send Mails move in DRAFTS!

[florian]

in scalix 11, it is no longer possible to run SWA without authentication on the SMTP connection.

1. why are you running sendmail on all IP addresses and not the SMTP relay?

2. if you really need this, it is suggested to run the SMTP relay on port 587 ("submission") and configure SWA and the messaging services platform accordingly.

Florian.

[zolo]

Thank you very much Florian,
some things are easier in this setup. Ok, suggestion 2 is working now. Just for my understanding. Where is the smtp-auth user and the password in swa configured ? If i know that, i can add it to sendmail.

greetz,
Zolo

[florian]

the username and the password for swa is always the users username and password, so he must authenticate against scalix.

Cheers,
Florian.

[FNB]

in scalix 11, it is no longer possible to run SWA without authentication on the SMTP connection.
Florian.

I didn't read about this in the release notes for 11 and the kerberos authentication section in the admin guide doesn't mention anything about editing smtpd.auth.

Am I missing the official documentation of this change?

I think the kerberos section of the admin guide should be updated to mention this information. The only way I found this out after ours broke, then the forum and coming across this: viewtopic.php?p=14577#14577

[dkelly]

This is documented in the FAQs that I posted in a sticky at the top of each forum on Jan 9th.

Cheers

Dave

[Oscar]

The same happened to me yesterday and the solution was.....

Code: Select all

root@scalix:~# vi /var/opt/scalix/sx/webmail/swa.properties
  swa.email.userNameIncludesDomain = false


[Jay2k1]

Same happened to me and unfortunately, after hours and days of trying, we don't have a solution.

Webmail's e-Mails get moved into the drafts folder. We do NOT get an error message.

We are using the standard scalix SMTP auth (neither kerberos nor LDAP).
Here's our configs:

/pam.d/ual.remote

Code: Select all

auth     required om_auth nullok
account  required om_auth
password required om_auth nullok

/pam.d/smtpd.auth

Code: Select all

auth     required om_auth nullok
account  required om_auth
password required om_auth

smtpd.cfg

Code: Select all

RELAY accept 127.0.0.1
RELAY accept sub.mydomain.de
RELAY accept .mydomain.de
RELAY Log_Reject ALL

RECIPIENT Log_Reject *@*@*
RECIPIENT Log_Reject *%*
RECIPIENT Log_Reject *!*
RECIPIENT Log_Reject *#*@*

[SUBMIT]
ANONYMOUS Log_Reject ALL

[LMTP]
LISTEN=localhost:24

Anyone any idea? We're really stuck with it...

Oh, and if anyone could explain what the config terms mean, I have no clue what 'nullok' is good for, all we tried is randomly adding or removing terms like that because we have no idea what or where we have to look/edit. (Don't worry, when a change wasn't successful, we undid the edit)

Best regards and thanks in advance,

Robert

PS: Oh, and it would be nice if you could provide some default config files with SMTP auth activated. In the documentation and wiki, there are either older or newer versions than ours, but that doesn't help much...

[florian]

We are shipping the default config files with smtpd auth enabled in Scalix 11, so normally there is no need to change anything.

Most of the PAM file options are documented in the man pages for the PAM modules (e.g. man om_krb5) or the generic Linux PAM documentation available on linux.org (or I think this document is actually owned by RedHat as they are the principal authors of PAM).

What platform is this running on?

What output do you see when you type

Code: Select all

lsof -i :25

Cheers,
Florian.

[Jay2k1]

Our PAM files look like the default ones now, I think. The faulty line(s) must be somewhere else.

The Scalix server is running on Ubuntu 6.0.6.

The output is

Code: Select all

COMMAND     PID USER   FD   TYPE   DEVICE SIZE NODE NAME
sendmail-  3761 root    4u  IPv4     8060       TCP localhost:smtp (LISTEN)
omsmtpd    6365 root    4u  IPv4 21288912       TCP sub.ourdomain.de:smtp (LISTEN)
omsmtpd    6365 root    5u  IPv4 21288913       TCP sub.ourdomain.de:smtp (LISTEN)
sendmail- 27424 root    7u  IPv4 21533602       TCP sub.ourdomain.de:55979->194.206.235.225:smtp (SYN_SENT)
sendmail- 28022 root    7u  IPv6 21534122       TCP sub.ourdomain.de:40060->www.danni.com:smtp (SYN_SENT)
sendmail- 28676 root    7u  IPv6 21531922       TCP sub.ourdomain.de:58542->161.58.154.209:smtp (SYN_SENT)


[florian]

what do the active lines in swa.properties contain?

