Kolab 3.4 - Problem when securing installation

Philip Trickett (List) phil-ml at techworks.ie
Wed Nov 25 18:42:05 CET 2015


On 25/11/15 17:18, Brady, Mike wrote:
> Phil
>
> I am going need some more details on what you have done.
>
> I am assuming:
>
>  1. Install OS and Kolab
>  2. Run setup-kolab
>  3. Migrate LDAP Data
>  4. Migrate IMAP Data
>
> If this is what you did, when you migrated the LDAP data did you 
> either exclude everything in ou=Special Users,dc=your,dc=domain or 
> change the passwords in all the configuration files?
>
> Mike
>
Hi Mike,

I pretty much followed those steps, but I cheated slightly ;)

I did steps 1 & 2, for setup-kolab, I used the configuration passwords 
from the original server on the new server, to save having to change 
passwords, then I migrated all the LDAP data from the old server.

I then migrated the IMAP data, by rsyncing /var/lib/imap and 
/var/spool/imap from the old server (during this time, cyrus-imapd was 
shutdown, as well as the directory server etc.)

Once I had done this, I logged in to roundcube on a couple of the 
accounts, and checked a few messages etc. which showed up fine with no 
errors.

Then I proceeded to follow the guide to secure the installation, and 
after this, logging in give a mailbox not found.

However, on looking at logs and firebug, I can only see the successful 
login to cyrus from roundcube, and no errors are returned, so I am a bit 
stumped by this.

There is a bit of a log excerpt below of the login process:

tail -f /var/log/maillog /var/log/httpd/ssl_access_log 
/var/log/httpd/ssl_error_log
==> /var/log/maillog <==
Nov 25 17:29:55 mail imap[3785]: USAGE philip.trickett at example.org user: 
0.009205 sys: 0.005508
Nov 25 17:29:55 mail imap[3786]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:29:55 mail imap[3786]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3786-1448472595-1-1905125910673132224>
Nov 25 17:29:55 mail imap[3786]: USAGE philip.trickett at example.org user: 
0.009059 sys: 0.006039
Nov 25 17:29:57 mail imap[3783]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:29:57 mail imap[3783]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3783-1448472597-1-4950283356597843003>
Nov 25 17:29:57 mail imap[3785]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:29:57 mail imap[3785]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3785-1448472597-1-9158458248579971895>
Nov 25 17:29:57 mail imap[3783]: USAGE philip.trickett at example.org user: 
0.008515 sys: 0.006386
Nov 25 17:29:57 mail imap[3785]: USAGE philip.trickett at example.org user: 
0.000567 sys: 0.003450

==> /var/log/httpd/ssl_access_log <==
192.168.156.30 - - [25/Nov/2015:12:52:14 +0000] "GET 
/roundcubemail/35fe554a98f8ebb6/?_task=mail&_refresh=1&_mbox=INBOX&_remote=1&_unlock=loading1448455935036&_action=list&_=1448455934624 
HTTP/1.1" 200 933
192.168.156.30 - - [25/Nov/2015:12:52:15 +0000] "GET 
/roundcubemail/assets/program/resources/blank.tif HTTP/1.1" 200 270
192.168.156.23 - philip.trickett at example.org [25/Nov/2015:12:53:15 
+0000] "GET /chwala//api/?method=authenticate&version=2 HTTP/1.1" 200 128
192.168.156.30 - - [25/Nov/2015:12:53:14 +0000] "POST 
/roundcubemail/35fe554a98f8ebb6/?_task=mail&_action=refresh HTTP/1.1" 
200 186
192.168.156.30 - - [25/Nov/2015:17:29:43 +0000] "GET /roundcubemail/ 
HTTP/1.1" 200 7124
192.168.156.30 - - [25/Nov/2015:17:29:54 +0000] "POST 
/roundcubemail/?_task=login HTTP/1.1" 302 -
192.168.156.30 - - [25/Nov/2015:17:29:55 +0000] "GET 
/roundcubemail/63350724609ca0f3/?_task=mail HTTP/1.1" 200 55032
192.168.156.30 - - [25/Nov/2015:17:29:57 +0000] "GET 
/roundcubemail/assets/program/resources/blank.tif HTTP/1.1" 200 270
192.168.156.30 - - [25/Nov/2015:17:29:57 +0000] "GET 
/roundcubemail/63350724609ca0f3/?_task=mail&_refresh=1&_mbox=INBOX&_remote=1&_unlock=loading1448472597825&_action=list&_=1448472597435 
HTTP/1.1" 200 933
192.168.156.30 - - [25/Nov/2015:17:29:57 +0000] "GET 
/roundcubemail/63350724609ca0f3/?_task=mail&_remote=1&_unlock=0&_action=getunread&_=1448472597436 
HTTP/1.1" 200 75

