<div dir="ltr">Timotheus,<div><br>This script, is this something I can run on a fresh kolab 3.4 install to get multi domain working? If so, that would really be awesome and I'd be happy to contribute to it!</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 25, 2015 at 10:25 AM, Timotheus Pokorra <span dir="ltr"><<a href="mailto:timotheus@kolab.org" target="_blank">timotheus@kolab.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Paul,<br>
<br>
I have to admit I did not get the canonification to work for my<br>
multidomain setup.<br>
So I am removing it in my scripts:<br>
<a href="https://github.com/TBits/KolabScripts/blob/master/kolab/initMultiDomain.sh#L10" rel="noreferrer" target="_blank">https://github.com/TBits/KolabScripts/blob/master/kolab/initMultiDomain.sh#L10</a><br>
<br>
Perhaps other parts of that script are useful to you as well.<br>
<br>
All the best,<br>
Timotheus<br>
<div class="HOEnZb"><div class="h5"><br>
On 25 August 2015 at 16:19, Paul Bronson <<a href="mailto:signaldeveloper@gmail.com">signaldeveloper@gmail.com</a>> wrote:<br>
> Anybody else have any ideas on this? Again this is a fresh "follow the<br>
> direction" multi domain setup and I don't know exactly what went wrong.<br>
><br>
> On Mon, Aug 24, 2015 at 10:31 PM, <<a href="mailto:signaldeveloper@gmail.com">signaldeveloper@gmail.com</a>> wrote:<br>
>><br>
>> I tried playing with that. Didn't help. Anyone else have some ideas on<br>
>> this? Brian (you are my man!!)<br>
>><br>
>><br>
>><br>
>> Sent from my iPhone<br>
>><br>
>> > On Aug 24, 2015, at 8:24 PM, Thomas Spuhler<br>
>> > <<a href="mailto:thomas.spuhler@btspuhler.com">thomas.spuhler@btspuhler.com</a>> wrote:<br>
>> ><br>
>> >> On Monday, August 24, 2015 08:21:09 PM Paul Bronson wrote:<br>
>> >> So I am running into a whirlwind of issues with my cyrus install. I am<br>
>> >> setting up a multi-domain kolab groupware solution. I am on centos 6.7<br>
>> >><br>
>> >> I am getting this flooding my error logs when I try to make a new user<br>
>> >> on a<br>
>> >> fresh multi domain setup:<br>
>> >><br>
>> >> Aug 24 19:01:19 gmx1 imaps[1911]: badlogin: localhost [::1] PLAIN<br>
>> >> [SASL(-13): authentication failure: bad userid authenticated]<br>
>> >> Aug 24 19:01:23 gmx1 imaps[1916]: starttls: TLSv1.2 with cipher<br>
>> >> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication<br>
>> >> Aug 24 19:01:23 gmx1 imaps[1916]: SASL unable to open Berkeley db<br>
>> >> /etc/sasldb2: No such file or directory<br>
>> >> Aug 24 19:01:23 gmx1 imaps[1916]: SASL unable to open Berkeley db<br>
>> >> /etc/sasldb2: No such file or directory<br>
>> >> Aug 24 19:01:23 gmx1 imaps[1916]: ptload(): bad response from<br>
>> >> ptloader<br>
>> >> server: ptsmodule_canonifyid() failed<br>
>> >> Aug 24 19:01:23 gmx1 imaps[1916]: ptload completely failed: unable<br>
>> >> to<br>
>> >> canonify identifier: 'john'[0:1]<a href="mailto:doe@domain.com">doe@domain.com</a><br>
>> >> Aug 24 19:01:23 gmx1 imaps[1916]: SASL bad userid authenticated<br>
>> >><br>
>> >><br>
>> >> The users do NOT show up on kolab webadmin... It keeps trying to add a<br>
>> >> test<br>
>> >> user I made and won't stop trying. I reboot the server and it goes<br>
>> >> away.<br>
>> >><br>
>> >> I tried playing with:<br>
>> >><br>
>> >> /etc/imapd.conf<br>
>> >><br>
>> >> ldap_domain_base_dn: cn=kolab,cn=config<br>
>> >> ldap_domain_filter:<br>
>> >> (&(objectclass=domainrelatedobject)(associateddomain=%s))<br>
>> >> ldap_domain_name_attribute: associatedDomain<br>
>> >> ldap_domain_scope: sub<br>
>> >> ldap_domain_result_attribute: inetdomainbasedn<br>
>> >><br>
>> >><br>
>> >> I also noticed these at the top.. Should this be "PLAIN" ? see below..<br>
>> >><br>
>> >> sasl_pwcheck_method: auxprop saslauthd<br>
>> >> sasl_mech_list: PLAIN LOGIN<br>
>> >> allowplaintext: no<br>
>> > I have (Mageia5)<br>
>> > pwcheck_method: saslauthd<br>
>> > mech_list: plain login<br>
>> ><br>
>> ><br>
>> >><br>
>> >><br>
>> >> My imapd config:<br>
>> >><br>
>> >> configdirectory: /var/lib/imap<br>
>> >> partition-default: /var/spool/imap<br>
>> >> admins: cyrus-admin<br>
>> >> sievedir: /var/lib/imap/sieve<br>
>> >> sendmail: /usr/sbin/sendmail<br>
>> >> sasl_pwcheck_method: auxprop saslauthd<br>
>> >> sasl_mech_list: PLAIN LOGIN<br>
>> >> allowplaintext: no<br>
