[Kolab-devel] looking to verify/fix a few issues with kolab 3.3 (ptload/freebusy/ssl/wallace)

Matthias Busch catwiesel at gmx.net
Wed Nov 12 16:59:47 CET 2014


I hope this is not me misusing the devel list. But the information on 
the user-list is not enough and/or I may be actually dealing with actual 
issues that I hope we can nail down and possibly fix...

Setup:
Kolab 3.3 on debian 7.7 x64 (from packages)
single domain
startssl level1 ssl-certificate
handfull of users

on request I will make config files available.
I will also gladly test stuff and make the logs available.


Issues (in no particular order):


---------------- ptload / secondary email addresses ----------------

when receiving an email to a secondary address I get ptload errors in 
syslog:

Nov  7 14:58:41 kolab ptloader[4154]: No entries found
Nov  7 14:58:41 kolab lmtpunix[5094]: ptload(): bad response from
ptloader server: identifier not found
Nov  7 14:58:41 kolab lmtpunix[5094]: ptload failed forprimary at domain.tld  <https://lists.kolab.org/mailman/listinfo/users>
Nov  7 14:58:41 kolab lmtpunix[5094]: Delivered:
<545CD00D.3070605 at gmx.net  <https://lists.kolab.org/mailman/listinfo/users>> to mailbox: domain.tld!user.primary

the email is delivered but "entries not found" and "bad response" are 
not exactly encouraging...

---------------- freebusy / secondary email addresses ----------------

this is probably the reason why freebusy is only working with uid and 
primary email adress.
asking for freebusy information for a secondary email adress will also 
raise a ptload error:

Nov 12 16:09:46 kolab ptloader[8248]: No entries found
Nov 12 16:09:46 kolab imaps[21850]: ptload(): bad response from ptloader 
server: identifier not found
Nov 12 16:09:46 kolab imaps[21850]: ptload completely failed: unable to 
canonify identifier: secondary at domain.tld
Nov 12 16:09:46 kolab imaps[21850]: SASL bad userid authenticated
Nov 12 16:09:46 kolab imaps[21850]: badlogin: localhost [::1] PLAIN 
[SASL(-13): authentication failure: bad userid authenticated]

---------------- ssl ----------------

When setting up ssl for the server i followed the guide "HOWTO: Secure 
all Kolab Services"

when showing a caldav url in roundcubemail for calendar, it still shows 
http://... instead of https://
I've searched for whatever setting/string is being used at that point, I 
just cant find it.

and just a thought... setting up ssl for kolab is not trivial and I dont 
claim to understand every single bit of it fully and it did cause me a 
lot of trouble with small details... still, kolab is by definition 
something that is usually connected to the internet and via the 
internet. a local installation without access to the outside should be 
rather rare...
So it might be worth to think about having kolab use (self signed) ssl 
out of the box, maybe with a script that can/will replace the self 
signed certificates when the admin wishes to do so...

---------------- wallace ----------------

on of the advantages of kolab is the calendar function with resources 
and collections and the possibility of having appointments/reservations 
automatically accepted or declined. this works via wallace - and is 
absolutely not working for me. additionally, documentation on wallace is 
pretty slim...

wallaced was running when I installed/setup kolab. the entries in 
postfix/master.cf are set but in the content filter in main.cf is not. 
so (if i am not mistaken) wallace does not see a single mail...

the kolab_invitation_policy setting in kolab.conf is not using the right 
domain.tld (I believe it is set to "example.tld")

anyway, so I set
kolab_invitation_policy = ACT_ACCEPT_IF_NO_CONFLICT:domain.tld, ACT_MANUAL

and I added in main.cf

content_filter = smtp-amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings

according to master.cf and my understanding the received mails should go:

postfix to amavis (smtp-amavis :10024)
amavis to postfix (postfix listener:10025)
postfix to wallace (smtp-wallace:10026)
wallace to postfix (postfix listener:10027)


unfortunately, they dont... from syslog I am pretty sure wallace is 
bouncing the mails...

I also tried with
content_filter = smtp-wallace:[127.0.0.1]:10026

in case amavis was the problem. does not help and it isnt...

see attachment syslog-excerp.txt

I interpret this as:

email is received.
email is sent to amavis
amavis clears email, sends it back to postfix
postfix sends email to wallace
wallace sends email to postfix
postfix replies with error "user unknown"

email does not get delivered...

i looked in the pykolab log and there are a lot of errors...
see pykolab-log-excerp

and at that point I really do need help. and according to the user list, 
wallace/pykolab errors are not that rare, solutions other than 
"deactivate it", however, are

I'll help with whatever tests I can and supply whatever logs are needed.


thank you
-------------- next part --------------
2014-11-07 14:19:45,297 pykolab.wallace ERROR Module footer.execute() failed on message '/var/spool/pykolab/wallace/invitationpolicy/incoming/tmpYCGpWo' with error: Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/wallace/__init__.py", line 67, in pickup_message
    result_filepath = modules.execute(module, filepath)
  File "/usr/lib/python2.7/dist-packages/wallace/modules.py", line 116, in execute
    return modules[name]['function'](*args, **kw)
  File "/usr/lib/python2.7/dist-packages/wallace/module_footer.py", line 93, in execute
    footer['html'] = '<p>' + self.footer['plain'] + '</p>'
NameError: name 'self' is not defined