Florian.

[Jay2k1]

this is our swa.roperties:

Code: Select all

swa.version=11.0

swa.email.domain=ourdomain.de
swa.email.imapServer=sub.ourdomain.de
swa.email.smtpServer=sub.ourdomain.de
swa.email.userNameIncludesDomain=false

swa.system.hasCalendar=true
swa.system.hasRulesWizard=true
swa.system.hasOutOfOffice=true
swa.system.hasAutoRefresh=true
swa.system.hasAutoLogin=true
swa.system.hasChangePassword=true
swa.system.maxAttachmentUploadKilobytes=10240
swa.system.minCheckMailMinutes=3

swa.system.addtlEditorFonts=

swa.platform.url=https://sub.ourdomain.de/api
swa.platform.enabled=true

swa.search.maxresults=100

swa.mailstore.staleTime=900
swa.mailstore.connectionPoolSize=2

swa.settings.rulesWizardURL=https://sub.ourdomain.de/Scalix/rw
swa.settings.homeDir=/tmp
swa.map.urlschema=http://maps.google.com/maps?q=%ADDRESS
swa.user.refreshFolderList=
swa.user.useRichText=true
swa.user.msgCompositionFontFamily=times new roman, new york, times, serif
swa.user.autoSpellCheck=false
swa.user.msgCompositionFontSize=3
swa.user.dirSearchOrder=system,personal
swa.user.includeMessageOnReply=true
swa.user.autoAcknowledgeReadReceipts=true
swa.user.showBcc=false
swa.user.signatureText=
swa.user.signatureActive=true
swa.user.foldersPaneVisible=true
swa.user.messagePaneVisible=true
swa.user.eventsPaneVisible=true
swa.user.miniCalendarPaneVisible=true
swa.user.mailCheckInterval=10
swa.user.newMailSound=
swa.user.locale=de_DE
swa.user.preferredDateTimeFormat=4
swa.user.dateSeparatorChar=.
swa.user.timeSeparatorChar=:
swa.user.workWeek=1,2,3,4,5
swa.user.workDayStart=540
swa.user.workDayEnd=1080
swa.user.weekStart=1
swa.user.upcomingAppointmentsRange=7
swa.user.defaultCalendarView=0
swa.user.freeBusyPublishRange=2
swa.user.freeBusyPublishInterval=5
swa.user.hideEmailAddresses=false
swa.user.blockRemoteImages=false
swa.allusers.allowFromReplyToModification=false
swa.allusers.forceReadReceipts=true
swa.sensitivity.prompt=personal,company-confidential,private
swa.sensitivity.block=
swa.ldap.searchAll=true
swa.ldap.maxResults=250
swa.soap.soapRequestTimeout=60

swa.ldap.1.type=system
swa.ldap.1.server=sub.ourdomain.de
swa.ldap.1.port=3890
swa.ldap.1.baseDN=o=scalix
swa.ldap.1.displayName.resourceID=addressbooksearch_title_system
swa.ldap.1.displayName.resourceLabel=System Directory
swa.ldap.1.authType=simple
swa.ldap.1.filter=(&(!(omExCdaDirectory=*))(|(&(cn=%s*)(mail=*))(&(sn=%s*)(mail=*))(&(gn=%s*)(mail=*))(mail=%s*)(&(omalias=%s*)(mail=*))))
swa.ldap.1.addressSearchLimit=100

swa.ldap.1.search.1.header=true
swa.ldap.1.search.1.type=name
swa.ldap.1.search.1.name.resourceID=addressbooksearch_label_name
swa.ldap.1.search.1.name.resourceLabel=Name
swa.ldap.1.search.1.dirAttribute=omcn

