Users November 2009

users@lists.roundcube.net

19 participants
18 discussions

mcrypt issues
by Alistair Bates 01 Apr '10

01 Apr '10

Hi I've updated the version of PHP running on my Mac OSX server and the new version includes mcrypt which I didn't have before. Since then I've not been able to log in. There appears to be a problem with the length of the initialization vector being handed to the mcrypt function, the interesting thing being that the length is changing each time: 11, 18, 9, 12. The error logs show: ali@buggles:/Library/Webserver/Documents/roundcube$ tail logs/errors [10-Nov-2009 13:23:09] PHP Warning: mcrypt_generic_init() [function.mcrypt-generic-init]: Iv size incorrect; supplied length: 11, needed: 8 in /Library/WebServer/Documents/roundcube/program/ include/rcmail.php on line 995 [10-Nov-2009 13:23:12 +0000]: IMAP Error: Authentication for ali failed (LOGIN): "a001 NO Login failed." (GET /roundcube/?_task=mail) [10-Nov-2009 13:36:59] PHP Warning: mcrypt_generic_init() [function.mcrypt-generic-init]: Iv size incorrect; supplied length: 18, needed: 8 in /Library/WebServer/Documents/roundcube/program/ include/rcmail.php on line 995 [10-Nov-2009 13:37:02 +0000]: IMAP Error: Authentication for ali failed (LOGIN): "a001 NO Login failed." (GET /roundcube/?_task=mail) [10-Nov-2009 13:38:16] PHP Warning: mcrypt_generic_init() [function.mcrypt-generic-init]: Iv size incorrect; supplied length: 9, needed: 8 in /Library/WebServer/Documents/roundcube/program/include/ rcmail.php on line 995 [10-Nov-2009 13:38:21] PHP Warning: mcrypt_generic_init() [function.mcrypt-generic-init]: Iv size incorrect; supplied length: 12, needed: 8 in /Library/WebServer/Documents/roundcube/program/ include/rcmail.php on line 995 [10-Nov-2009 13:38:24 +0000]: IMAP Error: Authentication for ali failed (LOGIN): "a001 NO Login failed." (GET /roundcube/?_task=mail) Grateful for any advice! Cheers Ali _______________________________________________ List info: http://lists.roundcube.net/users/

3 2

Attachment icons
by DUBOURG Kevin 30 Nov '09

30 Nov '09

English: Hello, Since my last roundcube upgrade, Roundcube interface doesn't display attachment icons on email where there is attachement. Can you help me ? Thanks ! French: Bonjour, Depuis une mise à jour de roundcube, l'icône de pièce jointe ne s'affiche plus lorsque j'au un email avec un attachement. Est ce normal ? Avez vous une solution ? Merci ! _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Re: [RCU] [RCD] recurring problem at the level of authentication and total absence of log
by fakessh＠fakessh.eu 27 Nov '09

