- Users - Roundcube mailing lists

Re: [RCU] Unknown user in users table, very odd, possible security hole
by Hannu Hirvonen 08 Feb '18

08 Feb '18

On 08.02.2018 22:06, Jorge Bastos wrote: > > That’s what i would like to do, but where would i find that information? > > In the users table isn’t there, or I’m not searching in the correct place. > Something like */var/log/roundcubemail/userlogins* perhaps? -- Hannu Hirvonen (hh(a)uwasa.fi, http://www.uwasa.fi/~hh/) Computer Centre, University of Vaasa, BOX 700, FI-65101 VAASA, Finland

2 1

Unknown user in users table, very odd, possible security hole
by Jorge Bastos 08 Feb '18

08 Feb '18

Howdy, I have a verrryyyyy odd thing happening. I have an user, unknown, that is in my users table, for a domain that isn't mine, and never was. This records keep's having last_login fields updated, so someway he's being able to login right? Odd to see that the field after the datetime fields (that is the failed_login_count) is zero, Is there any plugin or so to records the IP from which the logins are made? Where to search for this possible breach? Regards,

2 2

My roundcube email
by Sharon Canovali 07 Feb '18

07 Feb '18

Hi! I'm wondering if anyone can help me get my email straightened out. I've had challenges from the start and greatly fear I've lost business because it's the address on my business cards, but I am unable to receive ANY emails. The account is so clogged emails won't even load. I can't even clean it up, or do anything. 😔 I appreciate any help you can give. Thank you, so much.

4 5

Invalid request! No data was saved. after leaving browser window open
by Karol Augustin 31 Jan '18

31 Jan '18

Hi, I have a problem when user logs out from RC and leaves window open for some time (login screen after logout). When they want to log back they always get "Invalid request! No data was saved." error. I have reproduced it myself and I don't know why it is happening. I have noticed that the same error happens when I remove roundcube_sessid cookie from the browser. This cookie is marked to be deleted when the browser session ends. Is that possible that corresponding session ID is removed from the database when the window is still open and on re-login attempt the still existing cookie causes the error? There is nothing useful in the logs when error happens: Jan 31 09:19:02 mail roundcube: <lm76g1l0> Failed login for karol(a)augustin.pl from xx.xx.xx.xx in session <sessid> (error: 1) The "wrong password" log is the same with "error: 0" at the end. I am using Apache2 with php7.0. Thanks, Karol -- Karol Augustin karol(a)augustin.pl http://karolaugustin.pl/ +353 85 775 5312

1 0

IP in users table
by Jorge Bastos 27 Jan '18

27 Jan '18

Howdy, Is it possible, or is there any known plugin to add the login IP to the users table? Thanks in advanced,

1 0

Records in users table
by Jorge Bastos 27 Jan '18

27 Jan '18

Howdy, I'm curious about something! Is it supposed to have records in the users table, for failed attempts? I have a few record for login's that don't belong to me (they're spam attempts or so, not worried about that. Jorge,

1 0

password
by Kaseem Ismail 25 Jan '18

25 Jan '18

2 1

Roundcube Webmail Update 1.3.4 released
by Thomas Bruederli 14 Jan '18

14 Jan '18

Dear subscribers We proudly announce the next service release to update the stable version 1.3. It contains fixes to several bugs reported by our dear community members and makes Roundcube now fully compatible with PHP 7.2. See the full changelog in the release notes [1] on our Github download page. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net/download. And as usual: please do backup your data before updating! New: starting with version 1.3.3 we also publish Roundcube releases as Docker images. The images are still considered BETA and your feedback with regards to setup, configuration and documentation is much appreciated. Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.4

