[Obm] Re: OBM Install - second try

[Tim Verhoeven]

Hi,

I finally got the user creation working. In the end it was failing
when setting up Sieve for the user. Googling a bit I found that this
could be caused by missing SASL plugins (which makes sence). And yes,
after installing these sasl plugins :

cyrus-sasl-plain-2.1.22-4.x86_64
cyrus-sasl-md5-2.1.22-4.x86_64
cyrus-sasl-sql-2.1.22-4.x86_64
cyrus-sasl-ldap-2.1.22-4.x86_64

the update script worked completely. I just installed these 4 to make
sure I covered anything, but what exact module do I need ? I'm
guessing it will probably be the plain or ldap one. Anyway, could the
correct module be added as a depdency in the obm-cyrus RPM package so
that its get installed automatically in the future ?


A second issue I encountered during the run of obm-admin was that
obm-sync (and probably also funambol) where complaining that it could
not find the file
"/usr/lib/obm-tomcat-helpers/plugins/org.eclipse.equinox.launcher_1.0.1.R33x_v20070828.jar".
There is another version of that file present
(org.eclipse.equinox.launcher_1.0.200.v20090520.jar). So I downloaded
that file manually :

wget http://archive.eclipse.org/eclipse/equinox/drops/R-3.3.1-200709211145/org.eclipse.equinox.launcher_1.0.1.R33x_v20070828.jar

Could the obm-tomcat-helpers RPM get updated to include this version
of the launcher jar ?


A third issue. When I created the admin user for my domain I get a
webmail button when I logged in (strange, since this user has no
emailbox). Then when I logged in as a normal user, which has a
mailbox, I see no webmail button. Maybe somewhere a test got reversed
or something ?

Issue number 4. It a collection of issues, but I think they all belong
together. First, the version of minig availble in the RPM repo is
pretty old (2.2.7) and I'm guessing the rest of OBM which is up to
date is expecting a newer version.
Secondly the command "minig-conf" has a bug in the copy line : "cp
/usr/share/minig-conf/*.ini /etc/minig/conf"  should be "cp
/usr/share/minig-conf/*.ini /etc/minig/".
Then, the obm-admin command does not setup any of the minig stuff (is
this by design until ming is finished ?).
Also, obm-admin leaves the AJP proxy statements in the OBM Apache
config file (/etc/httpd/conf.d/obm.conf) commented out, but it
installs and configures those services. So it should also uncomment
those lines.

And in the end, webmail does not work. The webmail pages tries to load
this Javascript : /minig/fr.aliasource.webmail.WebmailUI.nocache.js.
But trying to load this URL I get a 403 error from Tomcat (yes, I
enabled the proxy lines myself). Looking in the Tomcat logs it looks
like it is trying to load a SSO page, but that fails :

2009-10-16 09:36:19,306 LoginFilter INFO -
performLogin(/minig/fr.aliasource.webmail.WebmailUI.nocache.js)
2009-10-16 09:36:19,306 LoginFilter INFO - Should perform std login
procedure => sso server
2009-10-16 09:36:19,306 LoginFilter INFO - Loading sso provider
(fr.aliasource.webmail.server.OBMSSOProvider)...
2009-10-16 09:36:19,306 OBMSSOProvider INFO - Redirecting to sso
server: sso/sso_index.php?action=ticket&service=https%3A%2F%2Fvm013.hq.dns.be%2Fminig%2Ffr.aliasource.webmail.WebmailUI.nocache.js
2009-10-16 09:36:19,418 LoginFilter INFO -
performLogin(/minig/sso/sso_index.php)
2009-10-16 09:36:19,418 LoginFilter INFO - Should perform std login
procedure => sso server
2009-10-16 09:36:19,418 LoginFilter INFO - Loading sso provider
(fr.aliasource.webmail.server.OBMSSOProvider)...
2009-10-16 09:36:19,418 OBMSSOProvider WARN - no ticket in url
2009-10-16 09:36:19,418 LoginFilter WARN - SSO server did not validate ticket
2009-10-16 09:36:19,418 LoginFilter WARN - not logged ajax call to
'https%3A%2F%2Fvm013.hq.dns.be%2Fminig%2Fsso%2Fsso_index.php%3Faction%3Dticket%26service%3Dhttps%253A%252F%252Fvm013.hq.dns.be%25
2Fminig%252Ffr.aliasource.webmail.WebmailUI.nocache.js', denying

Could this be caused by the version difference between OBM and Minig ?

Thanks again,
Tim

-- 
Tim Verhoeven - tim.verhoeven.be at gmail.com - 0479 / 88 11 83

Hoping the problem  magically goes away  by ignoring it is the
"microsoft approach to programming" and should never be allowed.
(Linus Torvalds)