- Users - Roundcube mailing lists

Slow displaying INBOX with thousands emails
by Alexey 30 Oct '18

30 Oct '18

Hello. I have user with approximately 500000 emails in his INBOX folder and this is not limit. And there is some inconvenience in viewing this folder. It takes about 5-7 seconds to display list of emails in folder. Pagination is set to 100 emails per page. I checked that IMAP server complete request "FETCH 1:100 ENVELOPE" in 147ms, and "FETCH 1:* ENVELOPE" in 6 second. This is why I begun to think that RoundCube may request for all emails instead of 100. Roundcube is configured for default sort order: descending by receiving date. Regards, Alexey.

5 12

Re: [RCU] update
by mick crane 30 Oct '18

30 Oct '18

On 2018-10-28 16:43, Reindl Harald wrote: > Am 28.10.18 um 17:34 schrieb mick crane: >> On 2018-10-28 15:58, Michael Orlitzky wrote: >>> On 10/28/2018 04:54 AM, mick crane wrote: >>>> find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \; >>> >>> Chances are, you don't want your database credentials to be >>> world-readable. >> >> what then 640? > > surely, and not owned by the webserver, basic security principals > > normaly stuff should be owned by root and read-only for the webserver > group, folers 750, files 640 If I change all the permissions to 750 for the roundcubemail directories and 640 for the files and all the ownerships to root.root it don't work after restart apache ownerships www-data.www-data it works. probably it is particular files need to be different but I don't know which ones. [sigh] mick -- Key ID 4BFEBB31

2 2

Re: [RCU] update
by mick crane 28 Oct '18

28 Oct '18

On 2018-10-28 16:43, Reindl Harald wrote: > Am 28.10.18 um 17:34 schrieb mick crane: >> On 2018-10-28 15:58, Michael Orlitzky wrote: >>> On 10/28/2018 04:54 AM, mick crane wrote: >>>> find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \; >>> >>> Chances are, you don't want your database credentials to be >>> world-readable. >> >> what then 640? > > surely, and not owned by the webserver, basic security principals > > normaly stuff should be owned by root and read-only for the webserver > group, folers 750, files 640 Ok I do that. This is not internet facing stuff but guess do it safely cheers mcik -- Key ID 4BFEBB31

1 0

update
by mick crane 28 Oct '18

28 Oct '18

excuse ignorance. using 1.3.5 with managesieve and enigma plugins. Is there a script that will update to 1.3.8 if I tell it where 1.3.5 is installed or do I need to go through everything from start ? mick -- Key ID 4BFEBB31

3 5

2FA Plugin working but then I can't log in to get to Settings!
by Philip Rhoades 27 Oct '18

27 Oct '18

People, I have had 2FA working in the past but now if the config line config.inc.php is commented out eg: // $config['plugins'] = array('twofactor_gauthenticator'); then I don't get any any 2FA stuff in my settings - but if uncomment the above line, I get logged out and when I try to log in, I am asked for the 2FA code - but I haven't been able to scan the QR code yet in settings for my authenticator app so I can produce the code! This seems like a Catch-22 situation - what am I missing? Thanks, PHil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

1 0

Roundcube Webmail 1.3.8 released
by Thomas Bruederli 27 Oct '18

27 Oct '18

Dear subscribers We proudly announce the next service release to update the stable version 1.3. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot and MySQL 8. See the full changelog in the release notes on the Github download page [1]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net. Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.8

2 1

Re: [RCU] can't login after upgrade
by Vincent Van Houtte 24 Oct '18

24 Oct '18

On 2018-10-08 18:15, Reindl Harald wrote: > Am 08.10.18 um 17:14 schrieb Vincent Van Houtte: >> These errors clearly say that the user 'arcgraph' does not exist, that >> RC wants to create the user by logging in (I don't believe this is >> default - an unknown user should just be rejected imho), and that the >> subsequent attempt to create that user fails. >> >> There is also the mention of a plugin that may interfere here. Can you >> disable all plugins for the sake of testing? > > bullshit > > Field 'alias' doesn't have a default value (SQL Query: INSERT INTO > `users` (`created`, `last_login`, `username`, `mail_host`, `language`) > VALUES (now(), now(), 'arcgraph', 'www.arcgraphics.ch', 'en_US') > > the table has a column 'alias' with no default value which is not > listed > in the insert - mysql basics Although your assessment is correct, it misses the overall picture. The question relates to an existing installation that was merely updated. There is no reason why RC would need to create (INSERT INTO 'users') a new user upon login. Even if my suggestion would be wrong, I don't see any reason to use such language, especially from someone dissing the lack of respect of other people. Kind regards, Vincent

3 3

blacklist
by Jim Pazarena 24 Oct '18

24 Oct '18

can roundcube maintain a blacklist of IP number connections independent from apache or the main firewall (wrappers) ?

