NativeMicrosoftOutlookConfiguration Guide. forversion2.3.1



Similar documents
Secure Messaging Server Console... 2

CLEO NED Active Directory Integration. Version 1.2.0

Univention Corporate Server. Operation of a Samba domain based on Windows NT domain services

Install Cacti Network Monitoring Tool on CentOS 6.4 / RHEL 6.4 / Scientific Linux 6.4

Polycom RealPresence Resource Manager System Getting Started Guide

insync Installation Guide

Table of Contents. This whitepaper outlines how to configure the operating environment for MailEnable s implementation of Exchange ActiveSync.

INUVIKA OVD INSTALLING INUVIKA OVD ON UBUNTU (TRUSTY TAHR)

White Paper. Installation and Configuration of Fabasoft Folio IMAP Service. Fabasoft Folio 2015 Update Rollup 3

INTEGRATION GUIDE. DIGIPASS Authentication for Office 365 using IDENTIKEY Authentication Server with Basic Web Filter

LDAP User Guide PowerSchool Premier 5.1 Student Information System

escan SBS 2008 Installation Guide

ULTEO OPEN VIRTUAL DESKTOP UBUNTU (PRECISE PANGOLIN) SUPPORT

INUVIKA OVD INSTALLING INUVIKA OVD ON RHEL 6

Client configuration and migration Guide Setting up Thunderbird 3.1

Active Directory and Linux Identity Management

Use Enterprise SSO as the Credential Server for Protected Sites

System Administration Training Guide. S100 Installation and Site Management

Introduction. Versions Used Windows Server 2003

MOC 5047B: Intro to Installing & Managing Microsoft Exchange Server 2007 SP1

Exchange Outlook Profile/POP/IMAP/SMTP Setup Guide

Migration of Windows Intranet domain to Linux Domain Moving Linux to a Wider World

Configuring MailArchiva with Insight Server

HP Device Manager 4.7

Setting up LDAP settings for LiveCycle Workflow Business Activity Monitor

DIGIPASS Authentication for Microsoft ISA 2006 Single Sign-On for Outlook Web Access

How To - Implement Single Sign On Authentication with Active Directory

Installation of MicroSoft Active Directory

Field Description Example. IP address of your DNS server. It is used to resolve fully qualified domain names

Configuration Guide. BES12 Cloud

ZCP trunk (build 51762) Z-Admin Manual. The Z-Admin Manual

Cybozu Garoon 3 Server Distributed System Installation Guide Edition 3.1 Cybozu, Inc.

Integrating PISTON OPENSTACK 3.0 with Microsoft Active Directory

CA Performance Center

IBM Cloud Manager with OpenStack

Architecture and Data Flow Overview. BlackBerry Enterprise Service Version: Quick Reference

INTEGRATION GUIDE. DIGIPASS Authentication for Google Apps using IDENTIKEY Federation Server

NSi Mobile Installation Guide. Version 6.2

NTP Software File Auditor for NAS, EMC Edition

INTRODUCING SAMBA 4 NOW, EVEN MORE AWESOMENESS

SCOoffice Mail Connector For Microsoft Outlook. Installation Guide Outlook 2002

Tibbr Installation Addendum for Amazon Web Services

Security Provider Integration LDAP Server

Configuring Squid Proxy, Active Directory Authentication and SurfProtect ICAP Access

ecopy ShareScan v4.3 Pre-Installation Checklist

Setup Guide. network support pc repairs web design graphic design Internet services spam filtering hosting sales programming

How To Connect A Gemalto To A Germanto Server To A Joniper Ssl Vpn On A Pb.Net 2.Net (Net 2) On A Gmaalto.Com Web Server

How to Migrate to MailEnable using the Migration Console

Setting Up Specify to use a Shared Workstation as a Database Server

Setting Up Scan to SMB on TaskALFA series MFP s.

Pexip Infinity Reverse Proxy Deployment Guide

Installation Guide. Copyright (c) 2015 The OpenNMS Group, Inc. OpenNMS SNAPSHOT Last updated :19:20 EDT

VMware Identity Manager Connector Installation and Configuration

Integrating WebSphere Portal V8.0 with Business Process Manager V8.0

Alinto Mail Server Pro

WirelessOffice Administrator LDAP/Active Directory Support

SecureAware on IIS8 on Windows Server 2008/- 12 R2-64bit

Creating a DUO MFA Service in AWS

NETASQ ACTIVE DIRECTORY INTEGRATION

Using Active Directory as your Solaris Authentication Source

DIGIPASS Authentication for Citrix Access Gateway VPN Connections

Using LDAP Authentication in a PowerCenter Domain

LifeSize Control Installation Guide

Setup Local Mail Server Using Postfix, Dovecot And Squirrelmail On CentOS 6.5/6.4

VMware Identity Manager Administration

istorage Server: High-Availability iscsi SAN for Windows Server 2008 & Hyper-V Clustering