2014-11-07 14:25:48,126 pykolab.auth ERROR An error occured using _regular_search: SERVER_DOWN({'desc': "Can't contact LDAP server"},)
2014-11-07 14:25:48,300 pykolab.auth ERROR Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2725, in _search
    secondary_domains
  File "<string>", line 10, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2623, in _regular_search
    attrsonly=attrsonly
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 549, in search
    return self.search_ext(base,scope,filterstr,attrlist,attrsonly,None,None)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:25:48,302 pykolab.auth ERROR An error occured using _persistent_search: SERVER_DOWN({'desc': "Can't contact LDAP server"},)
2014-11-07 14:25:48,302 pykolab.auth ERROR Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2725, in _search
    secondary_domains
  File "<string>", line 10, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2400, in _persistent_search
    serverctrls=psearch_server_controls
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:25:48,302 pykolab.auth ERROR An error occured using _paged_search: SERVER_DOWN({'desc': "Can't contact LDAP server"},)
2014-11-07 14:25:48,302 pykolab.auth ERROR Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2725, in _search
    secondary_domains
  File "<string>", line 10, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2487, in _paged_search
    serverctrls=[server_page_control]
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:25:50,028 pykolab.auth ERROR An error occured using _regular_search: SERVER_DOWN({'desc': "Can't contact LDAP server"},)
2014-11-07 14:25:50,029 pykolab.auth ERROR Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2725, in _search
    secondary_domains
  File "<string>", line 10, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2623, in _regular_search
    attrsonly=attrsonly
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 549, in search
    return self.search_ext(base,scope,filterstr,attrlist,attrsonly,None,None)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:25:50,031 pykolab.auth ERROR An error occured using _regular_search: SERVER_DOWN({'desc': "Can't contact LDAP server"},)
2014-11-07 14:25:50,032 pykolab.auth ERROR Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2725, in _search
    secondary_domains
  File "<string>", line 10, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2623, in _regular_search
    attrsonly=attrsonly
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 549, in search
    return self.search_ext(base,scope,filterstr,attrlist,attrsonly,None,None)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:25:50,174 pykolab.wallace ERROR Module resources.execute() failed on message '/var/spool/pykolab/wallace/footer/incoming/tmpYCGpWo' with error: Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/wallace/__init__.py", line 67, in pickup_message
    result_filepath = modules.execute(module, filepath)
  File "/usr/lib/python2.7/dist-packages/wallace/modules.py", line 116, in execute
    return modules[name]['function'](*args, **kw)
  File "/usr/lib/python2.7/dist-packages/wallace/module_resources.py", line 216, in execute
    if not len(resource_record_from_email_address(recipient)) == 0:
  File "/usr/lib/python2.7/dist-packages/wallace/module_resources.py", line 767, in resource_record_from_email_address
    resource_records = auth.find_resource(email_address)
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/__init__.py", line 200, in find_resource
    result = self._auth.find_resource(address)
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 547, in find_resource
    attrsonly=True
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 552, in search_s
    return self.search_ext_s(base,scope,filterstr,attrlist,attrsonly,None,None,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 870, in search_ext_s
    return self._apply_method_s(SimpleLDAPObject.search_ext_s,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 819, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 545, in search_ext_s
    msgid = self.search_ext(base,scope,filterstr,attrlist,attrsonly,serverctrls,clientctrls,timeout,sizelimit)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:25:50,180 pykolab.wallace ERROR Module resources.execute() failed on message '/var/spool/pykolab/wallace/resources/incoming/tmpYCGpWo' with error: Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/wallace/__init__.py", line 67, in pickup_message
    result_filepath = modules.execute(module, filepath)
  File "/usr/lib/python2.7/dist-packages/wallace/modules.py", line 116, in execute
    return modules[name]['function'](*args, **kw)
  File "/usr/lib/python2.7/dist-packages/wallace/module_resources.py", line 216, in execute
    if not len(resource_record_from_email_address(recipient)) == 0:
  File "/usr/lib/python2.7/dist-packages/wallace/module_resources.py", line 767, in resource_record_from_email_address
    resource_records = auth.find_resource(email_address)
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/__init__.py", line 200, in find_resource
    result = self._auth.find_resource(address)
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 547, in find_resource
    attrsonly=True
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 552, in search_s
    return self.search_ext_s(base,scope,filterstr,attrlist,attrsonly,None,None,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 870, in search_ext_s
    return self._apply_method_s(SimpleLDAPObject.search_ext_s,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 819, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 545, in search_ext_s
    msgid = self.search_ext(base,scope,filterstr,attrlist,attrsonly,serverctrls,clientctrls,timeout,sizelimit)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 541, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in _ldap_call
    result = func(*args,**kwargs)
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