1 0

Duplicated insert's for sessions in log's
by Jorge Bastos 17 Oct '18

17 Oct '18

Howdy, I've seen in the logs this info, and i'd like to know what triggers it. Would it be the same user logged in more than one place? (well the sessid should be different for sure) Was the user that closed the browser and opened it again in the same page? Another reason? To handle this what would be the best option, insert it using insert ignore or replace? Or should it be like this? Oct 17 18:33:36 fastweb roundcube: <i43tda9m> DB Error: [1062] Duplicate entry 'i43tda9m0k8a0dukdshmvoettq' for key 'PRIMARY' (SQL Query: INSERT INTO `session` (`sess_id`, `vars`, `ip`, `changed`) VALUES ('i43tda9m0k8a0dukdshmvoettq', 'dGVtcHxiOjE7bGFuZ3VhZ2V8czo1OiJwdF9QVCI7cmVxdWVzdF90b2tlbnxzOjMyOiJQYVZnYkx Za2dzQVJTbHlzN2VkT1VWTkJSN3lodFR2NiI7', '148.71.229.58', now())) in /home/hosting/dbbbbg.pt/webmail/program/lib/Roundcube/rcube_db.php on line 543 (GET /webmail/?_task=mail&_action=get&_mbox=INBOX&_uid=56841830&_token=d6qQ2Yvet5 ke0DMZEdqWzLZwVemCu2Y5&_part=5&_embed=1&_mimeclass=image)

1 0

unsubscribe
by jsmosc 08 Oct '18

08 Oct '18

unsubscribe

2 1

can't login after upgrade
by Meaulnes Legler ＠ roundcube 08 Oct '18

08 Oct '18

hello again I'm still having login problems on different sites on my webserver. On several sites, I upgraded from version 1.2.4 to 1.3.7 and since then, a login attempt says « _/*!*\_ Login failed ». Users at sites running RoundCube 1.2.4 have no problems. A.L.E.C. said, I should fix the database. How can I do this? I couldn't find any instructions online... Thank you and best regards _~_ '¿') `-´ Meaulnes Legler Zurich, Switzerland +41\0 44 260 16 60

5 9

Re: [RCU] can't login after upgrade
by Meaulnes Legler ＠ roundcube 08 Oct '18

08 Oct '18

On 08.10.18 14:37, Reindl Harald wrote: > Am 08.10.18 um 14:06 schrieb Meaulnes Legler@roundcube: >> _2nd question:_ how can I get more specific error messages as just a >> lapidary « _/!\_ Login failed » ? > have you ever considered to look at your maillog? > roundcube is just a client yes I did, it just says logged in and logged out. 502# less /var/log/maillog | grep username Oct 8 14:32:12 blue2 dovecot: imap-login: Login: user=, method=PLAIN, rip=94.103.xx.xx, lip=94.103.xx.xx, mpid=32040, secured, session=Oct 8 14:32:12 blue2 dovecot: imap(username): Logged out in=29 out=496 503# so I guess the login was correct but the session obviously doesn't last... > when you see no conenction your config is wrong, when you see > connections you see also what fails yeah well no clue why the session doesn't stay alive. Thank you and best regards _~_ '¿') `-´ Meaulnes Legler Zurich, Switzerland +41\0 44 260 16 60

1 0

Getting organization from ldap/AD into identity.
by Neil Price 04 Oct '18

04 Oct '18

This is what I've done. Seems to work. Hope it helps someone without crashing everything. Debian stretch standard package. --- /usr/share/roundcube/plugins/new_user_identity/new_user_identity.php.orig 2018-10-03 09:40:46.814463985 +0200 +++ /usr/share/roundcube/plugins/new_user_identity/new_user_identity.php 2018-10-04 15:08:42.176370477 +0200 @@ -33,8 +33,10 @@ if (count($results->records) == 1) { $user_name = is_array($results->records[0]['name']) ? $results->records[0]['name'][0] : $results->records[0]['name']; $user_email = is_array($results->records[0]['email']) ? $results->records[0]['email'][0] : $results->records[0]['email']; + $user_org = is_array($results->records[0]['organization']) ? $results->records[0]['organization'][0] : $results->records[0]['organization']; $args['user_name'] = $user_name; + $args['user_org'] = $user_org; $args['email_list'] = array(); if (!$args['user_email'] && strpos($user_email, '@')) { @@ -70,9 +72,8 @@ $identities = $this->rc->user->list_emails(); $ldap_entry = $this->lookup_user_name(array( 'user' => $this->rc->user->data['username'], - 'host' => $this->rc->user->data['mail_host'], + 'host' => $this->rc->user->data['mail_host'] )); - foreach ((array) $ldap_entry['email_list'] as $email) { foreach ($identities as $identity) { if ($identity['email'] == $email) { --- /usr/share/roundcube/program/lib/Roundcube/rcube_user.php.orig 2016-11-27 18:08:58.000000000 +0200 +++ /usr/share/roundcube/program/lib/Roundcube/rcube_user.php 2018-10-04 15:17:32.542990608 +0200 @@ -630,7 +630,7 @@ $user_name = $data['user_name']; $user_email = $data['user_email']; $email_list = $data['email_list']; - + $user_org = $data['user_org']; if (empty($email_list)) { if (empty($user_email)) { $user_email = strpos($data['user'], '@') ? $user : sprintf('%s@%s', $data['user'], $mail_domain); @@ -667,6 +667,7 @@ $record['user_id'] = $user_id; $record['standard'] = $standard; + $record['organization'] = $user_org; $plugin = $rcube->plugins->exec_hook('identity_create', array('login' => true, 'record' => $record));