Using LifeSize Systems with Microsoft Office Communications Server 2007

WebSpy Vantage Ultimate 2.2 Web Module Administrators Guide

IRMACS Setup. Your IRMACS is available internally by the IMAP protocol. The server settings used are:

Resonate Central Dispatch

Aradial Installation Guide

Univention Corporate Server. Extended Windows integration documentation

Administration Guide GroupWise Mobility Service 2.1 February 2015

SITEMINDER SSO FOR EMC DOCUMENTUM REST

Click Studios. Passwordstate. Installation Instructions

Installation and Configuration Guide

Borderware Firewall Server Version 7.1. VPN Authentication Configuration Guide. Copyright 2005 CRYPTOCard Corporation All Rights Reserved

Create a virtual machine at your assigned virtual server. Use the following specs

SOGo. Open Source Groupware at the University of Konstanz

Sophos Mobile Control Installation guide. Product version: 3

Sophos Mobile Control Installation guide. Product version: 3.5

How To Install Storegrid Server On Linux On A Microsoft Ubuntu 7.5 (Amd64) Or Ubuntu (Amd86) (Amd77) (Orchestra) (For Ubuntu) (Permanent) (Powerpoint

How to configure your Desktop Computer and Mobile Devices post migrating to Microsoft Office 365

Device Log Export ENGLISH

Kerio Connect. Step-by-Step. Kerio Technologies

Quick Install Guide. Lumension Endpoint Management and Security Suite 7.1

JAMF Software Server Installation Guide for Linux. Version 8.6

What is the Barracuda SSL VPN Server Agent?

Click Studios. Passwordstate. Installation Instructions

Here, we will discuss step-by-step procedure for enabling LDAP Authentication.

This presentation explains how to integrate Microsoft Active Directory to enable LDAP authentication in the IBM InfoSphere Master Data Management

Integrate with Directory Sources

Technical Note. Configuring Outlook Web Access with Secure WebMail Proxy for eprism

Password Manager. Version Password Manager Quick Guide

Install and Configure Oracle Outlook Connector

EAsE and Integrated Archive Platform (IAP)

Configuring and Using the TMM with LDAP / Active Directory

2 Configuring GroupWise Mobility Service to Support Microsoft Outlook Clients

AskCody Connect Connect your Outlook or AD to AskCody s solutions seamlessly. Everything included!

Transcription:

NativeMicrosoftOutlookConfiguration Guide forversion2.3.1

NativeMicrosoftOutlookConfigurationGuide Version2.3.1-July2015 Permissionisgrantedtocopy,distributeand/ormodifythisdocumentunderthetermsoftheGNUFreeDocumentationLicense,Version 1.2oranylaterversionpublishedbytheFreeSoftwareFoundation;withnoInvariantSections,noFront-CoverTexts,andnoBack-Cover Texts.Acopyofthelicenseisincludedinthesectionentitled"GNUFreeDocumentationLicense". ThefontsusedinthisguidearelicensedundertheSILOpenFontLicense,Version1.1.ThislicenseisavailablewithaFAQat:http:// scripts.sil.org/ofl Copyright ŁukaszDziedzic,http://www.latofonts.com,withReservedFontName:"Lato". Copyright RaphLevien,http://levien.com/,withReservedFontName:"Inconsolata".

TableofContents AboutthisGuide... 1 Introduction... 2 Architecture... 3 Requirements... 4 LDAPServer... 4 MicrosoftActiveDirectory... 4 OtherorNoSolution...5 IMAPServerandTrust... 5 Installation... 7 RedHatEnterpriseLinuxv6x86_64... 7 Debian7(Wheezy)andUbuntu12.04(PrecisePangolin)... 8 Debian8(Jessie)andUbuntu14.04(TrustyTahr)... 9 Configuration... 10 SOGoConfiguration...10 Samba4Configuration...10 OpenChangeConfiguration... 11 ApacheConfigurationforWebServices... 13 NameServiceConfigurationforWebServices... 16 AddingUsers...18 MicrosoftOutlookConfiguration... 19 KnownIssuesorLimitations... 20 CurrentLimitations... 20 AdditionalInformation... 22 CommercialSupportandContactInformation... 23 iii

Chapter1 AboutthisGuide ThisguidewillwalkyouthroughtheinstallationandconfigurationofthenativeMicrosoftOutlook compatibilitylayersogooffers. Priorgoingoverthisguide,youshouldhaveaworkingSOGoinstallation.PleaserefertotheSOGo InstallationandConfigurationGuideformoreinformationoninstallingandconfiguringSOGo. ThisguidealsoincludesinstructionsforconfiguringMicrosoftOutlookwithSOGo. Theinstructionsarebasedonversion2.3.1ofSOGo. Thelatestversionofthisguideisavailableathttp://www.sogo.nu/downloads/documentation.html. AboutthisGuide 1

