Discussion:
[SOGo] SOGo and Active Directory - [NGImap4ConnectionManager] IMAP4 login failed
Josep L. Guallar-Esteve
2012-10-24 18:42:10 UTC
Permalink
Hello,

I'm setting up a SOGO test environment before I migrate our current
mail
system to a new one, hopefully with SOGo as it looks great.

I have SOGo authenticating with MS AD using LDAP, and it works fine. I
added the instructions to the wiki, as it was not 100% obvious:
http://wiki.sogo.nu/ActiveDirectory

I have Dovecot authenticating with MS AD using ntlm (
http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm ). This works because
I can login to IMAP with Thunderbird with Domain users .

So my user can login to SOGo fine. But once it's inside SOGo and I try
to access mail with SOGo, I get the error on the logs:



2012-10-24 18:28:10.923 sogod[30496] WARNING: IMAP4 connection pooling
is disabled!
Oct 24 18:28:14 sogod [30496]: [ERROR]
<0x0x1e87fa8[NGImap4ConnectionManager]> IMAP4 login failed:
host=testmail.company.net, user=gooduser-//Bz/+***@public.gmane.org, pwd=yes
url=imap://gooduser%40company.net-vua31YcpswLBIbHw+***@public.gmane.org/INBOX/
base=(null)
base-class=(null))
= <0x0x1e8d9e8[NGImap4Client]: login=gooduser-//Bz/+***@public.gmane.org(pwd)
socket=<NGActiveSocket[0x0x1e8e478]: mode=rw
address=<0x0x1e8e4e8[NGInternetSocketAddress]: host=testmail.company.net
port=53147> connectedTo=<0x0x1e8d0a8[NGInternetSocketAddress]:
host=testmail.company.net port=143>>>
2012-10-24 18:28:14.125 sogod[30496] Note(NGImap4Connection): using '/'
as the IMAP4 folder separator.
Oct 24 18:28:14 sogod [30496]: <0x01E9D528[SOGoMailFolder]:folderINBOX>
renewing imap4 password
Oct 24 18:28:21 sogod [30496]: [ERROR]
<0x0x1e87fa8[NGImap4ConnectionManager]> IMAP4 login failed:
host=testmail.company.net, user=gooduser-//Bz/+***@public.gmane.org, pwd=yes
url=imap://gooduser%40company.net-vua31YcpswLBIbHw+***@public.gmane.org/INBOX/
base=(null)
base-class=(null))
= <0x0x1eb7b18[NGImap4Client]: login=gooduser-//Bz/+***@public.gmane.org(pwd)
socket=<NGActiveSocket[0x0x1eb8148]: mode=rw
address=<0x0x1eb8228[NGInternetSocketAddress]: host=testmail.company.net
port=53148> connectedTo=<0x0x1eb7c48[NGInternetSocketAddress]:
host=testmail.company.net port=143>>>
Oct 24 18:28:21 sogod [30496]: [ERROR]
<0x01E9D528[SOGoMailFolder]:folderINBOX> Could not connect IMAP4
Oct 24 18:28:21 sogod [30496]: |SOGo| request took 10.236375 seconds to
execute




On the IMAP side, here are the debug logs:

Oct 24 14:28:12 auth: Info: pam(myuser1-//Bz/+***@public.gmane.org,10.0.0.26): unknown
user
Oct 24 14:28:19 auth: Info: pam(myuser1-//Bz/+***@public.gmane.org,10.0.0.26): unknown
user
Oct 24 14:28:21 imap-login: Info: Disconnected (auth failed, 1
attempts): user=<myuser1-//Bz/+***@public.gmane.org>, method=PLAIN, rip=10.0.0.26,
lip=10.0.0.26, secured
Oct 24 14:28:21 imap-login: Info: Disconnected (auth failed, 1
attempts): user=<myuser1-//Bz/+***@public.gmane.org>, method=PLAIN, rip=10.0.0.26,
lip=10.0.0.26, secured
Oct 24 14:28:27 auth: Info: pam(myuser1-//Bz/+***@public.gmane.org,10.0.0.26): unknown
user
Oct 24 14:28:31 auth: Info: pam(myuser1-//Bz/+***@public.gmane.org,10.0.0.26): unknown
user
Oct 24 14:28:33 imap-login: Info: Disconnected (auth failed, 1
attempts): user=<myuser1-//Bz/+***@public.gmane.org>, method=PLAIN, rip=10.0.0.26,
lip=10.0.0.26, secured
Oct 24 14:28:33 imap-login: Info: Disconnected (auth failed, 1
attempts): user=<myuser1-//Bz/+***@public.gmane.org>, method=PLAIN, rip=10.0.0.26,
lip=10.0.0.26, secured



And when accessing the same account on the same testmail server from
Thunderbird all works fine:

Oct 24 14:26:28 master: Info: Dovecot v2.0.9 starting up (core dumps
disabled)
Oct 24 14:26:46 imap-login: Info: Login: user=<myuser1>, method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31499, TLS
Oct 24 14:26:46 imap-login: Info: Login: user=<myuser1>, method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31500, TLS
Oct 24 14:26:51 imap-login: Info: Login: user=<myuser1>, method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31502, TLS
Oct 24 14:26:52 imap-login: Info: Login: user=<myuser1>, method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31504, TLS
Oct 24 14:26:55 imap-login: Info: Login: user=<myuser1>, method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31508, TLS
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=49/693
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=122/796
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=82/729
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=119/987
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=151/1024


Any idea? Any hint? I've read the documentation PDF, searched the wiki,
searched Google... but I don't seem to find the answer.



