_cyrusdb[3539]: segfault at 7261763b ip b75d0c41 sp bfe71d38 error 4 in libc-2.12.so[b7560000+190000] The first message regarding "ptload" as I feel after investigation in several Forums etc. is making some other "Installations" also thinking about but should not have any Impact on whatever? The second one makes me thinking more....there is some message about such Messages like: https://issues.kolab.org/show_bug.cgi?id=3963 I do not 100% know if this is already pushed to cyrus-imap I do not think so right? I have installed from Kolab Repo: # cyradm --user cyrus-admin localhost verify error:num=20:unable to get local issuer certificate verify error:num=27:certificate not trusted verify error:num=21:unable to verify the first certificate IMAP Password: kolab> version name : Cyrus IMAPD version : git2.5+0-Kolab-2.5-108.1.el6.kolab_3.4 vendor : Project Cyrus support-url: http://www.cyrusimap.org os : Linux os-version : 2.6.32-504.23.4.el6.i686 environment: Built w/Cyrus SASL 2.1.23 Running w/Cyrus SASL 2.1.23 Built w/OpenSSL 1.0.1e-fips 11 Feb 2013 Running w/OpenSSL 1.0.1e-fips 11 Feb 2013 Built w/zlib 1.2.3 Running w/zlib 1.2.3 CMU Sieve 2.4 TCP Wrappers NET-SNMP mmap = shared lock = fcntl nonblock = fcntl idle = idled kolab> quit If I'm right it should be the latest available Version! At least I would like to mentione again: I do not have any Impact all is working fine no Problem. Does anybody have any Information about such Messages? Any answer appriciated :-) Have a nice day Kind regards Andrea _______________________________________________ users mailing list users at lists.kolab.org https://lists.kolab.org/mailman/listinfo/users From andrea.soliva at comcept.ch Tue Jul 28 11:29:48 2015 From: andrea.soliva at comcept.ch (Soliva, Andrea) Date: Tue, 28 Jul 2015 11:29:48 +0200 Subject: [Kolab-devel] Kolab Server 3.4 on CentOS 32bit Feedback/Question (iRony on IPhone CalDAV CardDAV) Message-ID: <1e2ffa0cfc17d47cad7f20c6b64424c1@comcept.ch> Hi all only a Feedback but probably interessting: I tested iRony on IPhone CalDAV and/or CardDAV. If you configure for CardDAV following below the URI which is used under andvanced setting will be set correctly from scratch: Server : [FQDN Kolab Server]/iRony Benutzername: [Your Kolab User Account like user at mydomain.ch] Passwort: [Your Kolab User Account Password] This means as soon as you confirm for CardDAV the settings and you look afterwards to the account following is used for the URI: https://[FQDN Kolab Server]/iRony/pricipals/[Email Address like user at mydomain.ch/ From this Point of view it works out of the box without changing anything. If you do the same for "CalDAV" the URI is not set automatically correctly which means the configuration will be successful confirmed but the calendar can not be seen. If you look closer to the account the URI is set as: https://[FQDN Kolab Server]/iRony If you replace the URI with: https://[FQDN Kolab Server]/iRony/pricipals/[Email Address like user at mydomain.ch/ All is working as designed. The Initial request I monitored on the server in debug mode and I can see that the URI is mentioned correctly (like this one which is mentioned above). To not have a misunderstanding this was only a test using ActivSync on IPhone which works perfect :-) Using on the IPhone 8.4 and tested several time in several constellation like first CalDAV after CardDAV etc. etc. always CalDAV is not set correctly. This for your Information and probably helpful. Kind regards Andrea Soliva Email: andrea.soliva at comcept.ch From soliva at comcept.ch Tue Jul 28 15:26:31 2015 From: soliva at comcept.ch (Soliva Andrea) Date: Tue, 28 Jul 2015 15:26:31 +0200 Subject: [Kolab-devel] Kolab Server 3.4 on CentOS 32bit Feedback/Question (ActiveSync Outlook 2013) Message-ID: <9f9eef468b2e5949055550baa4a23318@comcept.ch> Hi here another feedback of tests which means focusing on Calender, Contact and Notes using the "main" Calender and "main" Contact ("not" the personal one): Using IPad 8.4 (ActivSync), IPhone 8.4 (ActiveSync), Outlook 2013 (Win 7 latest Patch on OS and Office 2013 both 32bit) on same account. Did following test: !!!!!! Master is "roundcubemail" which means creating initially all contacts, calender entries and notes etc. within "roundcubemail" !!!!!! --> ActiveSync IPad/IPhone getting all information from Calender, Contact, Notes including all details from Contact like birthday etc. including personal information which