1 0

DKIM roundcube-1.3.3-1.remi.el6
by Eric Broch 12 Jan '18

12 Jan '18

Hello list, I'm using roundcube-1.3.3-1.remi.el6. I've set up DKIM in my SMTP server. The messages are being signed but are failing DKIM tests when I send in plain text from roundcubemail interface, but when I send the messages in html format from roundcubemail the messages pass DKIM tests. I'm testing by sending to a gmail account and port25.com, by the way. In Thuderbird and Squirrelmail the messages do not fail. If also tested my DKIM with keys with the opendkim package 'opendkim-testkey' and they pass. The the email headers have slight differences between those sent by Squirrelmail/Thunderbird and Roundcube in plain text. Any help would be appreciated in resolving this...maybe a configuration setting? -- Eric Broch White Horse Technical Consulting (WHTC)

1 0

"Must issue a STARTTLS command first"
by Jonathan Nichols 02 Jan '18

02 Jan '18

This might be a really simple issue, but my searches haven’t come up with a solution yet. (only one thread where a guy said he solved it but never elaborated.) Roundcube gives an error of "SMTP Error (250): Authentication failed.” and the log has "Must issue a STARTTLS command first." PHP 5.6.4 Postfix 2.11.3 Roundcube 1.3.3 Things used to work just fine but it’s been a while since I’ve used roundcube to send any emails, so i haven’t noticed until now.. No self-signed certificate. Thunderbird/Apple Mail work ok. config.inc.php has: $config['default_host'] = 'tls://%n’; #I’ve tried ‘tls://pile.pbp.net' as well $config['smtp_port'] = 587; $config['smtp_user'] = '%u'; $config['smtp_pass'] = '%p’; smtp_debug shows: [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 220 pile.pbp.net ESMTP Postfix (Ubuntu) [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Send: EHLO pile.pbp.net [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-pile.pbp.net [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-PIPELINING [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-SIZE 30480000 [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-ETRN [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-STARTTLS [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-ENHANCEDSTATUSCODES [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-8BITMIME [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250 DSN [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Send: RSET [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 530 5.7.0 Must issue a STARTTLS command first [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Send: QUIT [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 221 2.0.0 Bye Anything else that I should check? it is a slightly older ubuntu release (15.04) at this point. I’m looking at moving webmail to another machine with a newer install. Thank you! — jonathan

2 2

Timeout on login
by Roundcube 27 Dec '17

27 Dec '17

FreeBSD 11.1, roundcube 1.3.3, php70. When I try to login to any account I get: [27-Dec-2017 06:41:47 -0700]: <c7cd1119> IMAP Error: Login failed for user(a)example.com against mail.covisp.net from xx.xx.xx.xx. Empty startup greeting (mail.covisp.net:993) in) in errors.log I changed $config['default_host'] = 'tls://mail.covisp.net/'; to $config['default_host'] = 'imaps://mail.covisp.net/'; and now get "Could not connect to ssl://mail.covisp.net:993" Do I *have* to use localhost if the mail server is the same machine? I wanted the configuration to be the same across multiple machines, so I was using the FQDN instead.

1 0

Mark messages to be deleted instead of delete them
by Jorge Bastos 26 Dec '17

26 Dec '17

Hi, Is it possible to configure RC to behave like this: * Mark messages to be deleted, but don't move them to trash? Like outlook. Jorge,

2 2

search
by mick crane 25 Dec '17

25 Dec '17

hello. search feature ( 1.3.1 ) searches in the open directory is there somewhere an option to search in the whole INBOX ? Merry Christmas mick crane -- Key ID 4BFEBB31

2 2

Plugin new_user_identity is not filling field in SQL
by Spickiy Nikita 25 Dec '17

25 Dec '17

Hi, i try setting plugin new_user_identity. I adding public address book (ldap), settings for plugin. I analyzed log slapd server and made sure that plugin make request when i login to mail page. But fields in Identiies is empty. I can not understand in what trouble. Please, need help me. Rgds, Nikita Spickiy Skype - n.spickiy(a)outlook.com Asia/Novosibirsk, UTC +7