swa.ldap.1.search.2.header=true
swa.ldap.1.search.2.type=email
swa.ldap.1.search.2.name.resourceID=addressbooksearch_label_email
swa.ldap.1.search.2.name.resourceLabel=Email Address
swa.ldap.1.search.2.dirAttribute=rfc822Mailbox

swa.ldap.1.search.3.header=true
swa.ldap.1.search.3.type=
swa.ldap.1.search.3.name.resourceID=addressbooksearch_label_phone
swa.ldap.1.search.3.name.resourceLabel=Phone
swa.ldap.1.search.3.dirAttribute=telephoneNumber

swa.ldap.1.search.4.header=
swa.ldap.1.search.4.type=
swa.ldap.1.search.4.name.resourceID=
swa.ldap.1.search.4.name.resourceLabel=Fax Phone
swa.ldap.1.search.4.dirAttribute=facsimileTelephoneNumber

swa.ldap.1.search.5.header=
swa.ldap.1.search.5.type=
swa.ldap.1.search.5.name.resourceID=
swa.ldap.1.search.5.name.resourceLabel=Mobile Phone
swa.ldap.1.search.5.dirAttribute=mobileTelephoneNumber

swa.ldap.1.search.6.header=
swa.ldap.1.search.6.type=
swa.ldap.1.search.6.name.resourceID=
swa.ldap.1.search.6.name.resourceLabel=Pager Phone
swa.ldap.1.search.6.dirAttribute=pagerTelephoneNumber

swa.ldap.2.type=personal
swa.ldap.2.server=sub.ourdomain.de
swa.ldap.2.port=3890
swa.ldap.2.baseDN=o=MyContacts
swa.ldap.2.displayName.resourceID=addressbooksearch_title_personal
swa.ldap.2.displayName.resourceLabel=Personal Contacts
swa.ldap.2.authType=simple
swa.ldap.2.bindDN=rfc822mailbox=%u
swa.ldap.2.filter=(&(!(omExCdaDirectory=*))(|(&(cn=%s*)(|(mail=*)(304=4)))(&(sn=%s*)(mail=*))(&(gn=%s*)(mail=*))(mail=%s*)(&(omalias=%s*)(mail=*))))
swa.ldap.2.timeout=100000

swa.debug.listOfUsersToLogImap=
swa.debug.listOfUsersToLogSmtp=

swa.debug.listOfDebuggingUsers=


[florian]

now it gets difficult as this looks correct - assuming that the changed lines contan the actual hostname in the real setup.

the one further thing i could think of is lack of installed SASL packages as SMTP authentication relies on SASL. These are os packages. on fully supported operating systems, the installer checks this requirement.

Cheers,
Florian.

[florian]

it might be useful to do some packet sniffing on port 25 and see if swa actually tries to talk to the scalix smtp relay. also, the setting of DEBUG_LOG=true in smtpd.cfg might help determining the cause of the problem.

Florian.

[Jay2k1]

now it gets difficult as this looks correct - assuming that the changed lines contan the actual hostname in the real setup.

They do

the one further thing i could think of is lack of installed SASL packages as SMTP authentication relies on SASL. .

Now we get closer to the problem.

This, indeed, is the problem. Right now, we're on installing SASL.

Hope this works

[jmason1182]

Well i am having the same problem, but I DO have SASL.

I don't get any errors in catalina.out, I don't have any errors in any of the logs, DEBUG_LOG for smtp or via the SAC.

In fact, in the smptd debug log I don't even see anything where the swa tried to connect! It only shows all the messages I send through IMAP/SMTP with thunderbird! So perhaps it's just my swa that has an issue. And this is unedited as I am my SMTPD relay doing my MASQUERADE as my outside domain (thus the .local is 100% local).