Chapter2 Introduction SOGoisafreeandmodernscalablegroupwareserver.Itofferssharedcalendars,addressbooks,and emailsthroughyourfavouritewebbrowserandbyusinganativeclientsuchasmozillathunderbird andlightning. SOGoisstandard-compliant.ItsupportsCalDAV,CardDAV,GroupDAV,iMIPandiTIPandreuses existingimap,smtpanddatabaseservers makingthesolutioneasytodeployandinteroperable withmanyapplications. SOGofeatures: Scalablearchitecturesuitablefordeploymentsfromdozentomanythousandusers Rich Web-based interface that shares the look and feel, the features and the data of Mozilla ThunderbirdandLightning ImprovedintegrationwithMozillaThunderbirdandLightningbyusingtheSOGoConnectorand thesogointegrator NativecompatibilityforMicrosoftOutlook2003,2007,2010,and2013 Two-waysynchronizationsupportwithanyMicrosoftActiveSync-capabledevice,andOutlook 2013 SOGoisdevelopedbyacommunityofdeveloperslocatedmainlyinNorthAmericaandEurope. Moreinformationcanbefoundonhttp://www.sogo.nu/. Introduction 2

Chapter3 Architecture ThefollowingdiagramdemonstratesthearchitectureofthenativeOutlookcompatibilitylayerof SOGo. WithSamba4andOpenChange,MicrosoftOutlookclientscancommunicatenativelywithSOGo usingthemicrosoftexchangeprotocol,withoutrequiringcostlyandhard-to-maintainthird-party MAPIconnectorsforMicrosoftOutlook. Architecture 3

Chapter4 Requirements OrganizationsgenerallyhavesolutionstoauthenticateuserssuchasLDAPserversorMicrosoft ActiveDirectoryservers. ThesolutionbeingusedwillinfluencehowusersareprovisionedinSamba4,akeycomponentfor nativeoutlookcompatibilityinsogo. LDAPServer IfyourorganizationusesaLDAPserversuchOpenLDAP,NovelleDirectory,ApacheDirectoryor any other solution, you must use Samba 4 s internal directory server and synchronize the data betweenboth. Synchronizationscriptsarenotprovidedandunlessyouhaveclear-textpasswordsofyourexisting users,theywillhavetobechangedduringyourinitialsynchronizationsothatyourldap sserver passwordsareidenticaltotheonesfromsamba4. AnymodificationstoyourexistingLDAPserver(passwordchange,useradditionordeletion,etc.) willhavetobereplicatedtosamba4 sinternaldirectoryserver. NotethatifyouinstallSamba4onaserverthatisalreadyrunningaLDAPservice,youwillhave tochangetotcpportonwhichyourldapserverlistensto.samba4willusethetcpport389 anditcan tbechanged. Forexample,withOpenLDAP,youcanusethe-hparameterforslapdtomakeitlistenonanother TCPport. MicrosoftActiveDirectory IfyourorganizationusesMicrosoftActiveDirectory,Samba4willneedtobejoinedtoyourActive Directorydomain,asaDC. Samba4willbeabletoreusealltheinformationcontainedinMicrosoftActiveDirectoryandno synchronization process needs to be put in place as information will get replicated to Samba 4 automatically. FormoreinformationonjoiningSamba4toanexistingMicrosoftActiveDirectorydomain,please refertothesamba4documentationavailableatthefollowingurl: Requirements 4

Chapter4 http://wiki.samba.org/index.php/samba4 Morespecifically,havealookatthesamba-tool domain joincommand.notethatjoiningsamba 4 to your Active Directory domain as a member will currently not work. An authentication bug ispresentinsamba4whichthenpreventsalloutlookuserstosuccessfullyauthenticatethrough Samba4.ThisissuehasbeenreportedtotheSambateamandisbeingworkedon. OtherorNoSolution IfyourorganizationneitherusesaLDAPserverorMicrosoftActiveDirectory,youcanstartusing Samba4asyourdirectoryserver. Samba4 sdirectorycanbequeriedoverldapjustlikemicrosoftactivedirectoryandcanalso serveasadomaincontrollerforwindows-basedenvironments. Forexample,SOGocanverywelluseSamba4 sbuilt-indirectoryservertoauthenticateusers.a SOGoUserSourcesentrytoachievethiswoldlooklikethis: su sogo defaults write sogod SOGoUserSources '( { CNFieldName = displayname; IDFieldName = cn; UIDFieldName = samaccountname; basedn = "cn=users,dc=example,dc=com"; binddn = "cn=administrator,cn=users,dc=example,dc=com"; bindfields = ( samaccountname ); bindpassword = "%1OpenChange"; canauthenticate = YES; displayname = "Shared Addresses"; hostname = "127.0.0.1"; id = samba; isaddressbook = YES; port = 389; } )' PleaserefertotheSOGoInstallationandConfigurationGuideformoreinformationregarding SO- GoUserSources. IMAPServerandTrust AnIMAPserversupportingtheACL,UIDPLUSandQRESYNCIMAPextensionsisrequired,suchas CyrusIMAPversion2.4orlater,orDovecotversion2.1orlater.IfyourcurrentIMAPserverdoes Requirements 5

