Kolab 16 and newer version of php than 5.4

Sun Mar 26 23:19:39 CEST 2017

Hi,

just want to inform that after few more hours of doing detective work a
came across one post in forum that was telling something about that
apache basic auth is not passed to fastcgi scripts in default and has to
be allowed.

Because I can't found any error and my tries to authenticate was not in
any log (iRony, kola-syncrhotron or dirsrv). It was lost somewhere and I
didn't know where. And that was it.

So I googled more info about that one thing is needed.
Add to the apache config file of iRony and kolab-synchrotron to
Directory section:

|SetEnvIfAuthorization"(.*)"HTTP_AUTHORIZATION=$1|

Now everything is working!

Once again thanks to pointing me to RH SCL and FastCGI.

If anyone would like to configure Kolab using CGI don't forget to add
this to apache config.

Regards
Thomas

On 26.3.2017 12:49, Thomas Black wrote:
> Hi,
>
> so I end up with FastCGI.
> I install php-fpm from distro repo and start a service to listen on unix
> socket /var/run/php54-fpm.sock.
> Also I install rh-php56-php-fpm from RH SCL and start a service to
> listen on unix socket /var/run/php56-fpm.sock.
>
> In Apache I can now configure different FastCGI server (firrst one is
> php 5.4, second one is php 5.6) for any virtual host using:
> <FilesMatch \.php$>
>         SetHandler "proxy:unix:/var/run/php54-fpm.sock|fcgi://localhost"
> </FilesMatch>
> That is perfect.
>
> For Kolab and all the stuff around Kolab I used /var/run/php54-fpm.sock
> - php 5.4.
>
> Almost everything working except:
> - KolabDAV - iRony
> - kolab-synchrotron - Microsoft-Server-ActiveSync
>
> To be more specific - I can't login to one of these two services. When I
> try it, the dialog window still show up again and again.
> I try to login using mobile, browser, thunderbird (CalDAV or CardDAV
> protocol). Still the same.
> I found no errors in:
> - httpd logs
> - kolab-synchrotron logs
> - dirsrv logs
>
> What is strange, when I try to login it doesn't show up in dirsrv log.
> So the service of Kolab don't ask LDAP server.
> Whe I try to log into Kolab using IMAP or webmail (roundcubemail) it is
> working as expected - I get in the mailbox. Using roundcube I can access
> address book and calendar too.
>
> These two things we are using pretty much. I need them to get working.
>
> I am out of ideas. I spent several hours with that problem now and I
> didn't find any clue.
>
> Any hint will be appreciated.
>
> Regards
> Thomas
>
>
> On 24.3.2017 23:28, Thomas Black wrote:
>> Hi all,
>>
>> thanks guys for the answers.
>>
>> Thanks Rickard for the description how works packaging.
>> I understand that. I didn't came to my mind before that when I install
>> php56 within SCL I can leave php 5.4 from distro repo installed so
>> dependencies are met, but run all apps with php56.
>> I wil try tomorrow to install php56 from SCL and configure apache to use
>> this PHP version.
>>
>> Thanks Daniel for hint about using CGI to use multiple versions of PHP.
>> I will try fisrt to switch apache completely to php56 from SCL.
>> If i fail or Kolab will not work on php56 then I will try to use CGI and
>> use php 5.4 from distro repo for Kolab and php56 for other applications.
>>
>> Regards
>> Thomas
>>
>>
>> On 24.3.2017 14:52, Daniel Hoffend wrote:
>>> Hi
>>>
>>> The best way to maintain multiple php version is to configure your
>>> apache/nginx/whatever to use php via cgi or php-fpm. Then you can
>>> switch between php versions per hosting/virtualdomain. Of course
>>> you've to maintain your own webserver configuration but that's
>>> the best way to seperate php versions.
>>>
>>> 1) I personally prefer php-fpm over mod-php due to memory consumtion
>>> speed and such
>>>
>>> 2) I also prefer to keep applications/services seperate on servers
>>> or vms. If someone breaks into some random webapplication your
>>> hopefully mission critical mail infrastructure isn't at risk. It
>>> also makes upgrades easier because you don't have too many side
>>> effects.
>>>
>>> -- 
>>> Regards
>>> Daniel
>>>
>>>
>>> Am 2017-03-23 09:14, schrieb Rickard Osser:
>>>> Hi,
>>>>
>>>> the way RedHat (CentOS) works is to support the initial version of a
>>>> software included in the distribution and back-patch them to meet
>>>> security needs. So, for php the initital version was 5.4 and for RHEL7
>>>> and CentOS7 that will always stay the current version. Kolab is
>>>> packaged with the dependency for php and the version included in
>>>> CentOS7 is v5.4. They also give the possibility to do side load later
>>>> versions of PHP and other software with SCL but they have different
>>>> names and thus aren't automatically tied into dependency resolution.
>>>>
>>>> You can install both versions of PHP and Apache (2.4 in SCL) and then
>>>> turn off the regular older version and configure the newer package to
>>>> be used instead. You just can't uninstall the dependency version.
>>>>
>>>> I hope this was a clear description of how RH maintains it's
>>>> compatibility for enterprises.
>>>>
>>>> Best regards,
>>>>
>>>> Rickard
>>>>
>>>>
>>>> On Thu, 2017-03-23 at 08:16 +0100, Aleksander Machniak wrote:
>>>>> On 22.03.2017 23:18, Thomas Black wrote:
>>>>>> thanks for your answer. I don't understand the same. Is it php 5.6
>>>>>> too
>>>>>> much different that Kolab 16 will not work with php 5.6?
>>>>> It should work without issues. I think it might be a bug in packaging
>>>>> or
>>>>> Swig limitation, but I've heard only about problems with PHP7.
>>>>>
>>>>> I can't help you on packaging.
>>>>>
>>>> _______________________________________________
>>>> users mailing list
>>>> users at lists.kolab.org
>>>> https://lists.kolab.org/mailman/listinfo/users
>>> _______________________________________________
>>> users mailing list
>>> users at lists.kolab.org
>>> https://lists.kolab.org/mailman/listinfo/users
>> _______________________________________________
>> users mailing list
>> users at lists.kolab.org
>> https://lists.kolab.org/mailman/listinfo/users
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20170326/c31052c1/attachment.html>