27 Nov '09

Le mercredi 25 novembre 2009 19:56, fakessh a écrit : > On Wed, 25 Nov 2009 11:19:08 -0600, chasd <chasd(a)silveroaks.com> wrote: > >> Research indicates that you referred me over file > >> > >> [root@r13151 www]# find . -name '*.php' -exec grep -l "header > >> ('Content-Type:" {} \; > > > > The regular expression got broken to an additional line by my MUA. > > Make sure that regex is all on one line, and then run that command. > > > > It looks like you'll also have to look for files that end in " .inc " > > as well > > > > find . -name '*.inc' -exec grep -l "header('Content-Type:" {} \; > > ./program/steps/addressbook/export.inc > > ./program/steps/mail/attachments.inc > > ./program/steps/mail/get.inc > > > >> exactly how it should change the file returned by the command > >> quoted above > > > > anywhere you see : > > > > header('Content-Type: ***************); > > > > put > > > > header('Accept: text/xml'); > > > > on a line beneath it. > > I'm not sure if the Accept header should also include other mime types. > > Here is a random Accept: header from our Intranet : > > Accept:application/xml,application/xhtml+xml,text/html;q=0.9,text/ > > plain;q=0.8,image/png,*/*;q=0.5 > > > > There are tools to see those headers, I used Safari's Web Inspector. > > > > > > Note the actual mime type sent via the Content-Type: header isn't > > always the same : > > > > find . -name '*.inc' -exec grep "header('Content-Type:" {} \; > > > > header('Content-Type: text/x-vcard; charset='.RCMAIL_CHARSET); > > header('Content-Type: ' . $attachment['mimetype']); > > header('Content-Type: text/html; charset=' . RCMAIL_CHARSET); > > > > find . -name '*.php' -exec grep "header('Content-Type:" {} \; > > > > header('Content-Type: text/plain'); > > header('Content-Type: text/html; charset=' . $this- > > > > >charset); > > > > header('Content-Type: text/plain; charset=' . $this- > > > > >get_charset()); > > > > header('Content-Type: text/plain; charset=UTF-8'); > > header('Content-Type: text/css'); > > > > > > RoundCube sends that Content-Type: header for every page, but it > > sends other headers depending on what page or what data is being > > sent. If you add the Accept: header at each point where the Content- > > Type: header is sent, that should make mod_security happy. > > I failed to operate roundcubemail with the changes indicated in your post > when mod_security is active > > mod_security with in disabled state, the roundcubemail release 0.3.1 > works well under CentOS 5.4 MacOS X 10.4 with Safari or Firefox: any > this with a PPC processor > > > changes indicated by you, are not sufficient or is not correct, at least > with mod_security for apache can not access the webmail > > I still need your help and your advanced knowledge in the operation of > roundcube > > > thanks for your help > > thanks > _______________________________________________ > List info: http://lists.roundcube.net/dev/ Hi all Hi list Hi charles here's nobody else who encounters the same problems with the release 0.3.1 and mod_security. here is the problem for tests ordered by Charles, we must stop roundcube and now I have three accounts running on production with roundcube disables mod_security It bothers me to stop my webmail service for several hours if anyone has a solution, an official patch a good suggestion thanks for all your thanks _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Re: [RCU] [RCD] recurring problem at the level of authentication and total absence of log
by fakessh＠fakessh.eu 26 Nov '09

26 Nov '09

Le jeudi 26 novembre 2009 00:03, vous avez écrit : > On Nov 25, 2009, at 12:56 PM, fakessh wrote: > > I failed to operate roundcubemail with the changes indicated in > > your post > > when mod_security is active > > Hmm, not sure of the next step. > Can you post the logged mod_security errors like you did last time ? > > > I still need your help and your advanced knowledge in the operation of > > roundcube > > I wouldn't say my knowledge is advanced, I've just been using it for > quite some time. I just put into production roundcube for some friends. I can not make changes in the day, the webmail is stable yet. I'd do this Thursday night at midnight Paris time (0:00) just enough time to do the tests you ask me. you wrote on my personal address, rather than post on the dev list this is probably a problem of click thanks charles thank you for your assistance is invaluable to me many thanks _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Bring all the icons closer to each other
by Jesús Guerrero 26 Nov '09

26 Nov '09

Hello, I am using roundcube since some months ago, all in all it's being a great experience. It's simple enough and it works really well for my purposes so I have to thank everyone involved for it. I wanted to ask something simple about the default skin. Is it me the only one that finds really inconvenient to traverse the whole screen to click "select all" and then go back to the top to select the action (mark read, delete, move...)? Besides that, the selection icons are really small on a big display. I am probably going to do my custom fork of the skin, I am just curious to know if there's something planned to improve the usability of the default skin or something. I thought about submitting a patch bringing all the controls closer to each other, but since it's really trivial I don't want to spam the dev list with silly patches if there's no need to. If this has already been discussed, please, kindly point me to wherever it belongs. I follow the user and dev lists and haven't noticed anything about this problem. Regards. -- Jesús Guerrero _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Re: [RCU] problem with old old stable version 0.1.1 Re: recurring problem at the level of authentication and total absence of log
by fakessh＠fakessh.eu 25 Nov '09