Chapter4 notsupporttheseextensions,youcanusedovecot sproxyingcapabilities.thefollowconfiguration examplemakesdovecotproxyallimaprequesttoanexistingserver: auth_mechanisms = plain login imapc_host = inverse.ca imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no mail_gid = imapproxy mail_home = /home/imapproxy/%u mail_location = imapc:~/imapc mail_uid = imapproxy passdb { args = host=inverse.ca ssl=imaps port=993 ssl_ca_dir=/etc/pki/tls/certs default_fields = userdb_imapc_user=%u userdb_imapc_password=%w driver = imap } protocols = imap ssl = no userdb { driver = prefetch } SOGowouldthenbeconfiguredtouseDovecot sproxyastheimapserver. Moreover,theauthenticationmodeinusebyWindowswithSambaandExchangeserversprevent thebackendfromknowingtherealpasswordbeingusedbytheuser.thisimpliesthattheimap servermustacceptanypasswordsfromthehostonwhichsambaisrunning. To accomplish this with Cyrus IMAP Server, set sasl_pwcheck_method to alwaystrue in/etc/ imapd.conf.youshouldrestrainthistoanimapdinstancededicatedtosogo. ForDovecot,useanauthenticationsourcesimilarto: passdb { driver = static args = nopassword=y allow_nets=127.0.0.1/32 } YoushouldalsomakesurethatyourestrainthisonlytotheSOGoprocesses. ForanyotherIMAPserver,refertotheproduct sdocumentation.ifsuchcapabilityisnotoffered, youcanalternativelydefinethecleartextpasswordforeachuser.pleaserefertotheaddingusers sectionfromthisdocument. Requirements 6

Chapter5 Installation ThissectionwillguideyouthroughtheinstallationofthenativeMicrosoftOutlookcompatibility layersogooffers. RedHatEnterpriseLinuxv6x86_64 IfyouareusingRedHatEnterpriseLinuxversion6x86_64,packagesforSamba4,OpenChange andsogoandthesogoopenchangebackendareavailablefromsogo swebsite.pleasefollow theinstructionsfromhttp://www.sogo.nu/english/downloads/backend.html. In order to satisfy certain dependencies, you should also add the EPEL source corresponding to your distribution and architecture. More information on this is available here: http://fedoraproject.org/wiki/epel or more specifically, http://fedoraproject.org/wiki/epel/ FAQ#How_can_I_install_the_packages_from_the_EPEL_software_repository.3F. Onceready,installtheOpenChangepackagesontopofanexistingSOGoinstallation: yum clean all && yum makecache yum install samba \ openchange \ sogo-openchange-backend \ openchange-ocsmanager \ openchange-rpcproxy \ mysql-server \ MySQL-python Oncethepackagesareinstalled,refertotheConfigurationchapterfromthisguide. Note Samba4/OpenChangearenotavailablefornowonCentOS5i386/x86_64,and CentOS7.OnDebian-basedsystems,packagesareavailableonlyonthex86_64 platform. Installation 7

Chapter5 Debian7(Wheezy)andUbuntu12.04(PrecisePangolin) SOGo,OpenChangeandtheSOGoOpenChangebackendarenowavailablefromSOGo swebsite. Pleasefollowtheinstructionsfromhttp://www.sogo.nu/english/downloads/backend.htmltosetup youraptsources. OnDebian7,forsomeSamba4dependencies,youneedtousethewheezy-backportsrepository. Todoso,create/etc/apt/sources.list.d/backports.listwiththefollowingcontent: deb http://http.debian.net/debian wheezy-backports main TheninstallSamba4ontopofanexistingSOGoinstallation: apt-get update apt-get install samba samba-dev Oncecompleted,installthepackagesrelatedtoOpenChangeandtheSOGoprovider: apt-get install openchangeserver \ sogo-openchange \ openchangeproxy \ python-ocsmanager \ mysql-server \ python-mysqldb \ openchange-ocsmanager \ openchange-rpcproxy \ python-sievelib \ python-spyne \ python-rpclib Oncethepackagesareinstalled,refertotheConfigurationchapterfromthisguide. Note On Ubuntu 12.04, the Samba init scripts need to be modified to disable the upstartcheck.formoredetails,referto:https://wiki.samba.org/index.php/samba4/initscript Installation 8