1 0

roundcube
by mick crane 26 Sep '18

26 Sep '18

Did I say that I really like roundcube ? thanks ever so much mick -- Key ID 4BFEBB31

1 0

Search criterias in Roundcube
by Egoitz Aurrekoetxea 26 Sep '18

26 Sep '18

Good afternoon, Is it possible to set different search criterias in Roundcube?. For instance to say. "Find me a message that has gone from this to that and with the subject containing this?". I know a plugin called advanced search exists, and although have managed to get it working (I could provide the working version) it has several Javascript issues with other plugin I use (InfiniteScroll). Having said that works more or less... but what about searches in Roundcube?. Can I enter from:___ subject:____ in the search box? or in some other manner?. Can another plugin for this purpose exist?. Best regards, -- EGOITZ AURREKOETXEA Departamento de sistemas 944 209 470 Parque Tecnológico. Edificio 103 48170 Zamudio (Bizkaia) egoitz(a)sarenet.es www.sarenet.es [1] Antes de imprimir este correo electrónico piense si es necesario hacerlo. Links: ------ [1] http://www.sarenet.es

1 0

Re: [RCU] Debug xdebug
by A.L.E.C 26 Sep '18

26 Sep '18

On 25.09.2018 22:38, Jorge Bastos wrote: > Sep 25 21:09:13 fastweb roundcube: <ba0aem8f> PHP Error: Maximum nesting > level exceeded (xdebug.max_nesting_level=256) in > /home/hosting/xxxx.pt/webmail/program/lib/Roundcube/rcube_washtml.php on > line 447 (GET > /webmail/?_task=mail&_caps=pdf%3D0%2Cflasjjjh%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid=59688144&_mbox=INBOX&_action=show) That message informs you that Roundcube wasn't able to parse HTML message (malformed or very big) with this PHP setting. Increase the limit or live with that. -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] ---------------------------------------------------- PGP: 19359DC1 # Blog: https://kolabian.wordpress.com

1 0

Debug xdebug
by Jorge Bastos 25 Sep '18

25 Sep '18

Hi Alec, Don't know if it's relevant the below info. I use xdebug for other reasons, if it's not advised to use with RC at all just let me know, or if this is something that needs some adjust let me know, Sep 25 21:09:13 fastweb roundcube: <ba0aem8f> PHP Error: Maximum nesting level exceeded (xdebug.max_nesting_level=256) in /home/hosting/xxxx.pt/webmail/program/lib/Roundcube/rcube_washtml.php on line 447 (GET /webmail/?_task=mail&_caps=pdf%3D0%2Cflasjjjh%3D0%2Ctiff%3D0%2Cwebp%3D1&_uid =59688144&_mbox=INBOX&_action=show)

1 0

can't login new user
by WaveWeb - M. Legler 24 Sep '18

24 Sep '18

hello I have RoundCube 1.2.4 running fine. I added the new user 'leglerlugano' on its site 'legler.org' and can access its mail thru POP3 without problems. But if I try to access the mail thru RoundCube, it seems to charge but falls immediately back to «Access failed». In /home/.sites/xxx/xxx/web/roundcube/logs/errors, it reads: DB Error: [1364] Field 'alias' doesn't have a default value (SQL Query: INSERT INTO `users` (`created`, `last_login`, `username`, `mail_host`, `language`) VALUES (now(), now(), 'leglerlugano', 'legler.org', 'it_IT')) in /home/.sites/xxx/xxx/web/roundcube/program/lib/Roundcube/rcube_db.php on line 539 (POST /roundcube/?_task=login&_action=login) /var/log/maillog reads: Sep 22 18:11:31 vs dovecot: imap-login: Login: user=<leglerlugano>, method=PLAIN, rip=94.103.99.73, lip=94.103.99.73, mpid=20684, secured, session=<fGVgAnh2supeZ2NJ> Sep 22 18:11:31 vs dovecot: imap(leglerlugano): Logged out in=29 out=496 What alias is missing here? How can I fix this? Thank you and best regards _~_ '¿') `-´ Meaulnes Legler Zurich, Switzerland +41\0 44 260 16 60

