I'm experimenting the exactly same problem with a config like the one that opened the bug, same effects.

v2 or v3? Can you also try with a nightly build?

Also, show LDIF entry samples in BOTH domains.

The behaviour is the same for v2 and v3, and for the master branch at the time I reported this.

I will not call this a minor bug. This essentially means that multi-domain is broken using the uid field. It is also a security problem as you can end up showing data for customer1 when logging inn as customer2.

I asked to show me the data.

If I downgraded it to minor, it is because:

1- a commit was done about 2 hours ago for this
2- I was NOT able to reproduce it

It happened after upgrading from v2.2.17 to v2.3.10 (I installed from fresh 2.3.10 on other servers and everything is fine there)

I've noticed that after disconnect I can login again after about 5 minutes or so.
Perhaps this behavior gives you a hint about this issue.

I'll post both LDIF in a while. Thanks!

I build from the HEAD of the master branch (commit: 8789db67b37e08a7ca75c4be98334f6c61d6aeb7). It is still pretty much the same behaviour, mixing the baseDN of the two domains.

I have uploaded the sogo.conf file I use for testing, perhaps it can help you reproduce it. I have also uploaded the ldif files of two users I use for testing.

Since bindFields is set to uid, your users authenticate only using "admin" ?

There's no way SOGo can tell in which domain the user is if that is the case.

Why not set bindFields = (mail) and let the user authenticate with their email address?

Hi, I'm having the same issue, and my config was made following the examples at the documentation. I'm copying here a piece of my sogo.conf file.

            domain1.com = {
                    SOGoMailDomain = domain1.com;
                    SOGoUserSources = (
                        {
                                    type = ldap;
                                    CNFieldName = cn;
                                    IDFieldName = cn;
                                    UIDFieldName = mail;
                                    IMAPLoginFieldName = mail;
                                    MailFieldNames = (
                                            mail
                                    );
                                    SOGoLDAPContactInfoAttribute = uid;
                bindAsCurrentUser = YES;
                                    baseDN = "ou=accounts,dc=cartouch,dc=com,dc=ar";
                                    bindDN = "uid=sogoadmin,ou=accounts,dc=domain1,dc=com,dc=ar";
                                    bindFields = (
                                            mail
                                    );
                                    bindPassword = *****;
                                    canAuthenticate = YES;
                                    displayName = "Shared Addresses";
                                    filter = "(objectClass=inetOrgPerson)";
                hostname = ldap://127.0.0.1:389;
                                    id = public_domain1;
                                    isAddressBook = YES;
                        }
                    );
            };
    domain2.com.ar = {
                    SOGoMailDomain = domain2.com.ar;
                    SOGoUserSources = (
                        {
                                    type = ldap;
                                    CNFieldName = cn;
                                    IDFieldName = cn;
                                    UIDFieldName = mail;
                                    IMAPLoginFieldName = mail;
                                    MailFieldNames = (
                                            mail
                                    );
                                    SOGoLDAPContactInfoAttribute = uid;
                bindAsCurrentUser = YES;
                                    baseDN = "ou=accounts,dc=elevamundo,dc=com,dc=ar";
                                    bindDN = "uid=sogoadmin,ou=accounts,dc=domain2,dc=com,dc=ar";
                                    bindFields = (
                                            mail
                                    );
                                    bindPassword = *****;
                                    canAuthenticate = YES;
                                    displayName = "Shared Addresses";
                                    filter = "(objectClass=inetOrgPerson)";
                hostname = ldap://127.0.0.1:389;
                                    id = public_domain2;
                                    isAddressBook = YES;
                        }

The problem here is that after 5 minutes resets itself and I can login again. But, before those 5 minutes it's impossible to log again. It just keep going back to the login screen.

Meanwhile there are errors, it start to try to search the uid in all domanins, this thing ofcourse doesn't happen when it finally log in.

A small fix was pushed: 29e0799b11c8409171296b619f366876add14fdc

With the structure below, you MUST use bindFields = (mail).

If you don't set it and or you set to uid (or uid, mail), SOGo has NO WAY of knowing in which domain the user is since it'll be in both. So logins can be "random".

You have to understand that SOGoEnableDomainBasedUID is used for storage purposes in SOGo - so the app doesn't only use the UID field, but rather a combination of the UID and the domain.

Fix also included for 2.3.11.