So here's my active swa.properties:

Code: Select all

[root@midsl058 webmail]# cat swa.properties
swa.version=11.0

swa.email.domain=masonco.local
swa.email.imapServer=midsl058.masonco.local
swa.email.smtpServer=midsl058.masonco.local
swa.email.userNameIncludesDomain=false

swa.system.hasCalendar=true
swa.system.hasRulesWizard=true
swa.system.hasOutOfOffice=true
swa.system.hasAutoRefresh=true
swa.system.hasAutoLogin=true
swa.system.hasChangePassword=false
swa.system.maxAttachmentUploadKilobytes=10240
swa.system.minCheckMailMinutes=3

# Comma-separated list of additional fonts to be displayed in the Rich Text editor
swa.system.addtlEditorFonts=

# SWA can optionally use a platform API server to search for mail messages and to
# fetch message headers. In some cases, the platform API performs better than
# using IMAP directly. SWA uses IMAP directly for searches and header fetching
# if the platform URL is not available, or if the platform is disabled
# (see the "swa.platform.enabled" property).
swa.platform.url=http://midsl058.masonco.local/api
#
# SWA can distribute its platform API load across platform instances on different hosts.
# SWA determines the host to use based on the IMAP referral host for a user. SWA
# examines the swa.platform.url.format property and replaces the {0}
# token with the user's IMAP referral host to produce the platform url for that
# user. For example, consider the following example setting:
#
# swa.platform.url.format=http://{0}/api
#
# Based on this setting, if the user is referred to the IMAP host
# "mail2.mydomain.com", SWA will also direct platform API traffic to
# "http://mail2.mydomain.com/api".
#
# If no IMAP host referral is configured for the user (the default), or if the
# swa.platform.url.format property is empty (the default), SWA uses the
# default platform URL from property "swa.platform.url".
# (See the documentation on configuring a multi-server installation for more
# information about configuring IMAP referral.)
#
swa.platform.url.format=
# Set true to use the platform server for searching and for fetching message headers.
swa.platform.enabled=true
# These properties control the pool of HTTP clients used by SWA for communicating
# with the platform.
# maxConnectionsPerHost limits the number of connections SWA will keep open to any
# single platform instance.
swa.platform.httpclient.maxConnectionsPerHost=15
# maxTotalConnections limits the number of connections SWA will keep open to all
# platform instances put together. A typical installation has only one platform instance.
swa.platform.httpclient.maxTotalConnections=30


# maximum number of search results to return in one "page".  Use -1 for "all" (not advised for where there are large indexes).
swa.search.maxresults=100

# This is the idle time in seconds after which a user's servlet session
# will expire. Usually this value does nothing in SWA because mail
# polling keeps the session alive until the user closes her browser
# triggering a logout.
swa.mailstore.staleTime=900
#
# Determines whether to keep each user's current imap folder open between browser requests.
# Keeping the folder open may improve performance but requires additional
# runtime memory for the folder's messages. Under normal circumstances, keeping
# folders open requires a few megabytes of additional memory for each active
# user session.
#
swa.mailstore.imap.reuseFolder=false

swa.settings.rulesWizardURL=/Scalix/rw
swa.settings.homeDir=/tmp

# URL Schema used to display maps when the user clicks on a postal address.
# For Google Maps:
swa.map.urlschema=http://maps.google.com/maps?q=%ADDRESS
# For Yahoo! Maps:
# swa.map.urlschema=http://maps.yahoo.com/beta/index.php#maxp=search&q1=%ADDRESS
# For MapQuest:
# swa.map.urlschema=http://www.mapquest.com/maps/map.adp?searchtype=address&country=%COUNTRY&searchtab=home&address=%STREET&city=%CITY&state=%STATE&zipcode=%ZIP

