No access rights via Outlook 2010 MAPI

Coffee_is_life

i’ve installed 7.2.6, recreated the profile on my testsystem and still getting the sam eerror:

Opening store temporary via Zarafa-Plugin works normally.
Accessing calendars via shared stores doesnt work.
opening public stores works as expected.

0_1519300313891_9d0039a2-b990-4216-b2b5-5b8d671a1078-grafik.png

0_1519300365289_484bf5c3-ea2a-4e6b-8892-b169e2b0bcac-grafik.png

tryed with setting accesrights only to me - not working
tryed to a store everyone can connect (shared to ad-group “domain-users”)

coffee_is_life

kopiko

Hi there,

Same problem here (in Outlook 2013). It is not related to Windows or Office updates. Something regarding permissions has changed in the kopano-core between version 8.4.6 and 8.5. There is a workaround, adding a shared calendar doesn’t work anymore but you can still do the following: share the entire mailbox and give ‘no permissions’ profile rights on the highest level of the mailbox (only traverse rights) and subsequently read or write permissions on the calendar. If the other party then adds the entire mailbox to Outlook, (not only the calendar) the calendar will become visible again. There are other problems though, the delegate feature doesn’t work properly anymore in Outlook. Accepting meetings requests on behalf of someone throws an error message.

We have reverted the update (you can safely downgrade from 8.5 to 8.4.6), i guess 8.4.6 is the last version that works with Outlook.

Coffee_is_life

Hello @kopiko,

thanks for the nice workaround, can see the calendar now, but even with settings rights from “everyone” and myself to “nothing” or “other” (like nothing but even without permission to list folders) i can see the inbox. - same at your side?

@ kopano-team - is this issue known and maybe fixed in future releases? - otherwise i need to downgrade

coffee_is_life

kopiko

Not with 8.4.6, if I give someone permissions and without the ‘list folder’ option he is not allowed to browse my mailbox. It wouldn’t surprise me if this is different in 8.5 though…

Coffee_is_life

it is :)

fbartels

Our development is currently looking into the “not updating of calendars” for the old Zarafa mapi client, but as the mapi client is unsupported and untested in Kopano this did not come up earlier. We are currently expecting to know more on monday.

If you want to be kept updated I would recommend to open a support case.

kopiko

Hi fbartels, thanks for the update. Cleary, something has changed between versions 8.4.6 - 8.5 regarding permissions. I know Outlook via MAPI is not supported but there are still people using it. We are slowly trying to push the DeskApp client but users generally do not like change…

I will open a ticket!

Coffee_is_life

hello @fbartels,

just created the ticket (KS-40047)

coffee_is_life

segro

any updates here?

mkromer

Yes, a new release of KC (8.5.4) has been made available yesterday which addresses this issue.

Coffee_is_life

very nice thanks

coffee_is_life

Coffee_is_life

just FYI:

we are using a room called “Besprechungsraum”.
to accept everything in nearly realtime, “kopano-mr-accept” is used in cronjob.

if i call this line now i get following error:

PHP Warning:  include(mapi/mapi.util.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 21
PHP Warning:  include(): Failed opening 'mapi/mapi.util.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 21
PHP Warning:  include(mapi/mapidefs.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 22
PHP Warning:  include(): Failed opening 'mapi/mapidefs.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 22
PHP Warning:  include(mapi/mapicode.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 23
PHP Warning:  include(): Failed opening 'mapi/mapicode.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 23
PHP Warning:  include(mapi/mapitags.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 24
PHP Warning:  include(): Failed opening 'mapi/mapitags.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 24
PHP Warning:  include(mapi/mapiguid.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 25
PHP Warning:  include(): Failed opening 'mapi/mapiguid.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 25
PHP Warning:  include(mapi/class.meetingrequest.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 27
PHP Warning:  include(): Failed opening 'mapi/class.meetingrequest.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 27
PHP Warning:  include(mapi/class.baserecurrence.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 28
PHP Warning:  include(): Failed opening 'mapi/class.baserecurrence.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 28
PHP Warning:  include(mapi/class.recurrence.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 29
PHP Warning:  include(): Failed opening 'mapi/class.recurrence.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 29
PHP Warning:  include(mapi/class.freebusypublish.php): failed to open stream: No such file or directory in /usr/sbin/kopano-mr-accept on line 30
PHP Warning:  include(): Failed opening 'mapi/class.freebusypublish.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php') in /usr/sbin/kopano-mr-accept on line 30
PHP Fatal error:  Call to undefined function forceUTF8() in /usr/sbin/kopano-mr-accept on line 436

the files are located in “/usr/share/kopano/php/mapi/”, all files are created on Feb 14th.

changed my php settings to “include_path=”.:/usr/share/pear:/usr/share/php:/usr/share/kopano/php"
now it can locate the files, but another error came up:

PHP Fatal error:  Call to undefined function mapi_make_scode() in /usr/share/kopano/php/mapi/mapicode.php on line 40

is this fixed in the new version from Feb 28th aswell?

coffee_is_life

Coffee_is_life

Update:

upgraded my testsystem and the MAPI connection from outlook 2010 doesnt work
same for "/usr/sbin/kopano-mr-accept “Besprechungsraum” “/etc/kopano/dagent.cfg”

if i add /usr/share/kopano/php to the include paths, same error:

PHP Fatal error:  Call to undefined function mapi_make_scode() in /usr/share/kopano/php/mapi/mapicode.php on line 40

:(

coffee_is_life

fbartels

@coffee_is_life said in No access rights via Outlook 2010 MAPI:

upgraded my testsystem and the MAPI connection from outlook 2010 doesnt work

Please contact support

Coffee_is_life

Update:
Restarted Server and client, MAPI from outlook is now working.

“kopano-mr-accept” doesnt work (mapi error as described above).
“kopano-admin --user-count” works again aswell

thanks for the fixes :)

coffee_is_life

Coffee_is_life

Update:

Got answer from Kopano-support
With changing kopano-mr-accept Script from

#!/usr/bin/php
<?php
# -*- Mode: php -*-
/*

to

#!/opt/rh/rh-php56/root/usr/bin/php
<?php
# -*- Mode: php -*-
/*

confirmed

coffee_is_life