Users November 2017

users@lists.roundcube.net

8 participants
7 discussions

Account locked due to multiple failed logins
by Jorge Bastos 24 Nov '17

24 Nov '17

Hi, I have an account locked due to multiple failed logins, it was with the default of 3 ($config['login_rate_limit'] = 3;) But, where do I unlock the account now? Thanks in advanced,

1 1

Re: [RCU] Email Transfer
by Nicholas Graham 22 Nov '17

22 Nov '17

The email service that they are using is Roundcube and it is the default webmail service on bluest. I just want to make sure that their emails won’t go down when that transfer happens since I don’t have any experience in it. Nick > On Nov 22, 2017, at 9:48 AM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > > > Am 22.11.2017 um 15:34 schrieb Nicholas Graham: >> I am trying to host a domain on Bluehost but when I transferred the domain over the emails stopped working on their normal servers. I was told by bluest support that once transferred over that the email would work through their webmail portal can anyone confirm this? > > what has this to do with Roundcube?

2 2

Email Transfer
by Nicholas Graham 22 Nov '17

22 Nov '17

I am trying to host a domain on Bluehost but when I transferred the domain over the emails stopped working on their normal servers. I was told by bluest support that once transferred over that the email would work through their webmail portal can anyone confirm this? Nick

1 0

Problem with session_lifetime
by sws001 11 Nov '17

11 Nov '17

Hello, I have a problem with the Roundcube 1.2.3 under Debian 9. In my config I set: $config['log_session'] = true; and $config['session_lifetime'] = 20; Unfortunately that doesn't work. Roundcube don't close session at all. This big problem for me. Except for this feature everything works fine. Very thanks for all suggestions. Mrok

2 3

after upgrade; still can't index contacts
by Fabian A. Santiago 08 Nov '17

08 Nov '17

once again, after up'ing from 1.3.1 to 1.3.2, i still receive: ERROR: SQLSTATE[HY000] [1045] Access denied for user 'roundcube'@'localhost' (using password: NO)Error 500: Error connecting to database: SQLSTATE[HY000] [1045] Access denied for user 'roundcube'@'localhost' (using password: NO) after trying to run indexcontacts script from cli: from within the downloaded package folder: ./bin/indexcontacts.sh (while logged in as root / or with sudo) this always happens on each upgrade attempt and still can't make heads or tails of it. anyone have any ideas or has this been mentioned and i'm simply forgetting the fix / corrective action? Thanks everyone. btw: centos 7.4 mariadb 10.2.9 apache 2.4.6 -- -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

1 1

Security updates 1.3.3, 1.2.7 and 1.1.10 released
by Thomas Bruederli 08 Nov '17

08 Nov '17

Dear subscribers We just published updates to all stable versions from 1.1.x onwards delivering fixes for a recently discovered file disclosure vulnerability in Roundcube Webmail. Apparently this zero-day exploit is already being used by hackers to read Roundcube’s configuration files. It requires a valid username/password as the exploit only works with a valid session. More details will be published soon under CVE-2017-16651. The Roundcube series 1.0.x is not affected by this vulnerability but we nevertheless back-ported the fix in order to protect from yet unknown exploits. See the full changelog for the according version in the release notes on the Github download pages: https://github.com/roundcube/roundcubemail/releases/tag/1.3.3 https://github.com/roundcube/roundcubemail/releases/tag/1.2.7 https://github.com/roundcube/roundcubemail/releases/tag/1.1.10 https://github.com/roundcube/roundcubemail/releases/tag/1.0.12 We strongly recommend to update all productive installations of Roundcube with either one of these versions. In order to check whether your Roundcube installation has been compromised check the access logs for requests like ?_task=settings&_action=upload-display&_from=timezone As mentioned above, the file disclosure only works for authenticated users and by finding such requests in the logs you should also be able to identify the account used for this unauthorized access. For mitigation we recommend to change the all credentials to external services like database or LDAP address books and preferably also the 'des_key' option in your config. Kind regards Alec & Thomas

1 0

managesieve plugin
by mick crane 04 Nov '17

04 Nov '17

hello, I have roundcube dovecot installation for one user, me, on debian jessie. I try to use the managesieve plugin installed dovecot-sieve and dovecot-managesieved with apt and activated roundcube plugin. there is a file ~/sieve/managesieve.sieve which has rules in it and there are no complaints in the webpage of roundcube but messages are not moved to folders. Can somebody point me to a resource explaining what to put in dovecot configuration files to make it work ? cheers mick -- Key ID 4BFEBB31

2 7

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users November 2017