Chapter5 Debian8(Jessie)andUbuntu14.04(Trusty Tahr) Pleasefollowtheinstructionsfromhttp://www.sogo.nu/english/downloads/backend.htmltosetup youraptsources. TheninstallSamba4ontopofanexistingSOGoinstallation: apt-get update apt-get install samba samba-dev Oncecompleted,installthepackagesrelatedtoOpenChangeandtheSOGoprovider: apt-get install openchangeserver \ sogo-openchange \ openchangeproxy \ python-ocsmanager \ mysql-server \ python-mysqldb \ openchange-ocsmanager \ openchange-rpcproxy \ python-sievelib \ python-spyne \ python-rpclib Oncethepackagesareinstalled,refertotheConfigurationchapterfromthisguide. Note Theocsmanager.confandrpcproxy.confarecurrentlylocatedin/etc/apache2/ conf.d.theseshouldbemovedto/etc/apache2/conf-available.thisisapackagingerrorthatwillsoonbefixed. Note Youmighthavetoadjusttherpcproxy.confconfigurationfiletoaddtheRequire all granted permission if you get Apache errors such as client denied by server configuration. Installation 9

Chapter6 Configuration Inthissection,you lllearnhowtoconfigurethenativemicrosoftoutlookcompatibilitylayerthat SOGooffers. SOGoConfiguration FirstthingtodoistoconfigureSOGotouseyourcurrentservices,whichareyourIMAP,SMTPand SQLdatabaseservers.TheconfigurationinstructionsforthisareavailableintheSOGoInstallation andconfigurationguideavailablefromhttp://www.sogo.nu/. Pleaserefertothatdocumentationbeforecontinuingwiththeinstructionsincludedinthisguide. Samba4Configuration Runthefollowingcommandsasroot: samba-tool domain provision --realm=example.com \ --domain=openchange \ --adminpass='%1openchange' \ --server-role='domain controller' samba-tool user setexpiry administrator --noexpiry Youmightconsiderchangingtherealmanddomainused,tosuityourenviroment. Youmightalsohavetoremove/etc/samba/smb.confpriorrunningthiscommand. Addthefollowingparameterstothe[global]sectionofthe/etc/samba/smb.confconfiguration file: Configuration required by OpenChange server dsdb:schema update allowed = true dcerpc endpoint servers = epmapper, mapiproxy, dnsserver dcerpc_mapiproxy:server = true dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr Configuration required by OpenChange server Configuration 10

Chapter6 YourSamba4configurationfileshouldlooklikethis: Global parameters [global] server role = active directory domain controller workgroup = EXAMPLE realm = example.com netbios name = sogo passdb backend = samba4 Configuration required by OpenChange server dsdb:schema update allowed = true dcerpc endpoint servers = +epmapper, +mapiproxy dcerpc_mapiproxy:server = true dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr Configuration required by OpenChange server [netlogon] path = /var/lib/samba/sysvol/example.com/scripts read only = No [sysvol] path = /var/lib/samba/sysvol read only = No OpenChangeConfiguration OpenChange2.2storesitsmetadatainMySQLsoyouneedtohaveitinstalled. First,createtheOpenChangeMySQLuser: $ mysql -u root -p mysql> CREATE USER 'openchange-user'@'localhost' IDENTIFIED BY 'openchange$123'; mysql> GRANT ALL PRIVILEGES ON `openchange`.* TO 'openchange-user'@'localhost' WITH GRANT OPTION; mysql> FLUSH PRIVILEGES; TheSambaADschemaneedstobefilledwithadditionalobjectdefinitionsbyrunningthefollowing commands: Configuration 11

Chapter6 openchange_provision --standalone NOTE: This operation can take several minutes [+] Step 1: Register Exchange OIDs [+] Step 2: Add Exchange attributes to Samba schema [+] Step 3: Add Exchange auxiliary classes to Samba schema [+] Step 4: Add Exchange objectcategory to Samba schema [+] Step 5: Add Exchange containers to Samba schema [+] Step 6: Add Exchange *sub* containers to Samba schema [+] Step 7: Add Exchange CfgProtocol subcontainers to Samba schema [+] Step 8: Add Exchange mailgateway subcontainers to Samba schema [+] Step 9: Add Exchange classes to Samba schema [+] Step 10: Add posssuperior attributes to Exchange classes [+] Step 11: Extend existing Samba classes and attributes [+] Step 12: Generic Exchange configuration objects [+] Step 13: Finalize generic Exchange configuration objects [SUCCESS] Done! [+] Step 1: Exchange Samba registration [SUCCESS] Done! [+] Step 1: Register Exchange Samba as the main server [SUCCESS] Done! CreatetheOpenChangedatabase: Setting up openchange db [+] Public Folders =================== * Public Folder Root : 0x0100000000000001 (72057594037927937) * IPM_SUBTREE : 0x0200000000000001 (144115188075855873) * NON_IPM_SUBTREE : 0x0300000000000001 (216172782113783809) * EFORMS REGISTRY : 0x0400000000000001 (288230376151711745) * OFFLINE ADDRESS BOOK : 0x0500000000000001 (360287970189639681) * /o=first Organization/cn=addrlists/cn=oabs/cn=Default Offline Address Book: 0x0600000000000001 (432345564227567617) * SCHEDULE+ FREE BUSY : 0x0700000000000001 (504403158265495553) * EX:/o=first organization/ou=first administrative group: 0x0800000000000001 (576460752303423489) * Events Root : 0x0900000000000001 (648518346341351425) openchange_provision --openchangedb --openchangedb-uri 'mysql://openchangeuser:openchange$123@localhost/openchange' Finally,modify/etc/samba/smb.conftospecifyOpenChangeconnectioninformationforitsindexingdatabase.Addthefollowingattheendofthe[global]section: Configuration 12