swa.user.refreshFolderList=
swa.user.useRichText=true
swa.user.msgCompositionFontFamily=times new roman, new york, times, serif
swa.user.autoSpellCheck=false
swa.user.msgCompositionFontSize=3
swa.user.dirSearchOrder=system,personal
swa.user.includeMessageOnReply=true
# The user will have the option to auto-acknowledge read receipts
swa.user.autoAcknowledgeReadReceipts=true
swa.user.showBcc=false
swa.user.signatureText=
swa.user.signatureActive=true
swa.user.foldersPaneVisible=true
swa.user.messagePaneVisible=true
swa.user.eventsPaneVisible=true
swa.user.miniCalendarPaneVisible=true
swa.user.mailCheckInterval=10
swa.user.newMailSound=
swa.user.locale=en_US
# Default date/time format index
# 1 = month/day/year, 12 hour format
# 2 = month/day/year, 24 hour format
# 3 = day/month/year, 12 hour format
# 4 = day/month/year, 24 hour format
# 5 = year/month/day, 12 hour format
# 6 = year/month/day, 24 hour format
swa.user.preferredDateTimeFormat=1
# Default date separator character
swa.user.dateSeparatorChar=/
# Default time separator character
swa.user.timeSeparatorChar=:
# Default days in a work week
# 0=Sunday, 1=Monday, 2=Tuesday, ..., 6=Saturday
swa.user.workWeek=1,2,3,4,5
# Default start of the work day in minutes (480 = 8AM)
swa.user.workDayStart=480
# Default end of the work day in minutes (1020 = 5PM)
swa.user.workDayEnd=1020
# Default first day of the week
# 0=Sunday, 1=Monday, 2=Tuesday, ..., 6=Saturday
swa.user.weekStart=0
# Default number of days covered by the upcoming appointments
swa.user.upcomingAppointmentsRange=7
# Default calendar view
# 0=Daily view
# 1=Work week view
# 2=Weekly view
# 3=Monthly view
swa.user.defaultCalendarView=0
# How many months of Free/Busy information should we publish on the server?
swa.user.freeBusyPublishRange=2
# How often (in minutes) should we update Free/Busy information on the server?
swa.user.freeBusyPublishInterval=5
# Specifies whether email addresses should be shown
# or if SWA should only show display names
swa.user.hideEmailAddresses=false
# Specifies whether SWA should block remote images in HTML emails.
swa.user.blockRemoteImages=false

# Global-user Admin controls
#
# Toggle whether you wish to allow the user to edit the From or Reply-To headers in the user prefs
swa.allusers.allowFromReplyToModification=false
# The admin can force SWA to auto-ackknowledge read receipts, hiding the option
# from all users' preference dialogs
swa.allusers.forceReadReceipts=true

# Defines which messages with sensitivity values set should be blocked, or
# prompted to the user to ask for confirmation to view.
#
swa.sensitivity.prompt=personal,company-confidential,private
swa.sensitivity.block=

swa.ldap.searchAll=true
swa.ldap.maxResults=250

# Defines in Seconds how long a SOAP request will remain in the current, uncomplete
# readyState (= 1, 2, or 3) before we force a timeout
swa.soap.soapRequestTimeout=60

# Additional LDAP sources can be added here. The following attributes are valid
#
# Server Hostname or IP address (optional, default = localhost)
# swa.ldap.<n>.server=localhost
#
# LDAP port number (optional, default = 389)
# swa.ldap.<n>.port=389
#
# Base DN (mandatory)
# swa.ldap.<n>.baseDN=o=Scalix
#
# Type (mandatory)
# Notes: (1) This is actually a name to tag the entry; "personal" and "system"
#            are reserved values, as is any name starting with either.
#        (2) to define the search order, this can be referenced in
#            swa.user.dirSearchOrder
# swa.ldap.<n>.type=myldap
#
# LDAP search Filter (mandatory)
# Note: Use %s to represent user input to checknames or addressbook search
# swa.ldap.<n>.filter=(|(givenname=*%s*)(surname=*%s*))
#
# LDAP search Scope (optional, default = one)
# Possible Values: sub, one, base
# swa.ldap.<n>.scope=sub
#
# Maximum number of entries to return (optional, default 100)
# swa.ldap.<n>.addressSearchLimit=10
#
# Maximum time (in milliseconds) before timing out (optional, default 10000)
# swa.ldap.<n>.timeout=30000
#
# LDAP Authentication Type (optional, default = none)
# Possible Values: none, simple
# swa.ldap.<n>.authType=none
#
# LDAP Bind DN (optional)
# Note: Use %u to represent the user's name as identified by his eMail address
# swa.ldap.<n>.bindDN=cn=Administrator,o=Scalix
#
# LDAP Source Label (mandatory) or  ID for localized name in Resource file)
# swa.ldap.<n>.resourceLabel=My LDAP
# swa.ldap.<n>.resourceID=my_ldap_resource_label
#
# Name of attribute displayed as Friendly Name in CheckNames result
# (optional, default = omcn)
# swa.ldap.<n>.checkNames.nameAttribute=displayName
#
# Name of attribute displayed as Email Address in CheckNames result
# (optional, default = mail)
# swa.ldap.<n>.checkNames.nameAttribute=rfc822address
#
# Further attribute definitions (the address book expects at least 3 columns)
#
# LDAP Attribute Label (mandatory) or ID for localized name in resource file
# swa.ldap.<n>.search.<m>.resourceLabel=FaxNumber
# swa.ldap.<n>.search.<m>.resourceID=fax_number_resource
#
# display Header (optional)
# swa.ldap.<n>.search.<m>.header=true
#
# Attribute identification for special columns (optional)
# Possible values: name, email
# swa.ldap.<n>.search.<m>.type=name
#
# LDAP attribute mapped to column (mandatory)
# swa.ldap.<n>.search.<m>.dirAttribute=UID
#