25 Nov '09

Hi Charles Hi list Hi all Thank you for helping me, thanks to your great knowledge of roundcubemail yet I have used only packages in CentOS deposits. I quote : roundcubemail-0.2.1-1.el5.kb.noarch.rpm which corresponds to the stable version 0.2.1 roundcubemail.noarch 0.1.1-5.el5 which corresponds to the stable version 0.1.1 I trust the packager EPEL and packager karanbir singh the only version that works is that the depot EPEL when my mailboxes contained few messages I have my system analysis with reference to the vulnerability "html2text conversion script vulnerability" my system seems intact did you look at my post last Tuesday Tue, 17 Nov 2009 21:39:40 +0100 (CET) roundcubemail seems to be sensitive to the version of php and php-mcrypt, it seems that roundcubemail sends a password crypt imap server I currently installed in one of my vhosts roundcubemail 0.3.1, the installer told me that everything is ok, the log directories are ok and yet I still did not log there was a post of Tue, 10 Nov 2009 15:16:33 +0100 (CET) there was a email entitled [RCU] mcrypt issues In this email advice to change program/include/rcmail.php lin 993 to $iv =8; you think it is necessary to make the change indicated in the thread in question a email entitled [RCU] mcrypt issues to solve my problems authentication I'll try the driver syslogd to try to have the logs roundcubemail thanks for all your feedbacks nb : google est mon ami , et bein , pas dans ce cas la On Nov 12, 2009, at 5:08 AM, fakessh(a)fakessh.eu wrote: >> Even if that means your server will be compromised ? > > my system did not seem to be compromised > and how do I know, yes or no compromise You may not know, that is one of the problems. A server can get compromised and it is difficult to find a trail that shows you. There was a message posted to the RoundCube Development list on 11 Nov titled " html2text conversion script vulnerability " you might want to read from the archives. I see from one of your later posts you upgraded, I am thankful. As for your problem : I would make sure the " logs " directory in the " roundcubemail " directory is writable by the web server process. That is where the logs are written, and if the web server process doesn't have permissions to write to that directory, you won't get logging. PHP errors should be written to the web server log, which should be at /var/log/httpd/error_log. You should make sure logging to that file is turned on in the /etc/ php.ini file. I would recommend you deploy RoundCube on a server not connected to the internet first. That way you could allow PHP to display errors on the web page. Then, once you get RoundCube working on a test server, you can deploy it on a public-facing internet server. -- Charles Dostale System Admin - Silver Oaks Communications http://www.silveroaks.com/ 824 17th Street, Moline IL 61265 _______________________________________________ List info: http://lists.roundcube.net/users/ ------------------------------------------------------- _______________________________________________ List info: http://lists.roundcube.net/users/

3 10

Re: [RCU] Roundcube Installer Issues
by avi＠myphonebook.co.in 23 Nov '09

23 Nov '09

avi(a)myphonebook.co.in wrote .. > I have resolved the issue, but am still confused. I commented out some lines in > the PHP autoloader function(roundcube\installer\utils.php) and then had more errors. > Again as I un-commented those lines, and restarted the web server, the second page > of the installer appeared. There seems to be no logic to it. > > So, I rest my case, although doubtfully. > > avi(a)myphonebook.co.in wrote .. > > I am trying to install the latest version of Roundcube 0.3.1. My configuration > > is postfix-mysql and dovecot. I am running virtual domains, the > > setup works fine with Horde and Squirrelmail. Php version is 5.2.1. > > > > On the first page the response by the Roundcube Installer is: > > > > -------------------------------------------------------------------------------------------------------------------------- > > > > Checking PHP version > > Version: OK(PHP 5.2.11 detected) > > Checking PHP extensions > > > > The following modules/extensions are required to run RoundCube: > > PCRE: OK > > DOM: OK > > Session: OK > > XML: OK > > > > The next couple of extensions are optional and recommended to get the best performance: > > FileInfo: NOT AVAILABLE(Could be loaded. Please add in php.ini; See http://www.php.net/manual/en/ref.fileinfo.php) > > Libiconv: OK > > Multibyte: OK > > OpenSSL: OK > > Mcrypt: OK > > GD: OK > > Checking available databases > > > > Check which of the supported extensions are installed. At least one of them is > > required. > > MySQL: OK > > MySQLi: OK > > PostgreSQL: NOT AVAILABLE(Not installed) > > SQLite (v2): NOT AVAILABLE(Not installed) > > Check for required 3rd party libs > > > > This also checks if the include path is set correctly. > > PEAR: OK > > MDB2: OK > > Net_SMTP: OK > > Mail_mime: OK > > iilConnection: OK > > Checking php.ini/.htaccess settings > > > > The following settings are required to run RoundCube: > > file_uploads: OK > > session.auto_start: OK > > zend.ze1_compatibility_mode: OK > > mbstring.func_overload: OK > > suhosin.session.encrypt: OK > > > > The following settings are optional and recommended: > > date.timezone: NOT OK(Could be set) > > > > --------------------------------------------------------------------------------------------------------------------------------- > > > > However, when I click on NEXT I get this error page: > > > > "Internal Server Error" .. bla ..bla.. > > > > My logs show this error: > > > > Nov 23 18:41:37 avi httpd: PHP Warning: include_once(PEAR_Error.php) [<a href='function.include-once'>function.include-once</a>]: > > failed to open stream: No such file or directory in /var/www/xxxxx/roundcubemail/installer/utils.php > > on line 41 > > > > Nov 23 18:41:37 avi httpd: PHP Warning: include_once() [<a href='function.include'>function.include</a>]: > > Failed opening 'PEAR_Error.php' for inclusion (include_path='/var/www/xxxxx/roundcubemail/program/lib:/var/www/xxxxx/roundcubemail/program:/var/www/xxxxx/roundcubemail/program/include:.:/usr/share/pear:/usr/share/php') > > in /var/www/xxxxx/roundcubemail/installer/utils.php on line 41 > > > > Any idea what this error means? I googled thru and there was a similar issue > which > > turned out to be the requirement for mdb2 driver for Mysql, so I have also installed > > this driver, but again, I am getting the same error. _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Re: [RCU] Roundcube Installer Issues
by avi＠myphonebook.co.in 23 Nov '09

