View Issue Details

Related ChangesetsJump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0005492SOGoWeb Calendarpublic2022-03-14 09:092022-03-28 18:04
Reporteraoster Assigned Tofrancis  
PriorityhighSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Platform[Client] MicrosoftOSWindowsOS Version8
Product Version5.5.1 
Fixed in Version5.6.0 
Summary0005492: Since update ( 5.5.1.20220224-1 ) of nightly packages on Ubuntu 20.04 AD group membership is not working anymore
Description

We have been using SOGo for serveral years now with AD integration and have configured several group for shared calender access. We are using the nightly packages for Ubuntu 20.04. Since version 5.5.1.20220224-1 AD group membership lookup does not seem to work anymore. This currently breakes shared calendar access for our users. We did not change any SOGo configuration prior to the failure except the package update. 

 SOGoUserSources = (
    {
      type = ldap;
      CNFieldName = cn;
      UIDFieldName = sAMAccountName;
      IMAPLoginFieldName = userPrincipalName;
      IDFieldName = cn; 
      bindFields = (sAMAccountName); 
      baseDN = "dc=example,dc=org";
      bindDN = "cn=ldapuser,dc=example,dc=org";
      bindPassword = "securepass";
      canAuthenticate = YES;
      displayName = "Active Directory";
      hostname = "ldap://dc1.examle.org:389 ldap://dc2.examle.org:389";
      id = directory;
      isAddressBook = NO;
    },

We would need your kind help to identify and fix the cause of this issue.

Thank you for your kind help

Best regards
Andreas

TagsAD Member

Activities

francis

francis

2022-03-28 12:38

administrator   ~0015956

I can't reproduce this issue.

Check if the group is properly identified by looking at the ACLs of the calendar:

sogo-tool manage-acl get <owner> Calendar/<calendar> ALL

The group name should be prefixed with @.
aoster

aoster

2022-03-28 12:57

reporter   ~0015957

Hi Francis,

thank you very much for having a look at our issue.
I have tested with the proposed command and can see, that the groups are listed for the shared calendars.

Rights for @CAL_XXX ["PublicModifier", "ConfidentialModifier", "PrivateModifier", "ObjectCreator", "ObjectEraser"]

However the users who are members of these groups are not able to add the calenders. The calender will not show up in the list of available shared calendars.

Related Changesets

sogo: master 3140a9dc

2022-03-28 17:45

francis


Details Diff		 fix(acls): fix SQL conversion for LIKE operator to find groups

Fixes 0005492		 Affected Issues
0005492
mod - SoObjects/SOGo/SOGoGCSFolder.m Diff File

Issue History

Date Modified Username Field Change
2022-03-14 09:09 aoster New Issue
2022-03-14 09:09 aoster Tag Attached: AD Member
2022-03-21 12:31 francis Description Updated
2022-03-28 12:38 francis Note Added: 0015956
2022-03-28 12:57 aoster Note Added: 0015957
2022-03-28 17:50 francis Changeset attached => sogo master 3140a9dc
2022-03-28 17:50 francis Assigned To => francis
2022-03-28 17:50 francis Resolution open => fixed
2022-03-28 18:04 francis Status new => resolved
2022-03-28 18:04 francis Fixed in Version => 5.6.0