1 0

Need help with OOO plug-in
by Celso Maiolo 18 Dec '17

18 Dec '17

Hello Roundcube experts- wondering if a kind soul would offer some assistance in setting up a OOO plugin for a functioning Roundcube setup on a MacOS server? The basic setup is working fine. I’ve chosen a specific plugin but it may not be the best one? Also, for some reason when I perform a php -v the mcrypt module complains of a build mismatch? I reinstalled until blue in the face but no joy. Really appreciate and assistance and guidance. Thank you Celso Sent from my iPad

1 0

Roundcube 1.3 and _SERVER['HTTPS']
by Webert de Souza Lima 18 Dec '17

18 Dec '17

Hello everyone, I have recently upgraded Roundcube from release-1.2 to release-1.3. Roundcube is running behind HA-Proxy with SSL-Termination, which means that the traffic is encrypted between the client and haproxy but not between haproxy and roundcube(served by nginx). It seems that after the upgrade, the variable $_SERVER['HTTPS'] is not being set to 'on', and some plugins that use this variable are serving resources over http, which causes the browser to complain about Mixed Content and connection not fully secure. Not all domains are set to redirect to SSL port, so I can't force https, but the ones who use it are set up in nginx like this: server { listen 80; server_name webmail.domain_name; return 301 https://$server_name/; } server { listen 443; root /var/www; index index.php; server_name webmail.domain_name; access_log off; location / { try_files $uri $uri/ =404; } location ~ .php$ { root /var/www; fastcgi_pass php; fastcgi_read_timeout 120; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } the port 443 here is just a different port but traffic is not encrypted because the HA-Proxy does the encryption with the client. Any suggestions to fix this? Thanks! Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* *IRC NICK - WebertRLZ*

2 3

Login failure
by ＠lbutlr 17 Dec '17

17 Dec '17

I am trying to setup roundcube again and am having some issues. Empty startup greeting (mail.covisp.net:993) in /usr/local/www/roundcube/program/lib/Roundcube/rcube_imap.php on line 196 (POST /webmail.php?_task=login&_action=login) But the server in question works fine on other clients on port 993 (in fact, I am connecting to it right now in this client). config.inc.php: <?php $config['db_dsnw'] = 'mysql://rcuser:password@localhost/roundcube'; $config['enable_installer'] = false; $config['default_host'] = 'tls://mail.covisp.net/'; $config['default_port'] = 993; $config['imap_auth_type'] = 'PLAIN'; $config['imap_auth_type'] = null; $config['smtp_server'] = 'tls://mail.covisp.net/'; $config['smtp_port'] = 587; $config['smtp_user'] = '%u'; $config['smtp_pass'] = '%p'; $config['support_url'] = 'http://help.covisp.net'; $config['des_key'] = 'd9759cf7d0eb3102aeb30898'; $config['product_name'] = 'C O V I S P'; $config['plugins'] = array('archive', 'emoticons', 'help', 'hide_blockquote', 'identity_select', 'markasjunk', 'logon_page'); $config['spellcheck_engine'] = 'pspell'; $config['debug_level'] = 13; $config['sql_debug'] = true; $config['imap_debug'] = true; $config['smtp_debug'] = true; If it matters, I am not accessing the webmail via index.php, but rather have named that file webmail.php for testing purposes. -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

2 1

Roundcube with php7.2
by ＠lbutlr 14 Dec '17

14 Dec '17

I see that this is fixed in the Changelog on GitHub, but is there a patch for the current version in ports? (roundcube-1.3.3,1) Deprecated: idn_to_ascii(): INTL_IDNA_VARIANT_2003 is deprecated in /usr/local/www/roundcube/program/lib/Roundcube/rcube_utils.php on line 880 -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