23 Nov '09

Thanks for the reply. But, I am not using open_basedir. Claudio Kuenzler <napsty(a)gmail.com> wrote .. > I've had a similar problem with my first installation. > Are you using open_basedir? > If yes, check the open_basedir entries. You have to be able to access the > php libs (e.g. under /usr/share/php) > > In my case, once I correctly set the open_basedir entries, the installation > worked fine. > > On Mon, Nov 23, 2009 at 2:16 PM, <avi(a)myphonebook.co.in> wrote: > > > I am trying to install the latest version of Roundcube 0.3.1. My > > configuration is postfix-mysql and dovecot. I am running virtual domains, > > the > > setup works fine with Horde and Squirrelmail. Php version is 5.2.1. > > > > On the first page the response by the Roundcube Installer is: > > > > > > -------------------------------------------------------------------------------------------------------------------------- > > > > Checking PHP version > > Version: OK(PHP 5.2.11 detected) > > Checking PHP extensions > > > > The following modules/extensions are required to run RoundCube: > > PCRE: OK > > DOM: OK > > Session: OK > > XML: OK > > > > The next couple of extensions are optional and recommended to get the best > > performance: > > FileInfo: NOT AVAILABLE(Could be loaded. Please add in php.ini; See > > http://www.php.net/manual/en/ref.fileinfo.php) > > Libiconv: OK > > Multibyte: OK > > OpenSSL: OK > > Mcrypt: OK > > GD: OK > > Checking available databases > > > > Check which of the supported extensions are installed. At least one of them > > is required. > > MySQL: OK > > MySQLi: OK > > PostgreSQL: NOT AVAILABLE(Not installed) > > SQLite (v2): NOT AVAILABLE(Not installed) > > Check for required 3rd party libs > > > > This also checks if the include path is set correctly. > > PEAR: OK > > MDB2: OK > > Net_SMTP: OK > > Mail_mime: OK > > iilConnection: OK > > Checking php.ini/.htaccess settings > > > > The following settings are required to run RoundCube: > > file_uploads: OK > > session.auto_start: OK > > zend.ze1_compatibility_mode: OK > > mbstring.func_overload: OK > > suhosin.session.encrypt: OK > > > > The following settings are optional and recommended: > > date.timezone: NOT OK(Could be set) > > > > > > --------------------------------------------------------------------------------------------------------------------------------- > > > > However, when I click on NEXT I get this error page: > > > > "Internal Server Error" .. bla ..bla.. > > > > My logs show this error: > > > > Nov 23 18:41:37 avi httpd: PHP Warning: include_once(PEAR_Error.php) [<a > > href='function.include-once'>function.include-once</a>]: failed to open > > stream: No such file or directory in > > /var/www/xxxxx/roundcubemail/installer/utils.php on line 41 > > > > Nov 23 18:41:37 avi httpd: PHP Warning: include_once() [<a > > href='function.include'>function.include</a>]: Failed opening > > 'PEAR_Error.php' for inclusion > > (include_path='/var/www/xxxxx/roundcubemail/program/lib:/var/www/xxxxx/roundcubemail/program:/var/www/xxxxx/roundcubemail/program/include:.:/usr/share/pear:/usr/share/php') > > in /var/www/xxxxx/roundcubemail/installer/utils.php on line 41 > > > > Any idea what this error means? I googled thru and there was a similar > > issue which turned out to be the requirement for mdb2 driver for Mysql, so I > > have also installed this driver, but again, I am getting the same error. > > > > > > > > > > _______________________________________________ > > List info: http://lists.roundcube.net/users/ > > > > _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Roundcube Installer Issues
by avi＠myphonebook.co.in 23 Nov '09

