Recent posts

Pages 1 2 3 4 5 ... 10

#21

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by SKaero - February 06, 2025, 09:19:19 AM

Well at least we're past the config problems, now it looks like a Keycloak config issue. To see what Roundcube is sending for the redirect uri in the <RC root>/program/include/rcmail_oauth.php file in the "get_redirect_uri" function right before the return line add:

Code Select

rcube::raise_error(slashify($url) . 'index.php/login/oauth', true);

That will print the redirect_uri to the error log so we can verify what is being requested.

#22

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by TomcatMJ - February 06, 2025, 06:54:18 AM

I think theres somewhere another faulty value hidden...but actually im stuck in finding the fitting hint where to look:

Code Select


 (GET /index.php/login/oauth?state=eQyeb25cBWMN&session_state=442c9c83-15bc-49d1-9666-f1de5bf20f7d&iss=https%3A%2F%2Fsso.node1.mykeycloakdomain.tld%3A8443%2Frealms%2FMySSORealm&code=d60ce6b0-ec5c-43a9-bb8c-2fd0f6b6fc1b.442c9c83-15bc-49d1-9666-f1de5bf20f7d.cdd15124-a187-42b4-99f4-3e68801fe39a)
[06-Feb-2025 12:07:35 +0100]: <eu1aj793> PHP Error: /var/lib/roundcube/plugins/password/config.inc.php - true (GET /index.php/login/oauth?state=eQyeb25cBWMN&session_state=442c9c83-15bc-49d1-9666-f1de5bf20f7d&iss=https%3A%2F%2Fsso.node1.mykeycloakdomain.tld%3A8443%2Frealms%2FMySSORealm&code=d60ce6b0-ec5c-43a9-bb8c-2fd0f6b6fc1b.442c9c83-15bc-49d1-9666-f1de5bf20f7d.cdd15124-a187-42b4-99f4-3e68801fe39a)
[06-Feb-2025 12:07:35 +0100]: <eu1aj793> PHP Error: /var/lib/roundcube/plugins/jqueryui/config.inc.php - true (GET /index.php/login/oauth?state=eQyeb25cBWMN&session_state=442c9c83-15bc-49d1-9666-f1de5bf20f7d&iss=https%3A%2F%2Fsso.node1.mykeycloakdomain.tld%3A8443%2Frealms%2FMySSORealm&code=d60ce6b0-ec5c-43a9-bb8c-2fd0f6b6fc1b.442c9c83-15bc-49d1-9666-f1de5bf20f7d.cdd15124-a187-42b4-99f4-3e68801fe39a)
[06-Feb-2025 12:07:36 +0100]: <eu1aj793> PHP Error: OAuth token request failed: Client error: `POST https://sso.node1.mykeycloakdomain.tld:8443/realms/MySSORealm/protocol/openid-connect/token` resulted in a `400 Bad Request` response:
{"error":"invalid_grant","error_description":"Incorrect redirect_uri"}
; cznode3 GuzzleHttp/7 - [06/Feb/2025:12:07:36 +0100] "POST /realms/MySSORealm/protocol/openid-connect/token HTTP/1.1" 400 70 in /var/lib/roundcube/program/include/rcmail_oauth.php on line 322 (GET /index.php/login/oauth?state=eQyeb25cBWMN&session_state=442c9c83-15bc-49d1-9666-f1de5bf20f7d&iss=https%3A%2F%2Fsso.node1.mykeycloakdomain.tld%3A8443%2Frealms%2FMySSORealm&code=d60ce6b0-ec5c-43a9-bb8c-2fd0f6b6fc1b.442c9c83-15bc-49d1-9666-f1de5bf20f7d.cdd15124-a187-42b4-99f4-3e68801fe39a)
[06-Feb-2025 12:07:36 +0100]: PHP Error: defaults.inc.php - true (GET /index.php/login/skins/mylarrybasedskin/styles.min.css?s=1737731252)
[06-Feb-2025 12:07:36 +0100]: PHP Error: config.inc.php - true (GET /index.php/login/skins/mylarrybasedskin/styles.min.css?s=1737731252)
[06-Feb-2025 12:07:36 +0100]: PHP Error: myfirstmaildomain_tld_node1_conf.inc.php - true (GET /index.php/login/skins/mylarrybasedskin/styles.min.css?s=1737731252)
[06-Feb-2025 12:07:36 +0100]: <eu1aj793> PHP Error: Array
(
    [provider] => generic
    [auth_uri] => https://sso.node1.mykeycloakdomain.tld:8443/realms/MySSORealm/protocol/openid-connect/auth
    [token_uri] => https://sso.node1.mykeycloakdomain.tld:8443/realms/MySSORealm/protocol/openid-connect/token
    [client_id] => MyKeycloak-MailclientID
    [client_secret] => eotZzGsxSiddaaE1QIRM18BHE3b0VQaJ
    [identity_uri] => https://sso.node1.mykeycloakdomain.tld:8443/realms/MySSORealm/protocol/openid-connect/userinfo
    [identity_fields] => Array
        (
            [0] => openid
            [1] => username
        )