2014-11-07 14:26:07,498 pykolab.conf WARNING Option ldap/auth_cache_uri does not exist in config file /etc/kolab/kolab.conf, pulling from defaults
2014-11-07 14:26:07,498 pykolab.conf WARNING Option does not exist in defaults.
2014-11-12 13:24:06,855 pykolab.auth ERROR An error occured using _persistent_search: TypeError('can only concatenate list (not "str") to list',)
2014-11-12 13:24:06,874 pykolab.auth ERROR Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2725, in _search
    secondary_domains
  File "<string>", line 10, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2460, in _persistent_search
    secondary_domains=secondary_domains
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 2306, in _synchronize_callback
    entry['type']
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/dist-packages/pykolab/auth/ldap/__init__.py", line 1282, in _change_add_sharedfolder
    self.imap.set_acl(folder_path, 'anyone', '+p')
  File "/usr/lib/python2.7/dist-packages/pykolab/imap/__init__.py", line 364, in set_acl
    _acl = _acl + acl_map['set'] + acl_map['add']
TypeError: can only concatenate list (not "str") to list
-------------- next part --------------
Nov  7 12:14:48 kolab postfix/smtpd[30225]: connect from 
mout.gmx.net[212.227.15.18]
Nov  7 12:14:49 kolab postfix/smtpd[30225]: 28277214A4: 
client=mout.gmx.net[212.227.15.18]
Nov  7 12:14:49 kolab postfix/cleanup[30235]: 28277214A4: 
message-id=<545CA9A7.8070808 at gmx.net>
Nov  7 12:14:49 kolab postfix/qmgr[30214]: 28277214A4: from=<X at gmx.net>, 
size=1047, nrcpt=1 (queue active)
Nov  7 12:14:49 kolab postfix/smtpd[30225]: disconnect from 
mout.gmx.net[212.227.15.18]

Nov  7 12:14:49 kolab postfix/smtpd[30239]: connect from 
localhost[127.0.0.1]
Nov  7 12:14:49 kolab postfix/smtpd[30239]: 79C2D2159B: 
client=localhost[127.0.0.1], orig_queue_id=28277214A4, 
orig_client=mout.gmx.net[212.227.15.18]
Nov  7 12:14:49 kolab postfix/cleanup[30240]: 79C2D2159B: 
message-id=<545CA9A7.8070808 at gmx.net>
Nov  7 12:14:49 kolab postfix/qmgr[30214]: 79C2D2159B: from=<X at gmx.net>, 
size=1337, nrcpt=1 (queue active)
Nov  7 12:14:49 kolab amavis[28891]: (28891-12) Passed CLEAN 
{RelayedInbound}, [212.227.15.18]:52349 [senderip] <X at gmx.net> -> 
<alias at domain.tld>, Queue-ID: 28277214A4, Message-ID: 
<545CA9A7.8070808 at gmx.net>, mail_id: yju8eyGgtCwl, Hits: -0.587, size: 
1047, queued_as: 79C2D2159B, 334 ms

Nov  7 12:14:49 kolab postfix/smtp[30236]: 28277214A4: 
to=<alias at domain.tld>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.73, 
delays=0.38/0.01/0/0.34, dsn=2.0.0, status=sent (250 2.0.0 from 
MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 79C2D2159B)
Nov  7 12:14:49 kolab postfix/qmgr[30214]: 28277214A4: removed

Nov  7 12:14:49 kolab postfix/smtp[30241]: 79C2D2159B: 
to=<alias at domain.tld>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.05, 
delays=0.02/0.01/0/0.01, dsn=2.0.0, status=sent (250 Ok)
Nov  7 12:14:49 kolab postfix/qmgr[30214]: 79C2D2159B: removed

Nov  7 12:14:49 kolab postfix/smtpd[30242]: connect from 
localhost[127.0.0.1]
Nov  7 12:14:49 kolab postfix/smtpd[30242]: A9037214A4: 
client=localhost[127.0.0.1]
Nov  7 12:14:49 kolab postfix/cleanup[30240]: A9037214A4: 
message-id=<545CA9A7.8070808 at gmx.net>
Nov  7 12:14:49 kolab postfix/qmgr[30214]: A9037214A4: 
from=<alias at domain.tld>, size=1339, nrcpt=1 (queue active)
Nov  7 12:14:49 kolab postfix/smtpd[30242]: disconnect from 
localhost[127.0.0.1]
Nov  7 12:14:49 kolab postfix/lmtp[30243]: A9037214A4: 
to=<alias at domain.tld>, 
relay=hostname.domain.tld[/var/lib/imap/socket/lmtp], delay=0.02, 
delays=0.01/0.01/0/0.01, dsn=4.1.1, status=SOFTBOUNCE (host 
hostname.domain.tld[/var/lib/imap/socket/lmtp] said: 550-Mailbox 
unknown.  Either there is no mailbox associated with this 550-name or 
you do not have authorization to see it. 550 5.1.1 User unknown (in 
reply to RCPT TO command))


More information about the devel mailing list