was added. It works really great :-) --> ActiveSync Outlook 2013 getting all information from Contacts (some detailed personal information is not available but is a Outlook restriction), "no" Notes (not possible), "no" Calender! What is funny is that I will not get any Calender information within Outlook 2013 from "roundcubemail" which means: if I create a new entry in "roundcubemail" I see the new entry from "roundcubemail" within "Outlook 2013" for some seconds but it disapears afterwards asap. I do not know why? On the server ActiveSync is in debug and I do not see any errors which indicating that it would be not recognized on Outlook 2013 site. If I create a entry within Outlook 2013 I see the entry in "roundcubemail" asap as it will be sync to IPad/IPhone. If I create a entry within IPad/IPhone it will be sync to "roundcubemail" but not Outlook 2013. I deleted the .ost file as the corresponding entries for Outlook 2013 and I fetsched from scratch all information (deleting caching information) but even this did not solve the behaviour. What I also recognize is that if a contact is sync to Outlook 2013 the personal info as example "children" is not fully provided because Outlook 2013 is not able to show such information. If such a contact with personal info on "roundcubemail" site within Outlook 2013 is opened (which comes initially from "roundcubemail") and modified it is sync to "roundcubmail" personal information is getting lost. This is not nice because "roundcubemail" is providing really nice contact Information and this info is fully also sync to IPad/IPhone. At least or more or less at the end I deleted everything on everydevice and used as Master Outlook 2013 which means every initial information is coming from Outlook 2013. All information is sync overall devices etc. but for the calender the same situation meaning if IPad/IPhone or "roundcubemail" is creating a calender entry it is not sync to Outlook 2013! Is this a default behaviour for Outlook 2013 or ....? -- Mit freundlichen Gr?ssen Andrea Soliva Email: andrea.soliva at comcept.ch Kind regards Andrea Soliva Email: andrea.soliva at comcept.ch From soliva at comcept.ch Thu Jul 30 10:32:04 2015 From: soliva at comcept.ch (Soliva Andrea) Date: Thu, 30 Jul 2015 10:32:04 +0200 Subject: [Kolab-devel] Kolab Server 3.4 on CentOS 32bit Feedback/Question (ActiveSync Outlook 2013) In-Reply-To: <4863fe9a4e179f6eb77c73375d42078f@comcept.ch> References: <9f9eef468b2e5949055550baa4a23318@comcept.ch> <1618006.ZtHZEeRarA@mws01.kolabsys.com> <4863fe9a4e179f6eb77c73375d42078f@comcept.ch> Message-ID: <5edafbfd0b9775632981e226f50592a6@comcept.ch> Hi Torsten it works now....I have to say that I really testing hard with this account with different devices and it seems to me that something in the Background was not anymore this what it should be. This means I begann from scratch again which means: - Outlook 2013 cleaning up all Cache files - Deleted entry in "roundcubemail" for Outlook 2013 device completly Connecting again with both sites clean and it works :-) At this Point also a Feedback from MacOSx site using IMAPS, SMTPS as iRony CalDAV as CardDAV. Tested sync with IPhone as Android and it works really nice :-) From this Point of view cool work guys :-) Andrea Soliva Email: andrea.soliva at comcept.ch Am 28-07-2015 17:07, schrieb Soliva Andrea: > Hi Torsten > > yes full debug enabled and can not see any Errors or some unusual > stuff! > > Your answer is indicating that this is not the normal behaviour > meaning if a calender entry is done within roundcube it shouls without > any issue appear within Outlook 2013 right? If so I will investigate > further was only not sure if this could be probably a bug or whatever > :-) > > Kind regards > > Andrea Soliva > > Email: andrea.soliva at comcept.ch > > Am 28-07-2015 16:25, schrieb Torsten Grote: >> On Tuesday 28 July 2015 15:26:31 Soliva Andrea wrote: >>> if I create a new entry in "roundcubemail" I see the new entry from >>> "roundcubemail" within "Outlook 2013" for some seconds but it >>> disapears >>> afterwards asap. I do not know why? >> >> Did you try to enable full debug and transaction logging for >> ActiveSync? >> >> >> https://docs.kolab.org/administrator-guide/verifying-the-installation.html#activesync >> >> Kind Regards, >> Torsten > _______________________________________________ > users mailing list > users at lists.kolab.org > https://lists.kolab.org/mailman/listinfo/users