23 Nov '09

I am trying to install the latest version of Roundcube 0.3.1. My configuration is postfix-mysql and dovecot. I am running virtual domains, the setup works fine with Horde and Squirrelmail. Php version is 5.2.1. On the first page the response by the Roundcube Installer is: -------------------------------------------------------------------------------------------------------------------------- Checking PHP version Version: OK(PHP 5.2.11 detected) Checking PHP extensions The following modules/extensions are required to run RoundCube: PCRE: OK DOM: OK Session: OK XML: OK The next couple of extensions are optional and recommended to get the best performance: FileInfo: NOT AVAILABLE(Could be loaded. Please add in php.ini; See http://www.php.net/manual/en/ref.fileinfo.php) Libiconv: OK Multibyte: OK OpenSSL: OK Mcrypt: OK GD: OK Checking available databases Check which of the supported extensions are installed. At least one of them is required. MySQL: OK MySQLi: OK PostgreSQL: NOT AVAILABLE(Not installed) SQLite (v2): NOT AVAILABLE(Not installed) Check for required 3rd party libs This also checks if the include path is set correctly. PEAR: OK MDB2: OK Net_SMTP: OK Mail_mime: OK iilConnection: OK Checking php.ini/.htaccess settings The following settings are required to run RoundCube: file_uploads: OK session.auto_start: OK zend.ze1_compatibility_mode: OK mbstring.func_overload: OK suhosin.session.encrypt: OK The following settings are optional and recommended: date.timezone: NOT OK(Could be set) --------------------------------------------------------------------------------------------------------------------------------- However, when I click on NEXT I get this error page: "Internal Server Error" .. bla ..bla.. My logs show this error: Nov 23 18:41:37 avi httpd: PHP Warning: include_once(PEAR_Error.php) [<a href='function.include-once'>function.include-once</a>]: failed to open stream: No such file or directory in /var/www/xxxxx/roundcubemail/installer/utils.php on line 41 Nov 23 18:41:37 avi httpd: PHP Warning: include_once() [<a href='function.include'>function.include</a>]: Failed opening 'PEAR_Error.php' for inclusion (include_path='/var/www/xxxxx/roundcubemail/program/lib:/var/www/xxxxx/roundcubemail/program:/var/www/xxxxx/roundcubemail/program/include:.:/usr/share/pear:/usr/share/php') in /var/www/xxxxx/roundcubemail/installer/utils.php on line 41 Any idea what this error means? I googled thru and there was a similar issue which turned out to be the requirement for mdb2 driver for Mysql, so I have also installed this driver, but again, I am getting the same error. _______________________________________________ List info: http://lists.roundcube.net/users/

2 1

datbase cleanup when mailboxes or domains are deleted
by ben＠electricembers.net 21 Nov '09

21 Nov '09

Does anybody have any ideas/scripts for maintaining (cleaning) the roundcube database when mailboxes (or domains) are closed? I am not super familiar with the db schema but we are about to begin offering RoundCube webmail (in addition to squirrelmail -- so we'll utilize the squirrelmail_usercopy plugin) and we have a post-deletion script that does some filesystem maintenance. . . I want to extend it to keep cruft out of the roundcube database and it seems there are several tables that would obviously need rows removed (users, identities, contacts) and some other tables I guess (cache, messages.) What about the session table? Now that I write this and look more closely I gues it's not too complicated for an invididual mailbox removal: The user_id column would be the key. . . For a domain removal, it's slightly more intelligent logic that would need to look for all users.username LIKE %(a)domain.org. . . But I don't want to reinvent the wheel if someone's already put work/thought into this! Ben _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users November 2009