Urgent Help with OAuth (Microsoft) and SSL needed - Pay for help

ho85

Hi Guys
We urgently need some help. We had to migrate from an old OsTicket 1.1.4 to 1.17. Now it's running successfully on an Apache Server on Linux Debian 11.

We have two problems and we need urgently some help, of course we would pay for services.

What we need:

Priority 1: We have OsAuth with Microsoft setup. The SMTP Part works, we can send mails over OAuth2. But the E-Mail Fecthing doesn't work. But as far as we see in OsTicket it seems that we configured it correctly. So someone with Experience there can help us for sure.

Priority 2: We have bought an SSL Certificate but our Linux Guy is not available, and we can't get it to work properly, so we would appreciate someone who can install it for us.

That being said: Priority 1 is the most important for now.

We would ideally need help in the next hours, we can give access via Teamviewer/AnyDesk, setup a Teams/Zoom Call or whatever - all fine.

Please let us know if you can help.

Thanks
Hoff

RBGE

ho85 I'm no expert in OAuth2 or the app registration in Azure required to make it work, but it did all go without problems for me by following the steps in the documentation - perhaps the error is being caused by the invalid certificate in the redirect URI? If so, maybe solving priority 2 first would help.

I've set mine up in Ubuntu and Fedora, but the steps should be pretty much the same. If you've already got the certificate, then that's most of the work already done. You just need to point Apache to the relevant file and private key. Detailed steps for this part are available here: https://www.ssltrust.co.uk/help/setup-guides/debian-ubuntu-ssl-install-guide#step5

Hopefully this helps!

ho85

RBGE

Hi there! First of all MANY THANKS for the quick answer.

I'm really lost at it seems everything is fine and i don't have a log as everyhting is green and looks like it's working. And sending mails works over OAuth2 without any issues.

We'll try to setup the SSL first now and hope that this helps.

Many thanks

MarkHoward

RBGE
Hello,
Did you have to give the application or the user used to fetch messages the "Application Administrator" role in Azure?
I saw that in another posting and did not make much sense to me.
Thank you.

RBGE

ho85 Hmm, if SMTP is working then the app registration is obviously set properly (unless SMTP is configured separately to use something other than OAuth). At this stage I'm just thinking of basics, like ensuring email fetching is enabled?? (it was disabled when I was configuring it, but that may have been due to me removing the php-imap extension (unsupported in Fedora) before upgrading).

ho85

Hey There!

Thanks for your help. SSL is working now as well.

The settings for Remote Mailbox are EXACTLY like on your printscreen.

And yeah, SMTP works over OAuth, Diagnostic Mails are successfully received.

See here our Details:

RBGE

ho85 Sorry for asking the obvious here, but hopefully something here guides towards the solution.

My next best guess is that something is failing in the cron job - is it still configured to run, and pointing at the same cron.php script file? Has a statically set php command been updated and no longer works?? (i.e. if it was /usr/local/bin/php7.4/php /path/to/cron.php and you're now using PHP 8, then the command line would need updated to reflect this). Does anything happen if you run the file manually via the command line?

ho85

Yes i think that is the issue. I think there is not cronjob set up properly... Unfortunately even with googling i don't know where to start to set it up :-)

ho85

I think we didn't change anything on the Cronjob we just migrated to PHP 8 and copied OsTicket and updated to 1.17 (i mean somebody did it for us...) I mean we didn't even just update to PHP 8. It's a new server and then we copied/migrated to this new server

Basicly it was PHP 5.x something and OsTicket 1.1.4 then we installed a new Server with PHP 8 and OsTicket 1.17 and somebody migrated everything for us...

So i guess the Cronjob wasn't set up right...

Any help what i need to do exactly?

KevinTheJedi

ho85

You can find the docs here:

https://docs.osticket.com/en/latest/Getting%20Started/POP3-IMAP%20Settings.html#schedule-polling

Other than that you can google "how to setup a cron job on xxx" where "xxx" is your server OS (eg. Ubuntu, CentOS, etc.)

Cheers.

ho85

Managed to solve it!!!! Thank you guys so much for leading me into the right direction!! Highly appreciated!

KevinTheJedi

MarkHoward

If you do not allow user consent then yes, you will need to add the email as Application Administrator.

Cheers.

RBGE

MarkHoward Application administrator is a bit excessive for an automated system, so my workaround was to temporarily grant user consent to apps. It takes about 10 minutes for the change to take effect, but once done you can then set up OAuth 2 following the documentation.
Once it's done, you can then set app consent back to administrator approval required.