    [scope] => openid email profile roles
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (GET /index.php/login/skins/mylarrybasedskin/styles.min.css?s=1737731252)

The allowed redirect URIs configured inside my Keycloak Client are:

Code Select

https://mail.node1.myfirstmaildomain.tld/*
https://node1.myfirstmaildomain.tld/* 
https://myfirstmaildomain.tld/*

..and thats why im wondering a bit about

Code Select

[06-Feb-2025 12:07:36 +0100]: <eu1aj793> PHP Error: OAuth token request failed: Client error: `POST https://sso.node1.mykeycloakdomain.tld:8443/realms/MySSORealm/protocol/openid-connect/token` resulted in a `400 Bad Request` response:
{"error":"invalid_grant","error_description":"Incorrect redirect_uri"}
; cznode3 GuzzleHttp/7 -

#23

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by TomcatMJ - February 06, 2025, 06:53:38 AM

(part 3 of the errorlog)

Code Select

#24

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by TomcatMJ - February 06, 2025, 06:52:33 AM

(errorlog Part 2)

Code Select

(end part 2 due to character restriction)

#25

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by TomcatMJ - February 06, 2025, 06:49:46 AM

Ok,done and found a typo in the first maildomains host configfile, corrected it and moved the oauth related config to the host configfile again. Then testet first with the second maildomain wiithout oauth configpart and then the first maildomain with oauth configpart.
The resulting error.log:

Code Select


[06-Feb-2025 12:05:54 +0100]: PHP Error: defaults.inc.php - true (GET /)
[06-Feb-2025 12:05:54 +0100]: PHP Error: config.inc.php - true (GET /)
[06-Feb-2025 12:05:54 +0100]: PHP Error: mysecondmaildomain_tld_node1_conf.inc.php - true (GET /)
[06-Feb-2025 12:05:54 +0100]: <nqcrbnlo> PHP Error: Array
(
    [provider] =>
    [auth_uri] =>
    [token_uri] =>
    [client_id] =>
    [client_secret] =>
    [identity_uri] =>
    [identity_fields] => Array
        (
            [0] => email
        )

    [scope] =>
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (GET /)
[06-Feb-2025 12:05:54 +0100]: <nqcrbnlo> PHP Error: /var/lib/roundcube/plugins/password/config.inc.php - true (GET /)
[06-Feb-2025 12:05:54 +0100]: <nqcrbnlo> PHP Error: /var/lib/roundcube/plugins/jqueryui/config.inc.php - true (GET /)
[06-Feb-2025 12:06:30 +0100]: PHP Error: defaults.inc.php - true (POST /?_task=login&_action=login)
[06-Feb-2025 12:06:30 +0100]: PHP Error: config.inc.php - true (POST /?_task=login&_action=login)
[06-Feb-2025 12:06:30 +0100]: PHP Error: mysecondmaildomain_tld_node1_conf.inc.php - true (POST /?_task=login&_action=login)
[06-Feb-2025 12:06:30 +0100]: <nqcrbnlo> PHP Error: Array
(
    [provider] =>
    [auth_uri] =>
    [token_uri] =>
    [client_id] =>
    [client_secret] =>
    [identity_uri] =>
    [identity_fields] => Array
        (
            [0] => email
        )

    [scope] =>
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (POST /?_task=login&_action=login)
[06-Feb-2025 12:06:30 +0100]: <nqcrbnlo> PHP Error: /var/lib/roundcube/plugins/password/config.inc.php - true (POST /?_task=login&_action=login)
[06-Feb-2025 12:06:30 +0100]: <nqcrbnlo> PHP Error: /var/lib/roundcube/plugins/jqueryui/config.inc.php - true (POST /?_task=login&_action=login)
[06-Feb-2025 12:06:31 +0100]: PHP Error: defaults.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: PHP Error: config.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: PHP Error: mysecondmaildomain_tld_node1_conf.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: Array
(
    [provider] =>
    [auth_uri] =>
    [token_uri] =>
    [client_id] =>
    [client_secret] =>
    [identity_uri] =>
    [identity_fields] => Array
        (
            [0] => email
        )

