action #33736
closedRenewing the Kopano configuration files
Description
This should be done in two steps.
First step is to put our individual settings of the existing files to the new example files of Kopano 8.5.x
This step includes Ticket #27094.
Second step is to switch to the new kopano LDAP schema and then create a new ldap.cfg. With kopano 8.5.x the ldap.cfg is splitted in two parts. Part one is in /etc/kopano. Inside this file the second part (/usr/share/kopano/ldap.active-directory.cfg) is included.
...and we have to think about how to migrate from the old zarafa-schema to the new kopano-schema.
Updated by flacco about 6 years ago
- % Done changed from 0 to 10
We never talked about "enable_sso" in file "server.cfg". The default value is "no". We should have to test it with "yes".
Updated by flacco about 6 years ago
- % Done changed from 10 to 20
Step one is done and has to be tested.
Updated by flacco about 6 years ago
- % Done changed from 20 to 30
Kopano runs with the new configuration on my own productive invis-server. Looks good.
Updated by ingogoeppert about 6 years ago
Only the ldap config ist splitted? The rest of the config files exists only in /etc? We leave many options on the default values (port number, socket location...) and each time there are changes in the default values or new options are provided, we have to update our config files... My idea is to create config files (or a patch against the config files) only with our changes. Do you think this is possible?
Updated by flacco about 6 years ago
This is a bit strange. The Kopano daemons didn't have config-files under /etc/kopano anymore. They work with coded default values. (https://documentation.kopano.io/kopano_changelog/kc.html#kopano-core-8-5) Config-files are only necessary if we need individual settings, like using own certificates or an AD as user-backend. Therefor it should be possible to work with small config-files wich contains only our settings.
But... my first test yesterday shows that kopano-monitor refused to start without a config file. I don't now yet if this was an individual problem of my installation or a bug.
Updated by flacco almost 6 years ago
- % Done changed from 30 to 60
Precense daemon has the same problem as the monitor daemon. It refused to start without a config file. I added the config file and changed the session secret from "GEHEIM" to a 32 letter random secret.
Updated by flacco almost 6 years ago
- % Done changed from 60 to 90
We just have to test it a little bit more.
Updated by flacco almost 6 years ago
- % Done changed from 90 to 80
Kopano does not Support SSLv2 any longer, we have to remove it from the config files.
Updated by flacco almost 6 years ago
Parallel to remove SSLv2 from the Kopano configs I want to block at least TLSv1. Problem is that older Microsoft Products like Windows or Outlook doesn't support TLSv1.1 & 1.2 out of the box. With installing updates it should be possible to enable TLSv1.1 and 1.2 from W7 upwards:
Updated by flacco almost 6 years ago
There are some strange things around the kopano-packages inside openSUSE leap 15:
- Leap 15 contains Kopano version 8.6.0, which was never released
- Packet kopanpo-presence is missing
- kopano-search refuses to start with error: NameError: name 'pidlockfile' is not defined
Updated by flacco over 5 years ago
- Status changed from In Progress to Closed
- % Done changed from 80 to 100
Everything works with Kopano 8.6.7 from the Kopano limited repositories.
-> We could open a new ticket for the upcoming Kopano 8.7.x