<div dir="ltr">That seems to eliminate my errors, but when I log in with a user on a secondary domain I get:<div><br></div><div><span style="color:rgb(51,51,51);font-family:'Trebuchet MS','Lucida Grande','Lucida Sans Unicode','Lucid Sans',sans-serif;font-size:12px">Server Error: STATUS: Mailbox does not exist</span><br></div><div><span style="color:rgb(51,51,51);font-family:'Trebuchet MS','Lucida Grande','Lucida Sans Unicode','Lucid Sans',sans-serif;font-size:12px"><br></span></div><div><span style="color:rgb(51,51,51);font-family:'Trebuchet MS','Lucida Grande','Lucida Sans Unicode','Lucid Sans',sans-serif;font-size:12px"><br></span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 25, 2015 at 10:41 AM, Timotheus Pokorra <span dir="ltr"><<a href="mailto:timotheus@kolab.org" target="_blank">timotheus@kolab.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Paul,<br>
<br>
that script is working for me quite ok, but it is just an example how<br>
it could work.<br>
You need to be able to understand what it does. There is no guarantuee<br>
on it that it is useful to you.<br>
I cannot guarantuee an upgrade path to future versions of Kolab either.<br>
<br>
You are free to use it, and contribute as well, of course :)<br>
<br>
All the best,<br>
Timotheus<br>
<div class="HOEnZb"><div class="h5"><br>
On 25 August 2015 at 16:35, Paul Bronson <<a href="mailto:signaldeveloper@gmail.com">signaldeveloper@gmail.com</a>> wrote:<br>
> Timotheus,<br>
><br>
> This script, is this something I can run on a fresh kolab 3.4 install to get<br>
> multi domain working? If so, that would really be awesome and I'd be happy<br>
> to contribute to it!<br>
><br>
> On Tue, Aug 25, 2015 at 10:25 AM, Timotheus Pokorra <<a href="mailto:timotheus@kolab.org">timotheus@kolab.org</a>><br>
> wrote:<br>
>><br>
>> Hello Paul,<br>
>><br>
>> I have to admit I did not get the canonification to work for my<br>
>> multidomain setup.<br>
>> So I am removing it in my scripts:<br>
>><br>
>> <a href="https://github.com/TBits/KolabScripts/blob/master/kolab/initMultiDomain.sh#L10" rel="noreferrer" target="_blank">https://github.com/TBits/KolabScripts/blob/master/kolab/initMultiDomain.sh#L10</a><br>
>><br>
>> Perhaps other parts of that script are useful to you as well.<br>
>><br>
>> All the best,<br>
>> Timotheus<br>
>><br>
>> On 25 August 2015 at 16:19, Paul Bronson <<a href="mailto:signaldeveloper@gmail.com">signaldeveloper@gmail.com</a>><br>
>> wrote:<br>
>> > Anybody else have any ideas on this? Again this is a fresh "follow the<br>
>> > direction" multi domain setup and I don't know exactly what went wrong.<br>
>> ><br>
>> > On Mon, Aug 24, 2015 at 10:31 PM, <<a href="mailto:signaldeveloper@gmail.com">signaldeveloper@gmail.com</a>> wrote:<br>
>> >><br>
>> >> I tried playing with that. Didn't help. Anyone else have some ideas on<br>
>> >> this? Brian (you are my man!!)<br>
>> >><br>
>> >><br>
>> >><br>
>> >> Sent from my iPhone<br>
>> >><br>
>> >> > On Aug 24, 2015, at 8:24 PM, Thomas Spuhler<br>
>> >> > <<a href="mailto:thomas.spuhler@btspuhler.com">thomas.spuhler@btspuhler.com</a>> wrote:<br>
>> >> ><br>
>> >> >> On Monday, August 24, 2015 08:21:09 PM Paul Bronson wrote:<br>
>> >> >> So I am running into a whirlwind of issues with my cyrus install. I<br>
>> >> >> am<br>
>> >> >> setting up a multi-domain kolab groupware solution. I am on centos<br>
>> >> >> 6.7<br>
>> >> >><br>
>> >> >> I am getting this flooding my error logs when I try to make a new<br>
>> >> >> user<br>
>> >> >> on a<br>
>> >> >> fresh multi domain setup:<br>
>> >> >><br>
>> >> >> Aug 24 19:01:19 gmx1 imaps[1911]: badlogin: localhost [::1] PLAIN<br>
