[kronolith] Kronolith 4.1.4: Emailed iTip and Agenda's contain links that don't work properly

[lst_hoe02 at kwsoft.de]

Zitat von Anthony Messina <amessina at messinet.com>:

> On Monday, January 20, 2014 06:38:57 PM Jan Schneider wrote:
>> Zitat von Anthony Messina <amessina at messinet.com>:
>> > On Monday, January 20, 2014 05:49:05 PM Jan Schneider wrote:
>> >> Zitat von Anthony Messina <amessina at messinet.com>:
>> >> > On Monday, January 20, 2014 04:29:24 PM Jan Schneider wrote:
>> >> >> Zitat von Anthony Messina <amessina at messinet.com>:
>> >> >> > On Wednesday, January 15, 2014 02:55:27 PM Jan Schneider wrote:
>> >> >> >> Zitat von Anthony Messina <amessina at messinet.com>:
>> >> >> >> > Hello, I have a very new Horde installation configured at
>> >> >> >> > example.com/horde and I am using Kronolith.  I am seeing the
>> >> >> >> > following two issues and am not certain if they are specific to
>> >> >> >> > my
>> >> >> >> > (mis)configuration.  Any guidance would be
>> >> >> >> > appreciated.  Thanks.  -A
>> >> >> >> >
>> >> >> >> > 1. iTip responses
>> >> >> >> > When a user receives an email with an event invitation in a
>> >> >> >> > client
>> >> >> >> > that doesn't support iTip, they click on the  "accept" link which
>> >> >> >> > brings them to a page (attend.php) that says the following.  I
>> >> >> >> > can
>> >> >> >> > see from looking at attend.php that the GET request for "i" fails
>> >> >> >> > as
>> >> >> >> > there is no "i" data in the requested URL from the email.
>> >> >> >> >
>> >> >> >> > busy
>> >> >> >> >
>> >> >> >> >  No from address provided.
>> >> >> >>
>> >> >> >> This is from event updates being sent by email with no from address
>> >> >> >> being provided in some user's identity.
>> >> >> >
>> >> >> > I do have my from_addr set in my identity, which is pulled in from
>> >> >> > LDAP
>> >> >> > via
>> >> >> > the preauthenticate hook upon login to Horde.  I have confirmed this
>> >> >> > by adding
>> >> >> >
>> >> >> > $notification->push(sprintf(_("Your identity is %s"), $ident->
>> >> >> > getValue('from_addr')));
>> >> >> >
>> >> >> > to the sendITipNotifications function in Kronolith.php and I see the
>> >> >> > notification in the corner detailing my proper email address when I
>> >> >> > create
>> >> >> > an event with attendees.
>> >> >>
>> >> >> It doesn't matter if YOU have a from address set.
>> >> >
>> >> > Ok, here is the full URL that is included in the iTip request with my
>> >> > work
>> >> > email address (external to Horde) as an attendee.  Only the domain name
>> >> > is
>> >> > changed.
>> >> >
>> >> > https://messinet.com/horde/kronolith/attend.php?c=sjl6ZxQGR3qgtDGCu_MWa
>> >> > A1&
>> >> > e=CUqf_tiKYIZcZ7e58kjcbw2&u=amessina%40example.org&a=accept
>> >> >
>> >> > I see the "u" is set to my work email address.  When I log into work to
>> >> > get
>> >> > the request and click on "Accept" after "If your email client doesn't
>> >> > support iTip requests you can use the following links to:", I again
>> >> > receive the following error:
>> >> >
>> >> > busy
>> >> > No from address provided.
>> >> >
>> >> > Apparently I must be misunderstanding something because
>> >> >
>> >> > 1) I don't see how an attendee WITH a Horde account can indicate
>> >> > acceptance to
>> >> > an event by using these links unless they are also logged into Horde.
>> >>
>> >> Not at all, attendees don't have anything to do with Horde users.
>> >>
>> >> > 2) How then does an attendee WITHOUT a Horde account indicate
>> >> > acceptance to an
>> >> > event by using these links?
>> >>
>> >> Through the address provided by u.
>> >
>> > Ok, then I am figuring this properly and there is an issue--the iTip
>> > response URLs don't work in the following cases:
>> >
>> > 1) A Horde user must be logged into Horde: IF the user has a Horde
>> > account AND
>> > IS logged into Horde, they get "You have successfully accepted attendence
>> > to this event."  IF a Horde user IS NOT logged into Horde, they get "No
>> > from address provided."
>> >
>> > 2) Non-Horde (external) addresses always get "No from address provided" as
>> > they cannot login to Horde.
>> >
>> > -A
>>
>> Then you (as the event creator) doesn't have a from address set, like
>> I said earlier.
>
> But I, as the event creator DO have a from address set, as I stated earlier
> and confirmed for myself with:
>
> $notification->push(sprintf(_("Your identity is %s"),
>   $ident->getValue('from_addr')));
>
> Though I do set the from_addr from LDAP using the prefs_init hook.  Do you
> think this is the issue? If so, what do you recommend to resolve the problem?
>
> By the way, thanks for the help.  -A

We have done a short test here and indeed the Message "No from address  
provided" is shown for URL access from non-Horde attendees, but the  
status of the attendee is updated in the original event. I'm pretty  
sure this has correctly worked some time ago as we have tested this  
case also.

The URL created is something like this:

https://webmail.kwsoft.de/kronolith/attend.php?c=3DHORDE-LOGIN-NAME&e=3DnVBArT1XD04=
fb4zHgcA7xQ4&u=3DEXTERNAL-MAILADDRESS&a=3Daccept

which looks pretty valid...

Regards

Andreas