NethServer 6

Please add the steps to reproduce the problem.

Bug is confirmed.

I think the problem is that our groups entries in LDAP don't have an mail field.
From SOGo manual:

Groups must be defined like any other 
authentication sources (ie., canAuthenticate must be set to YES and a group must have a valid
email address). In order for SOGo to determine if a specific LDAP entry is a group, SOGo will 
look for one of the following objectClass attributes :
* group
* groupOfNames
* groupOfUniqueNames
* posixGroup

Maybe we can add a new objectClass to groups? Something like:

dn: cn=mailRelatedObject,cn=schema,cn=config
changetype: add
objectClass: olcSchemaConfig
cn: mailRelatedObject
olcObjectClasses: {0}( 1.3.6.1.4.1.5427.1.389.6.9 NAME 'mailboxRelatedObject' 
 DESC 'For pointing to an associated RFC822 (functional) mailbox from any entr
 y' AUXILIARY MAY ( mail $ displayName ) )

But I'd like to avoid modification to the underlying system and search for some smart LDAP query to correctly configure SOGo.

Did it ever worked? I can't remember if this stopped to work on a particular release... I'll investigate.

If adding the mail attribute to posixGroup nodes will be the only possible solution, we have qmail.schema already loaded. See the modify.ldif about how to add a mail attribute to an existing group.

Anyway, the mail attribute may not be enough: I've found some informations about SOGo/Dovecot/LDAP schema here (quite outdated) http://www.lunch.org.uk/wiki/sogodovecotldapandgroups

This is a solution proposal.

• On the first time, the configured filter is applied and a user/group identifier is picked up
• On the second time, filter is not applied, and a generic query is performed on each datasource. If the first match is a posixGroup, group members (identified by memberUid multi-value attribute) are expanded.

This is the log evidence (see nethserver-sogo to increase sogod log verbosity):

2014-09-25 15:25:51.568 sogod[...]: search at base 'ou=groups,dc=directory,dc=nh' filter '(|(cn=second.user)(mail=second.user))' for attrs '*'
Sep 25 15:25:58 sogod [...]> Using ldap_initialize for LDAP URL: ldapi://
2014-09-25 15:25:58.816 sogod[...]: search at base 'ou=groups,dc=directory,dc=nh' filter '(|(sn=groupx*)(displayname=groupx*)(telephonenumber=groupx*)(mail=groupx*)(cn=groupx*))' for attrs '*'
Sep 25 15:25:58 sogod [...]> Using ldap_initialize for LDAP URL: ldapi://
2014-09-25 15:25:58.829 sogod[...]: search at base 'ou=people,dc=directory,dc=nh' filter '(&(|(sn=groupx*)(displayname=groupx*)(telephonenumber=groupx*)(mail=groupx*)(cn=groupx*))(accountStatus=active))' for attrs '*'
Sep 25 15:26:04 sogod [...]> Using ldap_initialize for LDAP URL: ldapi://
2014-09-25 15:26:04.933 sogod[23607] -[NGLdapConnection _searchAtBaseDN:qualifier:attributes:scope:]: search at base 'ou=groups,dc=directory,dc=nh' filter '(cn=groupx)' for attrs '*'

• 0001-sogo-config-template-sogoUserSources-elements-order-.patch Inverting the existing SOGoUserSources (groups,users) order fixes the group sharing problem, but prevents user sharing.
• 0001-user-create-unix-set-memberUid-attribute-in-primary-.patch To solve this new problem, we set the memberUid attribute user primary group.

The solution does not fix existing accounts: a specific action has to be implemented in nethserver-directory

• Inverted SOGoUserSources elements order
• Primary groups are not in LDAP

In branch b2808 master

TODO: In nethserver-directory implement an action that fixes LDAP, by adding memberUid attribute to users primary groups.

Test case 1:
- you need some users created with nethserver-directory < 2.0.4 or you can delete attribute memberUid for primary groups
- install nethserver-sogo
- check that all primary groups has their user as memberUid
- check thet the bug is no more present

Test case 2:
- you need some users created with nethserver-directory < 2.0.4 or you can delete attribute memberUid for primary groups
- update nethserver-sogo
- check that all primary groups has their user as memberUid
- check that the bug is no more present

repository nethserver-testing nethserver-sogo-1.4.0-9.0git427fcd77.ns6.noarch.rpm

Test case 2 fixed

Verified

• nethserver-sogo-1.5.0-1.ns6.noarch.rpm