Chapter6 mapistore:namedproperties = mysql namedproperties:mysql_user = openchange-user namedproperties:mysql_pass = openchange$123 namedproperties:mysql_host = localhost namedproperties:mysql_db = openchange mapistore:indexing_backend = mysql://openchange-user:openchange$123@localhost/ openchange mapiproxy:openchangedb = mysql://openchange-user:openchange$123@localhost/ openchange OnRHEL,makesureSELinuxisdisabled: setenforce 0 Next,youcanstartSambausingtheusualcommand: /etc/init.d/samba start Onupstart-baseddistributions,use: start samba-ad-dc YoucanalsolaunchtheOpenChangewebservices: /etc/init.d/openchange-ocsmanager start ApacheConfigurationforWebServices TheOpenChangewebservicesconsistoftwocomponents: 1. OCS Manager which is used for autodiscovery and freebusy lookups on Outlook 2007 and 2010.Thisservicerunsinitsownapplicationserverwhichlistenson127.0.0.1:5000bydefault.Apacheneedstobeconfiguredtoforwardcertainrequeststoittomakeitaccessiblefrom theoutside.notethatthisservicemustbeaccessibleover*https*,otherwiseoutlookwon t useit. 2. RPCProxywhichisusedforRPCoverHTTP("OutlookAnywhere").ThisservicerunsasaWSGI applicationunderapache(mod_wsgi).whilehttpsisnotrequiredtoaccessthisservice,itis stronglyrecommended. OnRHEL-baseddistributions,theapacheconfigurationrequiredbytheseservicescanbefoundin /etc/httpd/conf.d/ocsmanager.confand/etc/httpd/conf.d/rpcproxy.conf. For Debian-based distributions, these files can be found in/etc/apache2/conf.d/ or/etc/ apache2/conf-available. Configuration 13

Chapter6 TheconfigurationrequiresthreeApachemodules:mod_proxy,mod_proxy_httpandmod_wsgi.These areusuallyalreadyinstalledbutmightneedtobeactivatedondebian-basedinstallations: a2enmod proxy proxy_http wsgi TheOCSManagerandRPCProxyconfigurationmodulecanbeenabledusing: a2enconf ocsmanager a2enconf rpcproxy OnRHEL-baseddistributions,makesuretheLoadModuledirectiveisuncommentedin/etc/httpd/ conf.d/wsgi.conf. Thereqtimeoutapachemoduleisknowntocauseproblemswhenusingthedefaultconfiguration shippedwithdebian-basedsystems.onsuchdistributions,apachewillclose(http/1.1500)any HTTPrequestforwhichtheHTTPbodyhasn tarrivedin10seconds. Toavoidthisproblem,useamuchhighertimeoutordisablethemodule: a2dismod reqtimeout YoushouldnowrestarttheApacheserviceandmakesureitwillstartonboot.OnRHEL-based distributions,do: chkconfig httpd on && /etc/init.d/httpd restart OnDebian-baseddistributions,do: update-rc.d apache2 defaults && /etc/init.d/apache2 restart WhilethisisarguablygoodpracticewithregularHTTP,itwilldisrupttheRPCoverHTTPprotocol implementedbyrpcproxy:outlookwillcontinuouslydisconnectandreconnectleadingtosuboptimalperformance. Finally,youmustadjusttheOCSManagerconfigurationfile,whichislocatedin/etc/ocsmanager/ocsmanager.ini.YoushouldenableLDAP-basedauthenticationinthemainsectionandconfigureitaccordingly.Youshouldalsoenablerpcproxy.Youfileshouldbesimilartothisone: Configuration 14

