The config that I use for SOGo, in /etc/sogo/sogo.conf:
{
WOPort = 127.0.0.1:20000;
WOLogFile = /var/log/sogo/sogo.log;
/* Fix Yunohost Tile */
WODontZipResponse = YES;
SOGoProfileURL = "mysql://sogo:16a243c2c337aef18741ede4@localhost:3306/sogo/sogo_user_profile";
OCSFolderInfoURL = "mysql://sogo:16a243c2c337aef18741ede4@localhost:3306/sogo/sogo_folder_info";
OCSSessionsFolderURL = "mysql://sogo:16a243c2c337aef18741ede4@localhost:3306/sogo/sogo_sessions_folder";
NGImap4ConnectionStringSeparator = ".";
SOGoAppointmentSendEMailNotifications = YES;
SOGoEnablePublicAccess = YES;
SOGoMailingMechanism = smtp;
SOGoSMTPServer = "smtp://domain.tld:587/?tls=YES";
SOGoSMTPAuthenticationType = PLAIN;
SOGoTimeZone = "Europe/Zurich";
SOGoSentFolderName = Sent;
SOGoTrashFolderName = Trash;
SOGoDraftsFolderName = Drafts;
SOGoIMAPServer = "imaps://domain.tld:993";
SOGoIMAPAclConformsToIMAPExt = YES;
SOGoVacationEnabled = YES;
SOGoForwardEnabled = YES;
SOGoSieveScriptsEnabled = YES;
SOGoSieveServer = sieve://127.0.0.1:4190;
SOGoFirstDayOfWeek = 0;
SOGoMailMessageCheck = every_10_minutes;
SOGoMailAuxiliaryUserAccountsEnabled = YES;
/* SOGoTrustProxyAuthentication = YES; */
SOGoSuperUsernames = (yunoadmin);
/* Default Calendar and Contacts Permissions */
SOGoCalendarDefaultRoles = ("PublicViewer", "ConfidentialDAndTViewer");
SOGoContactsDefaultRoles = ("ObjectViewer");
/* OIDC */
SOGoAuthenticationType = openid;
SOGoXSRFValidationEnabled = NO;
OCSOpenIdURL = "mysql://sogo:16a243c2c337aef18741ede4@localhost:3306/sogo/sogo_openid";
SOGoOpenIdConfigUrl = "https://auth.domain.tld/.well-known/openid-configuration";
SOGoOpenIdClient = "sogo-txytQqZW";
SOGoOpenIdClientSecret = "xxx";
SOGoOpenIdScope = "openid profile email";
SOGoOpenIdLogoutEnabled = NO;
/* LDAP authentication */
SOGoUserSources = (
{
type = ldap;
CNFieldName = cn;
UIDFieldName = uid;
IDFieldName = uid; // first field of the DN for direct binds
bindFields = (uid, mail); // array of fields to use for indirect binds
baseDN = "ou=users,dc=yunohost,dc=org";
filter = "objectClass='posixAccount' AND permission='cn=sogo.main,ou=permission,dc=yunohost,dc=org'";
canAuthenticate = YES;
displayName = "Yunohost Users";
hostname = ldap://localhost:389;
id = directory;
isAddressBook = YES;
}
);
}
In Authelia I've this config:
- client_id: 'sogo-txytQqZW'
client_name: 'SOGo'
client_secret: 'xxxx'
public: false
authorization_policy: 'one_factor'
redirect_uris:
- 'https://domain.tld/oauth/callback/'
scopes:
- 'openid'
- 'profile'
- 'email'
userinfo_signed_response_alg: 'none'
token_endpoint_auth_method: 'client_secret_post'
Step to reproduce:
- Login into Authelia
- Try access to SOGo
Expected: We are logged into SOGo (or maybe we have the login page)
Currently: We have this error into the browser: 501 Not Implemented | 