swa.ldap.1.type=system
swa.ldap.1.server=midsl058.masonco.local
swa.ldap.1.port=389
swa.ldap.1.baseDN=o=scalix
swa.ldap.1.displayName.resourceID=addressbooksearch_title_system
swa.ldap.1.displayName.resourceLabel=System Directory
swa.ldap.1.authType=none
swa.ldap.1.filter=(&(!(omExCdaDirectory=*))(|(&(cn=%s*)(mail=*))(&(sn=%s*)(mail=*))(&(gn=%s*)(mail=*))(mail=%s*)(&(omalias=%s*)(mail=*))))
swa.ldap.1.addressSearchLimit=100

swa.ldap.1.search.1.header=true
swa.ldap.1.search.1.type=name
swa.ldap.1.search.1.name.resourceID=addressbooksearch_label_name
swa.ldap.1.search.1.name.resourceLabel=Name
swa.ldap.1.search.1.dirAttribute=omcn

swa.ldap.1.search.2.header=true
swa.ldap.1.search.2.type=email
swa.ldap.1.search.2.name.resourceID=addressbooksearch_label_email
swa.ldap.1.search.2.name.resourceLabel=Email Address
swa.ldap.1.search.2.dirAttribute=rfc822Mailbox

swa.ldap.1.search.3.header=true
swa.ldap.1.search.3.type=
swa.ldap.1.search.3.name.resourceID=addressbooksearch_label_phone
swa.ldap.1.search.3.name.resourceLabel=Phone
swa.ldap.1.search.3.dirAttribute=telephoneNumber

swa.ldap.1.search.4.header=
swa.ldap.1.search.4.type=
swa.ldap.1.search.4.name.resourceID=
swa.ldap.1.search.4.name.resourceLabel=Fax Phone
swa.ldap.1.search.4.dirAttribute=facsimileTelephoneNumber

swa.ldap.1.search.5.header=
swa.ldap.1.search.5.type=
swa.ldap.1.search.5.name.resourceID=
swa.ldap.1.search.5.name.resourceLabel=Mobile Phone
swa.ldap.1.search.5.dirAttribute=mobileTelephoneNumber

swa.ldap.1.search.6.header=
swa.ldap.1.search.6.type=
swa.ldap.1.search.6.name.resourceID=
swa.ldap.1.search.6.name.resourceLabel=Pager Phone
swa.ldap.1.search.6.dirAttribute=pagerTelephoneNumber

swa.ldap.2.type=personal
swa.ldap.2.server=midsl058.masonco.local
swa.ldap.2.port=389
swa.ldap.2.baseDN=o=MyContacts
swa.ldap.2.displayName.resourceID=addressbooksearch_title_personal
swa.ldap.2.displayName.resourceLabel=Personal Contacts
swa.ldap.2.authType=simple
swa.ldap.2.bindDN=rfc822mailbox=%u
swa.ldap.2.filter=(&(!(omExCdaDirectory=*))(|(&(cn=%s*)(|(mail=*)(304=4)))(&(sn=%s*)(mail=*))(&(gn=%s*)(mail=*))(mail=%s*)(&(omalias=%s*)(mail=*))))
swa.ldap.2.timeout=100000

swa.debug.listOfUsersToLogImap=
swa.debug.listOfUsersToLogSmtp=

# Comma-separated list of Internet address of users with client logging enabled
swa.debug.listOfDebuggingUsers=