Chapter6 [DEFAULT] debug = true email_to = you@yourdomain.com smtp_server = localhost error_email_from = paste@localhost [main] auth = ldap mapistore_root = /var/lib/samba/private mapistore_data = /var/lib/samba/private/mapistore debug = yes [auth:file] [auth:ldap] host = ldap://127.0.0.1 port = 389 bind_dn = cn=administrator,cn=users,dc=example,dc=com bind_pw = %1OpenChange basedn = cn=users,dc=example,dc=com [auth:single] username = openchange password = {SSHA}I6Hy5Wv0wuxyXvMBFWFQDVVN12_CLaX9 [server:main] use = egg:paste http host = 127.0.0.1 port = 5000 protocol_version = HTTP/1.1 [app:main] use = egg:ocsmanager full_stack = true static_files = true cache_dir = %(here)s/data beaker.session.key = ocsmanager beaker.session.secret = SDyKK3dKyDgW0mlpqttTMGU1f app_instance_uuid = {ee533ebc-f266-49d1-ae10-d017ee6aa98c} NTLMAUTHHANDLER_WORKDIR = /var/cache/ntlmauthhandler SAMBA_HOST = 127.0.0.1 [rpcproxy:ldap] host = localhost port = 389 basedn = CN=Users,DC=example,DC=com set debug = true Configuration 15

Chapter6 [autodiscover] [autodiscover:rpcproxy] enabled = true [outofoffice] [outofoffice:file] sieve_script_path = /var/vmail/$domain/$user/sieve-script sieve_script_path_mkdir = false [outofoffice:managesieve] secret = secret [loggers] keys = root [handlers] keys = console [formatters] keys = generic [logger_root] level = INFO handlers = console [handler_console] class = StreamHandler args = (sys.stderr,) level = NOTSET formatter = generic [formatter_generic] format = %(asctime)s %(levelname)-5.5s [%(name)s] [%(threadname)s] %(message)s Oncecompleted,starttheOCSManagerservice: /etc/init.d/openchange-ocsmanager start NameServiceConfigurationforWebServices Theautodiscoveryservicemustbemadeaccessibleinordertoadvertisethewebservicesprovided byopenchange.thiscanbedoneintwoways. 1. ThefirstistoassociatetheFQDNautodiscover.example.com.withthemachinethathosts Samba4/OpenChange,byaddingaCNAMEentryinyourDNSconfiguration.Notethat,instead Configuration 16

Chapter6 orchangingyourdnsserverconfiguration,youcansimplyaddasimilarentrytothehostsfile ofthewindowsmachinefromwhereyou llrunoutlook,whichishandyfortestingpurposes. 2. ThesecondoptionistoaddaSRVentrytoyourDNSconfigurationwherethe_servicevalue wouldbeautodiscoverandthe_protocolwouldbe_tcp. Forexample: _autodiscover._tcp.example.com. IN SRV 0 0 443 sogo.example.com. Again,theautodiscoveryservicemustbeaccessibleoverHTTPS. Configuration 17

Chapter7 AddingUsers UsersthatwishtoconnectnativelytoSOGomustbeprovisionedinSamba4andinOpenChange eveniftheyalreadyexistinyourcurrentldapormicrosoftactivedirectoryserver. Toaddauser,executethefollowingcommands: add user to samba samba-tool domain passwordsettings set --complexity=off samba-tool domain passwordsettings set --min-pwd-length=1 samba-tool user add <username> samba-tool user setexpiry <username> --noexpiry create user in openchange openchange_newuser --create <username> Ifyoudon thaveatrustbetweenyourimapserverandsogo,youmustatthispointsetthecleartextpasswordofthenewlycreateduserin/var/lib/samba/private/mapistore/<username/password. Thisper-userfilecontainsthecleartextpasswordoftheuserasaUTF-8string,onasingleline.This passwordwillbeusedtoauthenticatesogo/openchangestorageprovidertoyourimapserver. AddingUsers 18

Chapter8 MicrosoftOutlookConfiguration To connect Microsoft Outlook, you can either use the IP address of the server or its DNS name. If you prefer using the DNS name, add an entry like the following to the c:\windows\system32\drivers\etc\hostsfileinordertoassociatetheipaddresswiththerightdns names: 192.168.1.1 sogo.example.com autodiscover.example.com Next,youmustconfigureMicrosoftOutlook. OpentheControlPanel Mail EmailAccounts. SelectAddanewe-mailaccount ChooseMicrosoftExchangeServer Filltherequiredinformation.EntertheDNSnameortheIPaddressofyourSOGoserverinthe MicrosoftExchangeServerfield LeavetheUseCachedExchangeModecheckboxenabled EnteryourusernameintheUserNamefield ClickonMoreSettingsandignorethewarning,ifany,aboutExchangebeingofflinebyclicking oncancel FromtheSecuritytab,enableAlwayspromptforusernameandpassword FromtheConnectiontab,enable"OutlookAnywhere"ifyouplantouseOutlookoutsideofyour LAN.Moreover,clickontheExchangeProxySettings buttontoenableitforslowandfastnetworks.specifyalsothehost,whichshouldbethesamevalueyouspecifiedinthemicrosoftexchangeserverfield. Finally,clickonCheckNameandconfirmyourusernameandpassword StartMicrosoftOutlookandenteryourusernameandpassword.Itwillstarttosynchronizeyour mailbox.thiscouldtakealongtimeifyouhavemanyemails,events,tasksandcontacts.oncethis stepiscompleted,checktheautodiscoveryservicewithoutlook2007or2010bysimultaneously holdingthectrlkeyonyourkeyboardandright-clickingontheoutlookiconinthenotification toolbar.aspecialentrynamed"teste-mailautoconfiguration "willappearandwillenableyou tochecktheservice. MicrosoftOutlookConfiguration 19

