From discuss@opengroupware.org Fri Jun 16 03:32:00 2006 From: discuss@opengroupware.org (discuss@opengroupware.org) Date: Thu, 15 Jun 2006 22:32:00 -0400 Subject: [OGo-Discuss] SOHO OGo and accounts Message-ID: <20060616023320.A98893CEF5F@mail.opengroupware.org> Hi Folks! I was wondering what people with more sysadmin experience than myself think of this: For an OGo small business server (5-20 people), would it make sense to have the OGo database and it's accounts be the source for identity management (instead of LDAP)? Could it work for stuff like SAMBA, amavisd-new, IMAP, etc.? I currently use PAM to authenticate IMAP against the OGo db... Would it work with SAMBA? The basic idea is that all services get managed through the OGo web ui, making it like an appliance. I don't know if this is how the InstantOGo server works... I figure I'll learn more along the way getting it going on my Debian box... Assuming there isn't something fundamentally wrong with the idea... Thanks in advance for your time and comments! /Mike __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From discuss@opengroupware.org Fri Jun 16 04:13:47 2006 From: discuss@opengroupware.org (Adam Tauno Williams) Date: Thu, 15 Jun 2006 23:13:47 -0400 Subject: [OGo-Discuss] SOHO OGo and accounts In-Reply-To: <20060616023320.A98893CEF5F@mail.opengroupware.org> References: <20060616023320.A98893CEF5F@mail.opengroupware.org> Message-ID: <1150427627.4843.4.camel@aleph.whitemice.org> > I was wondering what people with more sysadmin experience than > myself think of this: > For an OGo small business server (5-20 people), would it make sense > to have the OGo database and it's accounts be the source for identity > management (instead of LDAP)? Could it work for stuff like SAMBA, > amavisd-new, IMAP, etc.? I currently use PAM to authenticate IMAP against > the OGo db... Would it work with SAMBA? You might be able to get it to work with SAMBA, but it would be so tremendously hackish that LDAP might actually be easier.... and that is saying something! :) There was a PostgreSQL passdb for Samba 3.x somewhere, but your going to have to deal with schema differences and somehow manage the password crypt transforms to/from NT-MD5/LANMAN... ugh. > The basic idea is that all services get managed through the OGo web ui, > making it like an appliance. I don't know if this is how the InstantOGo > server works... I figure I'll learn more along the way getting it going on Does InstantOGo provide Samba? I thought is was just OGo/SMTP/IMAP. > my Debian box... Assuming there isn't something fundamentally wrong with the > idea... > Thanks in advance for your time and comments! It is an interesting idea, and probably possible, but not trivial. You'd probably have to code bits of it. From discuss@opengroupware.org Fri Jun 16 10:36:26 2006 From: discuss@opengroupware.org (Helge Hess) Date: Fri, 16 Jun 2006 11:36:26 +0200 Subject: [OGo-Discuss] SOHO OGo and accounts In-Reply-To: <1150427627.4843.4.camel@aleph.whitemice.org> References: <20060616023320.A98893CEF5F@mail.opengroupware.org> <1150427627.4843.4.camel@aleph.whitemice.org> Message-ID: On Jun 16, 2006, at 05:13, Adam Tauno Williams wrote: >> The basic idea is that all services get managed through the OGo >> web ui, >> making it like an appliance. I don't know if this is how the >> InstantOGo >> server works... Yes, this is how InstantOGo works (for authentication, it also does additional configuration). >> I figure I'll learn more along the way getting it going on > Does InstantOGo provide Samba? I thought is was just OGo/SMTP/IMAP. Various services are added to InstantOGo step-by-step. I'm not sure whether the released version already includes Samba, but eg it includes Jabber. Greets, Helge From discuss@opengroupware.org Fri Jun 16 22:45:00 2006 From: discuss@opengroupware.org (discuss@opengroupware.org) Date: Fri, 16 Jun 2006 17:45:00 -0400 Subject: [OGo-Discuss] SOHO OGo and accounts Message-ID: <20060616214627.C70733CEF74@mail.opengroupware.org> Hi Helge! -----Original Message----- From: Helge Hess "Yes, this is how InstantOGo works (for authentication, it also does additional configuration)." I know that InstantOGo is a Skyrix product, but do you mind if I ask some general questions about it? I figure if you guys took a particular approach, you had darn good reasons for doing it! "Various services are added to InstantOGo step-by-step. I'm not sure whether the released version already includes Samba, but eg it includes Jabber." A very sensible approach. Which