3 2

Thanks
by mithun kumar 15 Sep '18

15 Sep '18

Dear Sir/ Madam, Thanks a lot

1 0

view only current email as html
by mick crane 13 Sep '18

13 Sep '18

hi, Using 1.3.5 Is it possible to view the selected email in html without selecting html for all in settings ? regards mick -- Key ID 4BFEBB31

2 4

Re: [RCU] Info about RC/Links/HTTPS
by Jorge Bastos 11 Sep '18

11 Sep '18

Perfect, Thanks Alec! On 2018-09-11 12:20, A.L.E.C wrote: > On 11.09.2018 12:40, Jorge Bastos wrote: > >> I have HTTPS in the vhost that the webmail is running, everything's >> fine, but, if I click an email that has images that are loaded from an >> HTTP:// url (without HTTPS) the browser starts telling me that the HTTPS >> validation failed with the yellow sign in the padlock. > > https://github.com/roundcube/roundcubemail/issues/5996

1 0

Info about RC/Links/HTTPS
by Jorge Bastos 11 Sep '18

11 Sep '18

Howdy, I've seen this behavior, on all version and also last stable 1.3.7. I have HTTPS in the vhost that the webmail is running, everything's fine, but, if I click an email that has images that are loaded from an HTTP:// url (without HTTPS) the browser starts telling me that the HTTPS validation failed with the yellow sign in the padlock. Question, should an email with non-https url's influence the browser HTTPS validation? To get the normal behavior I have to F5 the window. Here's a raw message from an email that has that behavior: https://pastebin.com/PX9HbUmp

2 1

RC 1.4 and missing Elastic skin for some plugins
by Josef Karliak 11 Sep '18

11 Sep '18

Good morning, we tried 1.4 RC, all works fine, great work, but some plugins are missing elastic skins, so it did not work (primitivenotes, calendar). For example: FILE NOT FOUND The requested resource was not found! Please contact your server-administrator. Failed request: mail.domain.cz/mail/?_task=calendar What is needed to do ? Thanks and best regards J.Karliak -- Ma domena pouziva zabezpeceni a kontrolu SPF (www.openspf.org) a DomainKeys/DKIM (s ADSP) a implementaci DMARC. Pokud mate problemy s dorucenim emailu, zacnete pouzivat metody overeni puvody emailu zminene vyse. Dekuji. My domain use SPF (www.openspf.org) and DomainKeys/DKIM (with ADSP) policy and implementation of the DMARC. If you've problem with sending emails to me, start using email origin methods mentioned above. Thank you.

2 1

Re: [RCU] Reset password for users who has forgot password
by Jarosław Kłopotek - INTERDUO 05 Sep '18

05 Sep '18

W dniu 04.09.2018 o 21:56, Reindl Harald pisze: > Am 04.09.18 um 21:31 schrieb jkl: >> You aren't right. >> Look at the iredmail project or Zimbra Suite. >> >> Google also has got reseting password form so why roundcube could not have? > because roundcube acts generic with every type of IMAP/SMTP setup and > Google is a platform I need a solution for that specified case. It doesn't matter if it's strictly from roundcube project or not. >> You can change password with password plugin after login. Its just a >> thing to put that form on specified place and secure it on propper way > different beasts - *how* do you secure it - when you are authenticated > you already passed autentication and on most setups even change the > password is not possible because it can't be done via IMAP and direct > access to to user credentails is not that easy and should now work form > the webserver at all We both know that. > * how do you secure it > * how do you access the password store > * how do you send an SMS given that send via email can't work > given that you don't have the email credentiuals when you reset it > > surely, it's technical possible but for sure not out-of-the-box and very > different on each and every setup After exchanging few mails in thread the last sentence give me sentence that I would like to hear. :) So If We go back to my first question from first mail: "Is there any plugin that could reset (or remind or send link to change password form) lost password for roundcube mail user?" The answer is NO. So if it's technical possible how to resolve that problem in simplest way? That's one of the main feature I can bet that I not the first who has the same problem. Regards -- Jarosław Kłopotek kom. 607 893 111 Interduo Ł. Bujek, J. Kłopotek, J. Sowa s.c. ul. Lubelska 36B/40, 21-100 Lubartów tel. 81 475 30 00

1 0

Re: [RCU] Reset password for users who has forgot password
by jkl 04 Sep '18

04 Sep '18

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users