>> >> tls_server_cert: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
>> >> tls_server_key: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
>> >> # uncomment this if you're operating in a DSCP environment<br>
>> >> (RFC-4594)<br>
>> >> # qosmarking: af13<br>
>> >> auth_mech: pts<br>
>> >> pts_module: ldap<br>
>> >> ldap_servers: ldap://localhost:389<br>
>> >> ldap_sasl: 0<br>
>> >> ldap_base: dc=domain,dc=com<br>
>> >> ldap_bind_dn: uid=kolab-service,ou=Special Users,dc=domain,dc=com<br>
>> >> ldap_password: WIY0DNbAYPc8uY5<br>
>> >> ldap_filter:<br>
>> >><br>
>> >> (|(&(|(uid=cyrus-admin)(uid=cyrus-murder))(uid=%U))(&(|(uid=%U)(mail=%U@<br>
>> >> %d)(mail=%U@%r))(objectclass=kolabinetorgperson)))<br>
>> >> ldap_user_attribute: mail<br>
>> >> ldap_group_base: dc=domain,dc=com<br>
>> >> ldap_group_filter:<br>
>> >> (&(cn=%u)(objectclass=ldapsubentry)(objectclass=nsroledefinition))<br>
>> >> ldap_group_scope: one<br>
>> >> ldap_member_base: ou=People,dc=domain,dc=com<br>
>> >> ldap_member_method: attribute<br>
>> >> ldap_member_attribute: nsrole<br>
>> >> ldap_restart: 1<br>
>> >> ldap_timeout: 10<br>
>> >> ldap_time_limit: 10<br>
>> >> unixhierarchysep: 1<br>
>> >> virtdomains: userid<br>
>> >> annotation_definitions: /etc/imapd.annotations.conf<br>
>> >> sieve_extensions: fileinto reject envelope body vacation imapflags<br>
>> >> notify include regex subaddress relational copy date index<br>
>> >> allowallsubscribe: 0<br>
>> >> allowusermoves: 1<br>
>> >> altnamespace: 1<br>
>> >> hashimapspool: 1<br>
>> >> anysievefolder: 1<br>
>> >> fulldirhash: 0<br>
>> >> sieveusehomedir: 0<br>
>> >> sieve_allowreferrals: 0<br>
>> >> lmtp_downcase_rcpt: 1<br>
>> >> lmtp_fuzzy_mailbox_match: 1<br>
>> >> username_tolower: 1<br>
>> >> deletedprefix: DELETED<br>
>> >> delete_mode: delayed<br>
>> >> expunge_mode: delayed<br>
>> >> postuser: shared<br>
>> >><br>
>> >> ldap_domain_base_dn: cn=kolab,cn=config<br>
>> >> ldap_domain_filter:<br>
>> >> (&(objectclass=domainrelatedobject)(associateddomain=%s))<br>
>> >> ldap_domain_name_attribute: associatedDomain<br>
>> >> ldap_domain_scope: sub<br>
>> >> ldap_domain_result_attribute: inetdomainbasedn<br>
>> >><br>
>> >><br>
>> >> Cyrus version:<br>
>> >><br>
>> >> name : Cyrus IMAPD<br>
>> >> version : git2.5+0-Kolab-2.5-108.1.el6.kolab_3.4<br>
>> >> vendor : Project Cyrus<br>
>> >> support-url: <a href="http://www.cyrusimap.org" rel="noreferrer" target="_blank">http://www.cyrusimap.org</a><br>
>> >> os : Linux<br>
>> >> os-version : 2.6.32-042stab108.7<br>
>> >> environment: Built w/Cyrus SASL 2.1.23<br>
>> >> Running w/Cyrus SASL 2.1.23<br>
>> >> Built w/OpenSSL 1.0.1e-fips 11 Feb 2013<br>
>> >> Running w/OpenSSL 1.0.1e-fips 11 Feb 2013<br>
>> >> Built w/zlib 1.2.3<br>
>> >> Running w/zlib 1.2.3<br>
>> >> CMU Sieve 2.4<br>
>> >> TCP Wrappers<br>
>> >> NET-SNMP<br>
>> >> mmap = shared<br>
>> >> lock = fcntl<br>
>> >> nonblock = fcntl<br>
>> >> idle = idled<br>
>> >><br>
>> >><br>
>> >><br>
>> >> Kolab web-admin is in turn unable to write the entry to Cyrus as the<br>
>> >> user<br>
>> >> doesn't showing the roundcube DB.<br>
>> >><br>
>> >><br>
>> >> I think my main problem is that this "ptloader" cannot canonify the<br>
>> >> user.<br>
>> >> Should I turn on canonicalization?<br>
>> >><br>
>> >> This article states to use it:<br>
>> >> <a href="https://docs.kolab.org/howtos/multi-domain.html#cyrus-imap-changes" rel="noreferrer" target="_blank">https://docs.kolab.org/howtos/multi-domain.html#cyrus-imap-changes</a><br>
>> >><br>
>> >> This one does not:<br>
>> >> <a href="http://bmts.us/wiki/doku.php?id=article:kolab:multidomain" rel="noreferrer" target="_blank">http://bmts.us/wiki/doku.php?id=article:kolab:multidomain</a><br>
>> ><br>
>> > --<br>
>> > Best regards<br>
>> > Thomas Spuhler<br>
>> ><br>
>> > All of my e-mails have a valid digital signature<br>
>> > ID 60114E63<br>
>> > _______________________________________________<br>
>> > users mailing list<br>
>> > <a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
>> > <a href="https://lists.kolab.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> users mailing list<br>
> <a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
> <a href="https://lists.kolab.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br>
</div></div></blockquote></div><br></div>