1 0

Re: [RCU] Cron files
by Jorge Bastos 11 Dec '17

11 Dec '17

Thank you, That's what I had in mind. Daly would be fine for me have a few thousands but nothing the machine cannot handle, machines are meant to work :p Thank you all for the tips, -----Original Message----- From: Reindl Harald [mailto:h.reindl@thelounge.net] Sent: 11 de dezembro de 2017 10:21 To: Roundcube Users mailing list <users(a)lists.roundcube.net>; Jorge Bastos <mysql.jorge(a)decimal.pt> Subject: Re: [RCU] Cron files Am 11.12.2017 um 11:04 schrieb Jorge Bastos: > Hi Thomas, > > Thank you, so i'll add gc and cleandb, whould this be running daily? surely if it would be destructive once per week bould be the same problem as per day and if a simple cleanup job onece per day is a performance problem you have bigger ones > -----Original Message----- > From: users-bounces(a)lists.roundcube.net > [mailto:users-bounces@lists.roundcube.net] On Behalf Of Thomas > Bruederli > Sent: 10 de dezembro de 2017 14:56 > To: Roundcube Users mailing list <users(a)lists.roundcube.net> > Subject: Re: [RCU] Cron files > > On Thu, Dec 7, 2017 at 4:29 PM, Ulli Heist > <Ulli.Rainer.Heist(a)t-online.de> > wrote: >> Hello, >> >> sometimes I'm doing manuel: >> >> $SQL = "SELECT * FROM `contacts` WHERE `del` = 1 AND >> DATE_ADD(`changed`,INTERVAL 45 DAY) < NOW() "; >> >> ... > > We have `bin/cleandb.sh` in Roundcube that does exactly this ;-) > > This and the already mentioned `bin/gc.sh` should do it for periodic > clean-ups

1 0

Cron files
by Jorge Bastos 11 Dec '17

11 Dec '17

Hi, Which cron job's should be added for a good maintenance of RC? gc.sh and what else? Thanks,

3 3

Inbox is only 42 mb
by Toni Wallen 08 Dec '17

08 Dec '17

My inbox folder is only 42mb and will not allow more than 1 day of emails. How do you get the folders larger in size, the email box is 10 GB. Thank you, Toni Wallen, Office Manager Toni Wallen/ Office Manager toni(a)alltechmachining.com All-Tech Machining, Inc. Office: 251-649-4009/ Fax: 251-649-4061 13475 Laco Cooper Road, Wilmer, AL 36587 http://alltechmachining.com --- This email has been checked for viruses by AVG. http://www.avg.com

4 7

PHP 7.2 support
by Philip Iezzi 07 Dec '17

07 Dec '17

Hi there, How does PHP 7.2 support come along? Can Roundcube 1.3.3 already be used in production on PHP 7.2. So far, on my PHP 7.2.0 test instances, I didn't find a single glitch. Cheers, Philip

2 2

Re: [RCU] PHP 7.2 support
by Philip Iezzi 07 Dec '17

07 Dec '17

On 7 Dec 2017, at 01:29, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > why should any sane code running on 7.1 without warnings have a problem with 7.2 What a great answer! Because http://php.net/manual/en/migration72.deprecated.php (e.g. each() function deprecation) and http://php.net/manual/en/migration72.incompatible.php (e.g. E_WARNING on count()) - little things that even projects with an almost perfect code base stumble upon. The world is not perfect! Remember my wise words.

1 0

Re: [RCU] HP Warning: touch(): Unable to create file /var/sqlite/roundcube/roundcube.db because No such file or directory in /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php on line 38
by Sophie Loewenthal 07 Dec '17