jabber server did you guys use for InstantOGo? And did you use something like JWChat as a client in the webui, or did you roll your own? I'm also curious if all the admin stuff are OGo apps, or if you're wrapping something else. Personally, I'm toying with the idea of wrapping Webmin in an iFrame for the near-term. Thanks for your time! /Mike __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From discuss@opengroupware.org Fri Jun 16 22:46:00 2006 From: discuss@opengroupware.org (discuss@opengroupware.org) Date: Fri, 16 Jun 2006 17:46:00 -0400 Subject: [OGo-Discuss] SOHO OGo and accounts Message-ID: <20060616214630.75EC43CEF82@mail.opengroupware.org> Hi Adam! -----Original Message----- From: Adam Tauno Williams "You might be able to get it to work with SAMBA, but it would be so tremendously hackish that LDAP might actually be easier.... and that is saying something! :) There was a PostgreSQL passdb for Samba 3.x somewhere, but your going to have to deal with schema differences and somehow manage the password crypt transforms to/from NT-MD5/LANMAN... ugh." Now yer scaring me! ;-) Ok, I think I'll seperate virtual accounts (OGo, IMAP, SMTP, amavisd, and maybe Jabber) from real system access accounts for now. More hackish than LDAP is beyond me for now. The existing Unix/Samba password sync works for me for now... Maybe I'll tackle that or LDAP later, as my skills improve. "Does InstantOGo provide Samba? I thought is was just OGo/SMTP/IMAP." I don't think it does now, but it is evolving! Knowing those Skyrix guys, it'll be doing all that and making coffee too before Vista ships! "It is an interesting idea, and probably possible, but not trivial. You'd probably have to code bits of it." I'll start simple then. I'm thinking I'll start with hooking amavisd-new into OGo for whitelisting contacts. Blacklisting, logging and quarantine I'll probably put into a seperate db, R/W by ogo and amavis users. I'm thinking the amavis user should have read only access to the contacts table in the OGo db, for security. Am I missing anything so far? Thanks for the time and good advice! /Mike __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From discuss@opengroupware.org Fri Jun 16 23:22:44 2006 From: discuss@opengroupware.org (Helge Hess) Date: Sat, 17 Jun 2006 00:22:44 +0200 Subject: [OGo-Discuss] SOHO OGo and accounts In-Reply-To: <20060616214627.C70733CEF74@mail.opengroupware.org> References: <20060616214627.C70733CEF74@mail.opengroupware.org> Message-ID: <0BBAB97C-3C79-41B7-9FA0-4DEF47199B0E@opengroupware.org> On Jun 16, 2006, at 23:45, wrote: > I know that InstantOGo is a Skyrix product, but do you mind if I > ask some general questions about it? Honestly, I don't know a lot about that specific product. Not my task ;-) > A very sensible approach. Which jabber server did you guys use for > InstantOGo? Don't know. > And did you use something like JWChat as a client in the webui, or > did you roll your own? AFAIK it provides the Jabber server which integrates with the user management of OGo, it doesn't provide a web based chat client. (you could use JWChat or whatever you like). > I'm also curious if all the admin stuff are OGo apps, or if you're > wrapping something else. The admin stuff is currently an OGo application. > Personally, I'm toying with the idea of wrapping Webmin in an > iFrame for the near-term. Webmin was considered too insecure/unreliable. Greets, Helge From discuss@opengroupware.org Thu Jun 29 13:30:42 2006 From: discuss@opengroupware.org (Chris Herrnberger) Date: Thu, 29 Jun 2006 08:30:42 -0400 Subject: [OGo-Discuss] SOHO OGo and accounts In-Reply-To: <0BBAB97C-3C79-41B7-9FA0-4DEF47199B0E@opengroupware.org> References: <20060616214627.C70733CEF74@mail.opengroupware.org> <0BBAB97C-3C79-41B7-9FA0-4DEF47199B0E@opengroupware.org> Message-ID: <200606290830.42215.chris123@magma.ca> On Friday 16 June 2006 18:22, Helge Hess wrote: > AFAIK it provides the Jabber server which integrates with the user > management of OGo, it doesn't provide a web based chat client. (you > could use JWChat or whatever you like). Just reviewed the instantogo.com page. Nice piece of work and reasonably priced for SOHO at 80Euros. The minute this baby gets asterix's integration .....she's mine..:) Surprised to read that fax integration is in place already. This is cool. There is no mention however of jabber services and perhaps thats simply an oversite. Ooops its available in the enterprise version only (http://www.instantogo.com/products/editions/index.html) regards /ch