    [scope] =>
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/password/config.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/managesieve/config.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/sieverules/config.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/zipdownload/config.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/jqueryui/config.inc.php - true (GET /?_task=mail&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:31 +0100]: PHP Error: defaults.inc.php - true (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: PHP Error: config.inc.php - true (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: PHP Error: mysecondmaildomain_tld_node1_conf.inc.php - true (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: Array
(
    [provider] =>
    [auth_uri] =>
    [token_uri] =>
    [client_id] =>
    [client_secret] =>
    [identity_uri] =>
    [identity_fields] => Array
        (
            [0] => email
        )

    [scope] =>
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/managesieve/config.inc.php - true (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: PHP Error: defaults.inc.php - true (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:31 +0100]: PHP Error: config.inc.php - true (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/sieverules/config.inc.php - true (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: PHP Error: mysecondmaildomain_tld_node1_conf.inc.php - true (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/zipdownload/config.inc.php - true (GET /?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX&_page=&_remote=1&_unlock=loading1738839992072&_=1738839991987)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: Array
(
    [provider] =>
    [auth_uri] =>
    [token_uri] =>
    [client_id] =>
    [client_secret] =>
    [identity_uri] =>
    [identity_fields] => Array
        (
            [0] => email
        )

    [scope] =>
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/managesieve/config.inc.php - true (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/sieverules/config.inc.php - true (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:31 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/zipdownload/config.inc.php - true (GET /?_task=mail&_action=getunread&_page=1&_remote=1&_unlock=0&_=1738839991988)
[06-Feb-2025 12:06:33 +0100]: PHP Error: defaults.inc.php - true (GET /?_task=logout&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:33 +0100]: PHP Error: config.inc.php - true (GET /?_task=logout&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:33 +0100]: PHP Error: mysecondmaildomain_tld_node1_conf.inc.php - true (GET /?_task=logout&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:33 +0100]: <v22nklag> PHP Error: Array
(
    [provider] =>
    [auth_uri] =>
    [token_uri] =>
    [client_id] =>
    [client_secret] =>
    [identity_uri] =>
    [identity_fields] => Array
        (
            [0] => email
        )

    [scope] =>
    [verify_peer] => 1
    [auth_parameters] => Array
        (
        )

    [login_redirect] =>
)
 (GET /?_task=logout&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:33 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/jqueryui/config.inc.php - true (GET /?_task=logout&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)
[06-Feb-2025 12:06:33 +0100]: <v22nklag> PHP Error: /var/lib/roundcube/plugins/password/config.inc.php - true (GET /?_task=logout&_token=M8iMLUSoHd1k6MPHByGnOm403cEcwDyW)

(end of part 1 of the errorlog due to character restriction of the forum)

#26

News & Announcements / Re: error when sending to gmai...

Last post by irene1978 - February 06, 2025, 03:21:02 AM

Hi Tom,
I'm not the mailserver admin but I can to ask to admin, I will send your advice to him.
Thank You 🙏🏻 Irene

#27

General Discussion / Re: Roundcube + Contacts + Cal...

Last post by juliana - February 05, 2025, 05:46:08 PM

Hi, i'm was also looking for that and had many Solutions within roundcube without success tryed.

The development for Horde Groupware has been stopped, but there is a new free development on the market.

https://www.group-office.com

#28

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by SKaero - February 05, 2025, 05:02:22 PM

Having the config in the host config files shouldn't be a problem but clear is in this case. In <RC root>/program/lib/Roundcube/rcube_config.php in the "load_from_file" function in the line before the return can you add:

Code Select

rcube::raise_error($file .' - '. (($success) ? 'true' : 'false'), true);

And post the output in the error log? I want to see what config files its trying to pull in and if its loading them correctly.

#29

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by TomcatMJ - February 05, 2025, 11:39:15 AM

On first view it seems to work when placed in the main config file,but at redirection after login to keycloak it inserts a bunch of "index.php/login/" to the redirecting url so that its landing on the loginscreen again and again without using the css information and so on and without really login in in roundcube ..seems to be another issue...
And in general: if placed in the main config file instead of the config file of the first maildomain, how can i setup another realm/client with different settings or even another openid provider for the second maildomain?

#30

General Discussion / Re: Configuring OAuth2 ->No Lo...

Last post by SKaero - February 05, 2025, 09:31:37 AM

Well that confirms that that the oauth code is running, it isn't getting the config, error logging is working, and that this is a config problem. Have you tired setting the oauth config in the main config file and see if it works then?

Pages 1 2 3 4 5 ... 10