==> /var/log/maillog <==
Nov 25 17:30:57 mail imap[3782]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:30:57 mail imap[3782]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3782-1448472657-1-14027085326122907929>
Nov 25 17:30:57 mail imap[3783]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:30:57 mail imap[3783]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3783-1448472657-1-7942227074731681134>
Nov 25 17:30:57 mail imap[3783]: USAGE philip.trickett at example.org user: 
0.002896 sys: 0.001913

==> /var/log/httpd/ssl_access_log <==
192.168.156.23 - philip.trickett at example.org [25/Nov/2015:17:30:57 
+0000] "GET /chwala//api/?method=authenticate&version=2 HTTP/1.1" 200 128

==> /var/log/maillog <==
Nov 25 17:30:58 mail imap[3782]: USAGE philip.trickett at example.org user: 
0.009165 sys: 0.006415

==> /var/log/httpd/ssl_access_log <==
192.168.156.30 - - [25/Nov/2015:17:30:57 +0000] "POST 
/roundcubemail/63350724609ca0f3/?_task=mail&_action=refresh HTTP/1.1" 
200 186
192.168.156.30 - - [25/Nov/2015:17:31:01 +0000] "GET 
/roundcubemail/63350724609ca0f3/?_task=logout&_token=8cfe772e7b2535db746bbaafb49449ba 
HTTP/1.1" 200 5936

==> /var/log/maillog <==
Nov 25 17:31:13 mail imap[4897]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:31:13 mail imap[4897]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-4897-1448472673-1-655763290223196110>
Nov 25 17:31:13 mail imap[4897]: USAGE philip.trickett at example.org user: 
0.009506 sys: 0.003168

==> /var/log/httpd/ssl_access_log <==
192.168.156.30 - - [25/Nov/2015:17:31:13 +0000] "POST 
/roundcubemail/63350724609ca0f3/?_task=login HTTP/1.1" 302 -

==> /var/log/maillog <==
Nov 25 17:31:13 mail imap[3783]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:31:13 mail imap[3783]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3783-1448472673-1-6058572438371252881>
Nov 25 17:31:13 mail imap[3783]: USAGE philip.trickett at example.org user: 
0.003986 sys: 0.001599

==> /var/log/httpd/ssl_access_log <==
192.168.156.30 - - [25/Nov/2015:17:31:13 +0000] "GET 
/roundcubemail/1b8c245e42d4ac37/?_task=mail HTTP/1.1" 200 55032
192.168.156.30 - - [25/Nov/2015:17:31:15 +0000] "GET 
/roundcubemail/assets/program/resources/blank.tif HTTP/1.1" 200 270

==> /var/log/maillog <==
Nov 25 17:31:15 mail imap[4897]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:31:15 mail imap[3785]: starttls: TLSv1 with cipher 
ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 25 17:31:15 mail imap[4897]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-4897-1448472675-1-12513764351967823944>
Nov 25 17:31:15 mail imap[3785]: login: localhost.localdomain 
[127.0.0.1] philip.trickett at example.org PLAIN+TLS User logged in 
SESSIONID=<mail2-3785-1448472675-1-17553890062648386401>
Nov 25 17:31:15 mail imap[3785]: USAGE philip.trickett at example.org user: 
0.003053 sys: 0.002034

==> /var/log/httpd/ssl_access_log <==
192.168.156.30 - - [25/Nov/2015:17:31:15 +0000] "GET 
/roundcubemail/1b8c245e42d4ac37/?_task=mail&_remote=1&_unlock=0&_action=getunread&_=1448472675540 
HTTP/1.1" 200 75

==> /var/log/maillog <==
Nov 25 17:31:15 mail imap[4897]: USAGE philip.trickett at example.org user: 
0.003734 sys: 0.002348

==> /var/log/httpd/ssl_access_log <==
192.168.156.30 - - [25/Nov/2015:17:31:15 +0000] "GET 
/roundcubemail/1b8c245e42d4ac37/?_task=mail&_refresh=1&_mbox=INBOX&_remote=1&_unlock=loading1448472675929&_action=list&_=1448472675539 
HTTP/1.1" 200 933





>
>
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20151125/f8227e71/attachment-0001.html>


More information about the users mailing list