Chapter9 KnownIssuesorLimitations MakesureyouperiodicallybackupallyourdataregardingSOGo. MakesureyouhavenofirewallsactivatedbetweenyourMicrosoftOutlookclientsandtheSOGo serverwithnativeoutlookcompatibilitymodule.ifyoudo,use"outlookanywhere"toconnect OutlooktoSOGo/OpenChange. CurrentLimitations ThecurrentversionoftheNativeMicrosoftOutlookcompatibilitylayerhassomelimitations. Thoselimitationswillbeovercomeintheupcomingreleases.Ifyouareinterestedinhavingthose limitationsfixedmorerapidly,pleasecontactinversebysendinganemailtosupport@inverse.ca. General If you can t see any email s content with Microsoft Outlook 2007, install the latest Service Pack available from Microsoft s website for this specific version. Microsoft Outlook 2007 (12.0.6423.100)SP2MSO(12.0.6425.1000)isknowntowork. WhenyoucreateanewMicrosoftOutlookprofile,notallfoldersmightbesynchronizedduring thefirststart.simplyselecttheappropriatefolderandclick"sendandreceive".synchronizinga foldermaytakesometime.forexample,afolderwith1000emailmessagesmighttakearound 5minutesbasedontheunderlyinghardware. Errorswhensynchronizingthe"OfflineAddressBook"arenormalandcanbeignoredfornow. Thisfeatureiscurrentlynotsupported. IfyoufacestrangeissuesfromMicrosoftOutlook,youmightwanttoremoveanydataassociated withtheuserfromthesogoserverandrecreateamicrosoftoutlookprofile.toremoveany dataassociatedtoauser,usetheopenchange_user_cleanupscriptdistributedwithsogo.the scriptcanbefoundin/usr/share/doc/sogo/(/usr/share/sogo-version/onrhel).toreseta user,runthescriptasroot:python openchange_user_cleanup username.seetheusageoutput foradditionaloptions. The"OutofOfficeAssistant"willnotcurrentlywork.Thisfeaturehasnotbeenimplemented. CreatingfoldersbelowINBOX(whennotnormallypermittedbytheIMAPserver),belowthePersonalCalendarorPersonalAddressBookwillworkinOutlookcachedmodebuttheserver-side operationwillfailandthesefolderswillneverbecreated.potentiallydatalosscanoccurifthe Outlookprofileisdestroyed.Ifyouwantocreateadditionaltop-levelmailfolders,calendarsor KnownIssuesorLimitations 20

Chapter9 addressbooks,openoutlook sfolderlist,selectthetoplevelnode(usually,"email@example.com") andchoose"newfolder "fromthecontextualmenu.choosetherelevantitemtypes. Mail Sharingmailfoldersisnotsupported. ToavoidpossiblylossyconversionfromRTFtoHTML,Outlookshouldbeconfiguredtosendall mailsashtml(orplaintext)insteadofoutlookrichtextformat. Calendar Labelswillnotwork. Itmightbeimpossibletovieweventdetailsfromasharedcalendar.Thisissueisbeingworkedon. Tasks Taskswithstart/duedatescreatedfromOutlookmightnotappearcorrectlyinSOGoduetoa timezoneissue. Remindersarenotyetsupported. Assigningtaskswillnotwork. Contacts Categorieswillnotwork. Distributionlistswillnotwork. UnderMicrosoftOutlook2010,thespecialfolder"SuggestedContacts"willnotwork. The"OfflineAddressBook"willnotwork.Thisfeatureisnotyetsupported. Notes NotesarenotsynchronizedinanywayswithSOGo.ThecurrentversionofSOGolackssupport fornotes. Ifyounoticeanythingelse,pleasesendcontactInversebysendinganemailtosupport@inverse.ca. KnownIssuesorLimitations 21

Chapter10 AdditionalInformation Formoreinformation,pleaseconsulttheonlineFAQs(FrequentlyAskedQuestions): http://www.sogo.nu/english/support/faq.html Youcanalsoreadthemailingarchivesorpostyourquestionstoit.Fordetails,see: https://lists.inverse.ca/sogo AdditionalInformation 22

Chapter11 CommercialSupportandContact Information Foranyquestionsorcomments,donothesitatetocontactusbywritinganemailto: support@inverse.ca Inverse(http://inverse.ca)offersprofessionalservicesaroundSOGotohelporganizationsdeploy thesolutionandmigratefromtheirlegacysystems. CommercialSupport andcontactinformation 23