Thank you in advance,
Josep



This transmission is intended for the use of the entity or individual to which
or whom it is addressed. The transmission or any documents accompanying the
transmission may contain confidential information. If you are not the intended
recipient, you are hereby notified that any disclosure, copying, distribution,
or action taken in reliance on the contents of the transmission or the
documents is strictly prohibited. If you have received this confidential
transmission in error, please destroy it and any accompanying documents and
notify the sender immediately. Thank you.
Josep L. Guallar-Esteve
2012-10-24 21:12:28 UTC
Permalink
Hi all,

I was able to found and fix the problem with help from both dovecot and
SOGo IRC channels :)

The problem was caused because SOGo was sending as username
"gooduser-//Bz/+***@public.gmane.org" and IMAP was expectng "gooduser" alone.

I corrected SOGo behavior by defining the parameter
"IMAPLoginFieldName" in my defaults , under "SOGoUserSources". I made
the parameter to equal "sAMAccountName" , restarted both memcached and
sogod services and now IMAP is happily authenticating users.

This means adding to my .GNUstepDefaults:


<key>SOGoUserSources</key>
<array>

(...)

<key>IMAPLoginFieldName</key>
<string>sAMAccountName</string
</array>




Regards,
Josep
Post by Josep L. Guallar-Esteve
Hello,
I'm setting up a SOGO test environment before I migrate our current
mail
system to a new one, hopefully with SOGo as it looks great.
I have SOGo authenticating with MS AD using LDAP, and it works fine. I
http://wiki.sogo.nu/ActiveDirectory
I have Dovecot authenticating with MS AD using ntlm (
http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm ). This works
because
I can login to IMAP with Thunderbird with Domain users .
So my user can login to SOGo fine. But once it's inside SOGo and I try
2012-10-24 18:28:10.923 sogod[30496] WARNING: IMAP4 connection
pooling
is disabled!
Oct 24 18:28:14 sogod [30496]: [ERROR]
base=(null)
base-class=(null))
socket=<NGActiveSocket[0x0x1e8e478]: mode=rw
host=testmail.company.net
host=testmail.company.net port=143>>>
2012-10-24 18:28:14.125 sogod[30496] Note(NGImap4Connection): using '/'
as the IMAP4 folder separator.
<0x01E9D528[SOGoMailFolder]:folderINBOX>
renewing imap4 password
Oct 24 18:28:21 sogod [30496]: [ERROR]
base=(null)
base-class=(null))
socket=<NGActiveSocket[0x0x1eb8148]: mode=rw
host=testmail.company.net
host=testmail.company.net port=143>>>
Oct 24 18:28:21 sogod [30496]: [ERROR]
<0x01E9D528[SOGoMailFolder]:folderINBOX> Could not connect IMAP4
Oct 24 18:28:21 sogod [30496]: |SOGo| request took 10.236375 seconds to
execute
unknown
user
unknown
user
Oct 24 14:28:21 imap-login: Info: Disconnected (auth failed, 1
lip=10.0.0.26, secured
Oct 24 14:28:21 imap-login: Info: Disconnected (auth failed, 1
lip=10.0.0.26, secured
unknown
user
unknown
user
Oct 24 14:28:33 imap-login: Info: Disconnected (auth failed, 1
lip=10.0.0.26, secured
Oct 24 14:28:33 imap-login: Info: Disconnected (auth failed, 1
lip=10.0.0.26, secured
And when accessing the same account on the same testmail server from
Oct 24 14:26:28 master: Info: Dovecot v2.0.9 starting up (core dumps
disabled)
Oct 24 14:26:46 imap-login: Info: Login: user=<myuser1>,
method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31499, TLS
Oct 24 14:26:46 imap-login: Info: Login: user=<myuser1>,
method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31500, TLS
Oct 24 14:26:51 imap-login: Info: Login: user=<myuser1>,
method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31502, TLS
Oct 24 14:26:52 imap-login: Info: Login: user=<myuser1>,
method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31504, TLS
Oct 24 14:26:55 imap-login: Info: Login: user=<myuser1>,
method=PLAIN,
rip=10.0.0.6, lip=10.0.0.26, mpid=31508, TLS
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=49/693
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=122/796
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=82/729
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=119/987
Oct 24 14:27:03 imap(myuser1): Info: Disconnected: Logged out
bytes=151/1024
Any idea? Any hint? I've read the documentation PDF, searched the wiki,
searched Google... but I don't seem to find the answer.
Thank you in advance,
Josep
This transmission is intended for the use of the entity or individual to which
or whom it is addressed. The transmission or any documents accompanying the
transmission may contain confidential information. If you are not the intended
recipient, you are hereby notified that any disclosure, copying, distribution,
or action taken in reliance on the contents of the transmission or the
documents is strictly prohibited. If you have received this confidential
transmission in error, please destroy it and any accompanying documents and
notify the sender immediately. Thank you.

Loading...