[RCU] Plugin to reset password

Mike Burger mburger at bubbanfriends.org
Tue Apr 30 14:31:41 CEST 2019

This is a very good point...one that can be addressed in its 

You see, it pays to do a little research prior to attempting to 
denigrate someone's contribution to the discussion.

First of all, the password plugin is packaged WITH RCE...as in, in the 

Second, if you go into the password plugin directory and read the README 
file, you'll find that section 2, "Drivers", covers 20 possible 

  2. Drivers
  2.1.  Database (sql)
  2.2.  Cyrus/SASL (sasl)
  2.3.  Poppassd/Courierpassd (poppassd)
  2.4.  LDAP (ldap)
  2.5.  DirectAdmin Control Panel (directadmin)
  2.6.  cPanel
  2.6.1.  cPanel WHM (cpanel)
  2.6.2.  cPanel Webmail (cpanel_webmail)
  2.7.  XIMSS/Communigate (ximms)
  2.8.  Virtualmin (virtualmin)
  2.9.  hMailServer (hmail)
  2.10. PAM (pam)
  2.11. Chpasswd (chpasswd)
  2.12. LDAP - no PEAR (ldap_simple)
  2.13. XMail (xmail)
  2.14. Pw (pw_usermod)
  2.15. domainFACTORY (domainfactory)
  2.16. DBMail (dbmail)
  2.17. Expect (expect)
  2.18. Samba (smb)
  2.19. Vpopmail daemon (vpopmaild)
  2.20. Plesk (Plesk RPC-API)
  2.21. Kpasswd

On 2019-04-29 17:17, Reindl Harald wrote:
> come on and show me how you imagine that to work on a proper system
> where the webmail runs on a different machine than any mailservice and
> can connect to the mailservice only via SMTP/POP3/IMAP
> Am 29.04.19 um 22:58 schrieb Mike Burger:
>> On 2019-04-29 08:51, Giles Coochey wrote:
>>> On 29/04/2019 13:29, Andreas Meyer wrote:
>>>> Hello!
>>>> There is no plugin available to let a user reset her password, 
>>>> right?
>>>> Kind regards
>>>>    Andreas
>>> If you think about this, you'll realise that the answer is no.
>>> Roundcube is simply using the supplied credentials to the IMAP 
>>> server,
>>> which could be on a completely different machine to the one running
>>> Roundcube.  Therefore, as within the IMAP protocol, there is no API
>>> for changing a user's password Roundcube could not do that by itself.
>>> If you're looking for a user self-service method of changing a
>>> password, then you'll need to look at the authentication method used
>>> by your IMAP server and provide a relevant tool at that end, not on
>>> the RoundCube front-end.
>> Andreas,
>> As you'll see by way of the two images I've attached, I'm afraid that
>> the above response is incorrect.
>> If you can't find it in <path-to-roundcube>/plugins/password, you can
>> find it at:
>> https://github.com/roundcube/roundcubemail/tree/master/plugins/password

Mike Burger

"It's always suicide-mission this, save-the-planet that. No one ever 
just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1

More information about the users mailing list