>> >> >> [SASL(-13): authentication failure: bad userid authenticated]<br>
>> >> >> Aug 24 19:01:23 gmx1 imaps[1916]: starttls: TLSv1.2 with cipher<br>
>> >> >> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication<br>
>> >> >> Aug 24 19:01:23 gmx1 imaps[1916]: SASL unable to open Berkeley db<br>
>> >> >> /etc/sasldb2: No such file or directory<br>
>> >> >> Aug 24 19:01:23 gmx1 imaps[1916]: SASL unable to open Berkeley db<br>
>> >> >> /etc/sasldb2: No such file or directory<br>
>> >> >> Aug 24 19:01:23 gmx1 imaps[1916]: ptload(): bad response from<br>
>> >> >> ptloader<br>
>> >> >> server: ptsmodule_canonifyid() failed<br>
>> >> >> Aug 24 19:01:23 gmx1 imaps[1916]: ptload completely failed:<br>
>> >> >> unable<br>
>> >> >> to<br>
>> >> >> canonify identifier: 'john'[0:1]<a href="mailto:doe@domain.com">doe@domain.com</a><br>
>> >> >> Aug 24 19:01:23 gmx1 imaps[1916]: SASL bad userid authenticated<br>
>> >> >><br>
>> >> >><br>
>> >> >> The users do NOT show up on kolab webadmin... It keeps trying to add<br>
>> >> >> a<br>
>> >> >> test<br>
>> >> >> user I made and won't stop trying. I reboot the server and it goes<br>
>> >> >> away.<br>
>> >> >><br>
>> >> >> I tried playing with:<br>
>> >> >><br>
>> >> >> /etc/imapd.conf<br>
>> >> >><br>
>> >> >> ldap_domain_base_dn: cn=kolab,cn=config<br>
>> >> >> ldap_domain_filter:<br>
>> >> >> (&(objectclass=domainrelatedobject)(associateddomain=%s))<br>
>> >> >> ldap_domain_name_attribute: associatedDomain<br>
>> >> >> ldap_domain_scope: sub<br>
>> >> >> ldap_domain_result_attribute: inetdomainbasedn<br>
>> >> >><br>
>> >> >><br>
>> >> >> I also noticed these at the top.. Should this be "PLAIN" ? see<br>
>> >> >> below..<br>
>> >> >><br>
>> >> >> sasl_pwcheck_method: auxprop saslauthd<br>
>> >> >> sasl_mech_list: PLAIN LOGIN<br>
>> >> >> allowplaintext: no<br>
>> >> > I have (Mageia5)<br>
>> >> > pwcheck_method: saslauthd<br>
>> >> > mech_list: plain login<br>
>> >> ><br>
>> >> ><br>
>> >> >><br>
>> >> >><br>
>> >> >> My imapd config:<br>
>> >> >><br>
>> >> >> configdirectory: /var/lib/imap<br>
>> >> >> partition-default: /var/spool/imap<br>
>> >> >> admins: cyrus-admin<br>
>> >> >> sievedir: /var/lib/imap/sieve<br>
>> >> >> sendmail: /usr/sbin/sendmail<br>
>> >> >> sasl_pwcheck_method: auxprop saslauthd<br>
>> >> >> sasl_mech_list: PLAIN LOGIN<br>
>> >> >> allowplaintext: no<br>
>> >> >> tls_server_cert: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
>> >> >> tls_server_key: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
>> >> >> # uncomment this if you're operating in a DSCP environment<br>
>> >> >> (RFC-4594)<br>
>> >> >> # qosmarking: af13<br>
>> >> >> auth_mech: pts<br>
>> >> >> pts_module: ldap<br>
>> >> >> ldap_servers: ldap://localhost:389<br>
>> >> >> ldap_sasl: 0<br>
>> >> >> ldap_base: dc=domain,dc=com<br>
>> >> >> ldap_bind_dn: uid=kolab-service,ou=Special Users,dc=domain,dc=com<br>
>> >> >> ldap_password: WIY0DNbAYPc8uY5<br>
>> >> >> ldap_filter:<br>
>> >> >><br>
>> >> >><br>
>> >> >> (|(&(|(uid=cyrus-admin)(uid=cyrus-murder))(uid=%U))(&(|(uid=%U)(mail=%U@<br>
>> >> >> %d)(mail=%U@%r))(objectclass=kolabinetorgperson)))<br>
>> >> >> ldap_user_attribute: mail<br>
>> >> >> ldap_group_base: dc=domain,dc=com<br>
>> >> >> ldap_group_filter:<br>
>> >> >> (&(cn=%u)(objectclass=ldapsubentry)(objectclass=nsroledefinition))<br>
>> >> >> ldap_group_scope: one<br>
>> >> >> ldap_member_base: ou=People,dc=domain,dc=com<br>
>> >> >> ldap_member_method: attribute<br>
>> >> >> ldap_member_attribute: nsrole<br>
>> >> >> ldap_restart: 1<br>
>> >> >> ldap_timeout: 10<br>
>> >> >> ldap_time_limit: 10<br>
>> >> >> unixhierarchysep: 1<br>