07 Dec '17

And to prove you wrong :) root@mx10 /var/www # stat /var/www/webmail12.ex.co.uk <http://webmail12.ex.co.uk/> stat: cannot stat '/var/www/webmail12.ex.co.uk <http://webmail12.ex.co.uk/>': No such file or directory root@mx10 /var/www # stat /var/www/webmail12.ex.co.uk/program <http://webmail12.ex.co.uk/program> stat: cannot stat '/var/www/webmail12.ex.co.uk/program': <http://webmail12.ex.co.uk/program':> No such file or directory root@mx10 /var/www # stat /var/www/webmail12.ex.co.uk/program/lib <http://webmail12.ex.co.uk/program/lib> stat: cannot stat '/var/www/webmail12.ex.co.uk/program/lib': <http://webmail12.ex.co.uk/program/lib':> No such file or directory root@mx10 /var/www # stat /var/www/webmail12.ex.co.uk/program/lib/Roundcube/ <http://webmail12.ex.co.uk/program/lib/Roundcube/> stat: cannot stat '/var/www/webmail12.ex.co.uk/program/lib/Roundcube/': <http://webmail12.ex.co.uk/program/lib/Roundcube/':> No such file or directory root@mx10 /var/www # stat /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php <http://webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php> stat: cannot stat '/var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php': <http://webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php':> No such file or directory > On 7 Dec 2017, at 18:58, Reindl Harald <h.reindl(a)thelounge.net <mailto:h.reindl@thelounge.net>> wrote: > > > > Am 07.12.2017 um 18:56 schrieb Reindl Harald: >> Am 07.12.2017 um 18:54 schrieb Sophie Loewenthal: >>> Sorry this was written strangely. I meant: >>> >>> This was my thought, except the vhosts it complained of and the directory does not exist : /var/www/webmail12.ex.co.uk <http://webmail12.ex.co.uk/> <http://webmail12.ex.co.uk <http://webmail12.ex.co.uk/>> and was changed to /var/www/webmail10.ex.co.uk <http://webmail10.ex.co.uk/> <http://webmail10.ex.co.uk <http://webmail10.ex.co.uk/>> in the vhosts and the actual directory >> when PHP reports a error in the script /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php <http://webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php> it does exist - period >> at the moment PHP triggers that error that script is running > > and to prove the opposite provide the output of > > stat /var/www/webmail12.ex.co.uk <http://webmail12.ex.co.uk/> > stat /var/www/webmail12.ex.co.uk/program <http://webmail12.ex.co.uk/program> > stat /var/www/webmail12.ex.co.uk/program/lib <http://webmail12.ex.co.uk/program/lib> > stat /var/www/webmail12.ex.co.uk/program/lib/Roundcube/ <http://webmail12.ex.co.uk/program/lib/Roundcube/> > stat /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php <http://webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php> > > i bet everything none of them return any error

1 0

Re: [RCU] HP Warning: touch(): Unable to create file /var/sqlite/roundcube/roundcube.db because No such file or directory in /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php on line 38
by Sophie Loewenthal 07 Dec '17

07 Dec '17

This was my thought, except the vhosts it complained of and the directory does not exist : /var/www/webmail12.ex.co.uk -- On December 7, 2017 6:37:37 PM CET, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > >Am 07.12.2017 um 18:25 schrieb Sophie Loewenthal: >> Hi, >> >> I just migrated Roundcube install to a new server and it cannot find >the >> dB. The issue is that this file : >> >> webmail10.ex.co.uk/logs/errors:[29-Nov-2017 >> <http://webmail10.ex.co.uk/logs/errors:[29-Nov-2017> 12:13:54 >> Europe/Brussels] PHP Warning: touch(): Unable to create file >> /var/sqlite/roundcube/roundcube.db because No such file or directory >in >> /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php > >> <http://webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php> >on >> line 38 >> >> /var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php > >> <http://webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php> >> should be : >> >/var/www/webmail1*0*.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php > >> <http://webmail10.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php> >> >> Where in roundcube is this coded? I’ve grepped the whole directory >can >> did not find any reference except in the config file, which was >changed > >nowhere - that's pretty sure the vhost config of your webserver > >as you can see the touch was called at >/var/www/webmail12.ex.co.uk/program/lib/Roundcube/rcube_db_sqlite.php >and so /var/www/webmail12.ex.co.uk is the actice vhost > >that /var/sqlite/roundcube/ does not exist is a completly other problem > >p.s.: the horrible quting is a result of send HTML mail to lists

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users