Shared folders

[robert78]

Hi!

I can create a shared folder using the Kolab web interface (only if I
don't specify the folder type, though - Otherwise I get:
"LDAP Error: could not add object : Undefined attribute type") , but I
don't see it in Kontact / KMail (from KDE 3.5.1) when trying to subscribe.

Is it necessary to set the folder type to "Mails" for this to work?
Any ideas?

Thanks,
 Robert

[Gunnar Wrobel]

Hi Robert!

Thanks for posting it again. I looked into the problem and there were some conflicting patches in the kolab cvs some weeks ago. Looks like I'm innocent in this case.

Anyhow I fixed the problem for the gentoo version and just updated the ebuilds. So you can try to resync the overlay and upgrade. Hopefully the error should be gone afterwards. Make sure you restart your ldap server since I changed the kolab2.schema

Cheers

Gunnar

[robert78]

I updated an recompiled.
After restarting the Kolab services, I could not access the web interface anymore, so I bootstrapped Kolab again.

After that, slapd refuses to start with the following error message:
slapd: rdwr.c:99: ldap_pvt_thread_rdwr_destroy: Assertion `rw != ((void *)0)' failed.
/etc/init.d/slapd: line 12: 17921 Aborted                 start-stop-daemon --start --quiet --pidfile /var/run/openldap/slapd.pid --exec /usr/lib64/openldap/slapd -- -u ldap -g ldap -h 'ldaps:// ldap://'                                                                                                     

Any ideas?

[Gunnar Wrobel]

Ok, this is gentoo specific stuff, I'll keep that here

Are the directory permissions ok?

http://projects.gunnarwrobel.de/kolab/wiki/LdapRunning

Can you start the server in debugging mode?

/usr/lib/openldap/slapd -u ldap -g ldap -h 'ldaps:// ldap://' -d 256

Does that yield some clues?

[robert78]

Thanks for the hint, Gunnar! That was key problem:

TLS: private key mismatch.
TLS: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch x509_cmp.c:411
TLS: error:140A80BE:SSL routines:SSL_CTX_check_private_key:no private key assigned ssl_lib.c:777
main: TLS init def ctx failed: -1
slapd: rdwr.c:99: ldap_pvt_thread_rdwr_destroy: Assertion `rw != ((void *)0)' failed.
Aborted

I fixed that.

Now, the web interface is accessible, but I can't log in as "manager".
It seems the LDAP server does not even try to bind as "manager", but anonymous:

 connection_get(10): got connid=42
 connection_read(10): checking for input on id=42
 ber_get_next on fd 10 failed errno=11 (Resource temporarily unavailable)
 do_bind
 >>> dnPrettyNormal: <cn=nobody,cn=internal,dc=domain,dc=net>
 <<< dnPrettyNormal: <cn=nobody,cn=internal,dc=domain,dc=net>, <cn=nobody,cn=internal,dc=domain,dc=net>
 do_bind: version=3 dn="cn=nobody,cn=internal,dc=domain,dc=net" method=128
 bdb_dn2entry("cn=nobody,cn=internal,dc=domain,dc=net")
 send_ldap_result: conn=42 op=0 p=3
 send_ldap_response: msgid=1 tag=97 err=49
 connection_get(10): got connid=42
 connection_read(10): checking for input on id=42
 ber_get_next on fd 10 failed errno=0 (Success)
 input error=-2 id=42, closing.
 connection_closing: readying conn=42 sd=10 for close
 connection_close: deferring conn=42 sd=10
 do_unbind
 connection_resched: attempting closing conn=42 sd=10
 connection_close: conn=42 sd=10

Any ideas?

[Gunnar Wrobel]

As far as I know there will allways be an anonymous connect first. I think it will search for the user first and determine whether "anonymous" is allowed to authenticate against the password entry. So that should be ok.

Did your last bootstrap process break down somehow? This might have caused the SSL certificate problem you had. In that case I also don't know if the kolabconf process ran correctly and the passwords that were generated during bootstrapping were propagated to all the necessary places.

Since you probably don't have anything on the machine yet, I'd just suggest running the bootstrapping process again. Check for any strange errors. If it runs through without problems I guess you can log in again.

[robert78]

Great work, Gunnar!

Your fix works (on AMD64, BTW)!

Thanks alot,
 Robert

[Gunnar Wrobel]

Nice

Mind that sending to kolab+shared.xyz@mydomain.org does not work yet. Postfix still has a problem with that. user+folder@mydomain.org should work though.