>> >> >> virtdomains: userid<br>
>> >> >> annotation_definitions: /etc/imapd.annotations.conf<br>
>> >> >> sieve_extensions: fileinto reject envelope body vacation<br>
>> >> >> imapflags<br>
>> >> >> notify include regex subaddress relational copy date index<br>
>> >> >> allowallsubscribe: 0<br>
>> >> >> allowusermoves: 1<br>
>> >> >> altnamespace: 1<br>
>> >> >> hashimapspool: 1<br>
>> >> >> anysievefolder: 1<br>
>> >> >> fulldirhash: 0<br>
>> >> >> sieveusehomedir: 0<br>
>> >> >> sieve_allowreferrals: 0<br>
>> >> >> lmtp_downcase_rcpt: 1<br>
>> >> >> lmtp_fuzzy_mailbox_match: 1<br>
>> >> >> username_tolower: 1<br>
>> >> >> deletedprefix: DELETED<br>
>> >> >> delete_mode: delayed<br>
>> >> >> expunge_mode: delayed<br>
>> >> >> postuser: shared<br>
>> >> >><br>
>> >> >> ldap_domain_base_dn: cn=kolab,cn=config<br>
>> >> >> ldap_domain_filter:<br>
>> >> >> (&(objectclass=domainrelatedobject)(associateddomain=%s))<br>
>> >> >> ldap_domain_name_attribute: associatedDomain<br>
>> >> >> ldap_domain_scope: sub<br>
>> >> >> ldap_domain_result_attribute: inetdomainbasedn<br>
>> >> >><br>
>> >> >><br>
>> >> >> Cyrus version:<br>
>> >> >><br>
>> >> >> name : Cyrus IMAPD<br>
>> >> >> version : git2.5+0-Kolab-2.5-108.1.el6.kolab_3.4<br>
>> >> >> vendor : Project Cyrus<br>
>> >> >> support-url: <a href="http://www.cyrusimap.org" rel="noreferrer" target="_blank">http://www.cyrusimap.org</a><br>
>> >> >> os : Linux<br>
>> >> >> os-version : 2.6.32-042stab108.7<br>
>> >> >> environment: Built w/Cyrus SASL 2.1.23<br>
>> >> >> Running w/Cyrus SASL 2.1.23<br>
>> >> >> Built w/OpenSSL 1.0.1e-fips 11 Feb 2013<br>
>> >> >> Running w/OpenSSL 1.0.1e-fips 11 Feb 2013<br>
>> >> >> Built w/zlib 1.2.3<br>
>> >> >> Running w/zlib 1.2.3<br>
>> >> >> CMU Sieve 2.4<br>
>> >> >> TCP Wrappers<br>
>> >> >> NET-SNMP<br>
>> >> >> mmap = shared<br>
>> >> >> lock = fcntl<br>
>> >> >> nonblock = fcntl<br>
>> >> >> idle = idled<br>
>> >> >><br>
>> >> >><br>
>> >> >><br>
>> >> >> Kolab web-admin is in turn unable to write the entry to Cyrus as the<br>
>> >> >> user<br>
>> >> >> doesn't showing the roundcube DB.<br>
>> >> >><br>
>> >> >><br>
>> >> >> I think my main problem is that this "ptloader" cannot canonify the<br>
>> >> >> user.<br>
>> >> >> Should I turn on canonicalization?<br>
>> >> >><br>
>> >> >> This article states to use it:<br>
>> >> >> <a href="https://docs.kolab.org/howtos/multi-domain.html#cyrus-imap-changes" rel="noreferrer" target="_blank">https://docs.kolab.org/howtos/multi-domain.html#cyrus-imap-changes</a><br>
>> >> >><br>
>> >> >> This one does not:<br>
>> >> >> <a href="http://bmts.us/wiki/doku.php?id=article:kolab:multidomain" rel="noreferrer" target="_blank">http://bmts.us/wiki/doku.php?id=article:kolab:multidomain</a><br>
>> >> ><br>
>> >> > --<br>
>> >> > Best regards<br>
>> >> > Thomas Spuhler<br>
>> >> ><br>
>> >> > All of my e-mails have a valid digital signature<br>
>> >> > ID 60114E63<br>
>> >> > _______________________________________________<br>
>> >> > users mailing list<br>
>> >> > <a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
>> >> > <a href="https://lists.kolab.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br>
>> ><br>
>> ><br>
>> ><br>
>> > _______________________________________________<br>
>> > users mailing list<br>
>> > <a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
>> > <a href="https://lists.kolab.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> users mailing list<br>
> <a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
> <a href="https://lists.kolab.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br>
</div></div></blockquote></div><br></div>